Attackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot

According to Previdian, attackers are attempting to exploit the SSHole vulnerability in OpenSSH, which can enable logins to accounts with no usable password. The company observed the first attempt less than nine hours after the CVE was published and confirmed access to a root account on a honeypot running Alpine Linux and OpenSSH.