The moderate-severity vulnerability has been observed being exploited in the wild by Chinese APT Velvet Ant.
Researchers from Qualys say regreSSHion allows attackers to take over servers with 14 million potentially vulnerable OpenSSH instances identified.
In the past, virtual private networks were mainly used by companies to securely link remote branches together or connect roaming employees to the office network, but today they're an important service for consumers too.
The group plans to sell more Equation exploits and cyberespionage data through a subscription-based service
Researchers believe other attackers will start to exploit the same SMB flaw as the WannaCry ransomware
Based on a new risk assessment process, some apps that want to use Google's identity services might need to undergo a review
The new ransomware program is distributed via mass email spam sent by the Necurs botnet
The vulnerabilities could allow hackers to modify routers' settings through cross-site request forgery attacks
All SHA-1 certificates that chain back to publicly trusted certificate authorities will be blocked, but enterprise and self-signed certificates won't be affected.
Microsoft fixed critical vulnerabilities in Windows, Office, Edge, Internet Explorer, and its malware protection engine
