✓ AI summary
Summary of reporting by Ars Technica • • 1 min read
4 Wire-neutral provisional

✓ No loaded language, vague sourcing, or framing detected.

Active Exploitation of Critical Linux Vulnerability Reported by Researchers

A critical vulnerability in Linux systems, known as *sshole, is being actively exploited by hackers for unauthorized access to privileged accounts. Security firm Greynoise reported that a group named GT10 has targeted its honeypots in Southeast Asia, indicating a sophisticated intrusion method.

Companies
Greynoise

Researchers have identified a critical vulnerability in Linux systems, referred to as *sshole, which allows hackers to gain unauthorized access to privileged accounts. This vulnerability arises from the interaction between OpenSSH and the musl code library. Security firm Greynoise reported that a group called GT10 has been actively exploiting this vulnerability, particularly targeting systems in Southeast Asia. The group has demonstrated advanced intrusion techniques, raising concerns about the potential for widespread compromise of Linux machines.

Key facts

  • The vulnerability is named *sshole and affects many Linux systems.
  • It allows unauthorized access to high-privilege accounts.
  • The vulnerability was publicly disclosed on November 2, 2026.
  • Greynoise reported attacks by a group named GT10.
  • The group's tools include a backdoor with Chinese language comments.
Read the full story at Ars Technica

A short AI summary in our own words. The reporting belongs to Ars Technica; we don't reproduce it.

Annotating as

No note attached

on this article.

Original vs. Neutral

Original Headline

Vulnerability that lets hackers SSH into Linux devices is under active exploitation

Neutral Headline

Active Exploitation of Critical Linux Vulnerability Reported by Researchers