CWPdoor

Weekly Cybersecurity Recap: OpenSSH SSHole Exploitation, Debian APT Root RCE, Zyxel Zero-Day, and AI-Driven Attacks

This week's cybersecurity news highlights active exploitation attempts against an OpenSSH flaw allowing passwordless logins on specific Linux configurations. A trojanized Control Web Panel update mechanism is distributing the stealthy CWPdoor backdoor, while a Debian and Ubuntu APT vulnerability enables root-level code execution under retry conditions. Zyxel patched a zero-day in its GS1900 switches exploited by Kapibala to compromise nearly 1,000 devices. CERT-In reported AI-assisted Crafty Falcon targeting financial organizations with re-attacks timed for low-monitoring periods. Additional incidents include hijacked cPGuard updates, mSecure password manager issues, Qilin ransomware claims, and a CPython zero-day affecting AI sandboxes.