Ars Technica

Making SSH Private keys more secure

which talks about beefing up the security of the passphrase of your SSH private key. The article (as I understand it) discusses that by default, your SSH private key passphrase is essentially just a ...
PC World

OpenSSH patches information leak that could expose private SSH keys

If you’re connecting to servers over the secure shell (SSH) protocol using an OpenSSH client, you should update it immediately. The latest version patches a flaw that could allow rogue or compromised ...
Threat Post

Hackers Take Aim at SSH Keys in New Attacks

SSH private keys are being targeted by hackers who have stepped up the scanning of thousands of WordPress website in search of private keys. SSH private keys are being targeted by hackers who have ...
Ars Technica

Using SSH keys stored in keychain

I find myself hopping around from computer to computer occasionally - usually one that I haven't used before. I've got MobileMe syncing almost everything that I need (mail settings, bookmarks, and ...
Bleeping Computer

GitHub.com rotates its exposed private SSH key

GitHub has rotated its private SSH key for GitHub.com after the secret was was accidentally published in a public GitHub repository. The software development and version control service says, the ...
Network World

Millions of embedded devices use the same hard-coded SSH and TLS private keys

Thousands of routers, modems, IP cameras, VoIP phones and other embedded devices share the same hard-coded SSH (Secure Shell) host keys or HTTPS (HTTP Secure) server certificates, a study found. By ...
Bleeping Computer

Attackers Start Scans for SSH Keys After Report on Lack of SSH Security Controls

Crooks are mass-scanning online sites for directories containing SSH private keys so they can break into websites with any accidentally exposed credentials. SSH authentication can work via the classic ...
techtimes

GitHub's RSA SSH Private Key Leaks! Was It a Breach?

GitHub's RSA SSH private key was accidentally leaked to the public, as confirmed by the code hosting platform's CEO, Mike Hanley. An engineer from the Israeli company "Commun.it" uses his expertise in ...
Threat Post

Private SSH Key, Weak Default Credentials Removed From ExaGrid Appliances

ExaGrid has removed public-private pairings and weak, hardcoded default credentials from its disk-backup appliances. ExaGrid has removed a private SSH key and weak, hardcoded credentials shipping with ...
ZDNet

OpenSSH gets protection against attacks like Spectre, Meltdown, Rowhammer, and Rambleed

The OpenSSH project is getting protection against side-channel attacks that are known to leak data from a computer's memory, and allow malicious threat actors to steal sensitive information. The ...
Computerworld

OpenSSH patches leak that could expose private SSH keys

If you’re connecting to servers over the secure shell (SSH) protocol using an OpenSSH client, you should update that client immediately. The latest version patches a flaw that could allow rogue or ...