vulnerabilities
Over 500 instances are publicly exposed and attacks are happening in the wild
Victims "predominantly belong to large enterprises and critical infrastructure operators"
Users advised to immediately update or restrict SSH server access
China nexus group suspected as the attackers behind attacks
Phishing kits going to great lengths to personalise attacks
A CVSS rated 9.9 vulnerability needs an urgent fix - but is it sufficient?
"There are no other meaningful workarounds that do not involve updating and restarting..."
Bug lets attackers to bypass even accounts with multi-factor authentication enabled.
Lighter than last month, mercifully, but still some urgent fixes.