BleepingComputer

New SSH-Snake malware steals SSH keys to spread across the network

A threat actor is using an open-source network mapping tool named SSH-Snake to look for private keys undetected and move laterally on the victim infrastructure. SSH-Snake was discovered by the Sysdig ...
techtarget

SSH private keys: How do threat actors find exposed keys?

Cybersecurity vendor Wordfence recently reported that it detected a spike in scanning for SSH private keys. How can threat actors find these keys? What should enterprises do to protect them? When ...
bankinfosecurity

GitHub Replaces Private RSA SSH Key After Public Exposure

GitHub says it has replaced its private RSA SSH host key after discovering it was being inadvertently exposed online. Microsoft-owned GitHub is a widely used hosting service for software development ...
Dark Reading

GitHub's Private RSA SSH Key Mistakenly Exposed in Public Repository

GitHub, a Microsoft subsidiary has replaced its SSH keys after someone inadvertently published its private RSA SSH host key part of the encryption scheme in an open GitHub repository. While some may ...
Ars Technica

In a first, cryptographic keys protecting SSH connections stolen in new attack

For the first time, researchers have demonstrated that a large portion of cryptographic keys used to protect data in computer-to-server SSH traffic are vulnerable to complete compromise when naturally ...
ZDNet

Two malicious Python libraries caught stealing SSH and GPG keys

The Python security team removed two trojanized Python libraries from PyPI (Python Package Index) that were caught stealing SSH and GPG keys from the projects of infected developers. The two libraries ...