A security researcher recently uncovered a vulnerability, dubbed sshole, that allows hackers to log in to Linux accounts even when passwords are disabled, using a clever combination of AI-powered testing and an unexpected twist in the OpenSSH code. This flaw was discovered through 17,600 authentication tests run by AI agents.
OpenSSH 10.6p2 Critical workaround for alpine without PAM