# ssh Published articles for ssh. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms DevFeed: [Forensic Walkthrough of a Compromised MikroTik Router and Its Persistence Mechanisms]() Original publisher: [Read original article]() Author: j2sw Published: 2026-09-16T13:32:46Z Content type: article Language: en Sources: [Justin Wilson (j2sw)]() Topics: [MikroTik](), [Vulnerabilities](), [Persistence](), [remote access](), [backdoor](), [ssh]() Tags: [backdoor](), [cybersecurity](), [firmware](), [forensics](), [incident-response](), [mikortrick](), [mikrotik](), [network-operations](), [network-security](), [persistence](), [remote-access](), [security](), [ssh](), [vulnerabilities]() ### AI overview A forensic walkthrough examines a compromised MikroTik router in a honeypot. The intruders established persistence and remote access through scheduled tasks, scripts, new users, and tunnels. The author suspects, but cannot prove, that the compromise involved the MikroTrick RouterOS vulnerability chain. ### Source excerpt What it looks like when an intruder tries to make your own router work against you. A note before we start: Anything in this post that could identify my network, my organization, or my router's real hostname and IP address has been redacted or made generic. The attacker's own infrastructure, such as IP addresses, ports, ... Read more The post A first-hand forensic walkthrough of a real router compromise appeared first on Justin Wilson (j2sw). ## Security Week 2638: опасные уязвимости в роутерах MikroTik DevFeed: [Security Week 2638: опасные уязвимости в роутерах MikroTik]() Original publisher: [Read original article]() Author: Kaspersky\_Lab ("Лаборатория Касперского") Published: 2026-09-14T15:06:43Z Content type: news Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [MikroTik](), [Security](), [CVE-2026-86060](), [ssh]() Tags: [2026](), [chromium](), [cve](), [cve-2026-86060](), [gpt](), [microsoft](), [mikrotik](), [openai](), [security](), [ssh](), [tag-9fe8963de219]() ### AI overview The article reports three vulnerabilities in MikroTik routers, including SSH authentication bypass, privilege escalation, and a denial-of-service issue. Two vulnerabilities were actively exploited, and MikroTik released patches for affected RouterOS versions. The report also describes AI-assisted vulnerability discovery involving OpenAI GPT models and briefly mentions vulnerabilities in WeChat and a large Microsoft patch release involving Chromium. ### Source excerpt На прошлой неделе команда CERT из Польши обнародовала информацию о трех уязвимостях в роутерах MikroTik, две из которых активно используются в реальных атаках как минимум со второго сентября. Взлом роутеров возможен в том случае, если на устройстве разрешен доступ по протоколу SSH из Интернета. По данным на пятое сентября в сети наблюдалось более 122 тысяч потенциально уязвимых устройств. Две наиболее опасные уязвимости имеют одинаковый рейтинг 9,2 балла по шкале CVSS. Проблема CVE-2026-67276 позволяет обойти аутентификацию по SSH в том случае, если атакующему известно имя пользователя и модуль публичного ключа. Ошибка CVE-2026-86060, в свою очередь, открывает возможность эскалации привилегий при использовании имени пользователя, содержащего некорректные символы. Читать далее ## Configuring Management IP Addresses to Virtual Network Devices DevFeed: [Configuring Management IP Addresses to Virtual Network Devices]() Original publisher: [Read original article]() Published: 2026-09-14T05:29:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [networking](), [configuration](), [Orchestration](), [Vagrant](), [Cloud](), [ssh]() Tags: [cli](), [cloud](), [devices](), [dhcp](), [ip](), [ipv4](), [ipv6](), [management](), [netlab](), [network](), [networking](), [orchestration](), [server](), [ssh]() ### AI overview The article explains how to assign predictable management IP addresses to virtual network devices. It contrasts manual console-based setup with automated assignment through orchestration, containers, DHCPv4/DHCPv6, custom Vagrant boxes, and IPv6 mechanisms such as SLAAC. ### Source excerpt It goes without saying that if you want to configure (virtual) network devices with any semi-sane configuration mechanism1, the device must have a working IP address. Here's the time-honored method2 to assign an IP address to a virtual network device: Start the virtual machine (using a GUI)3 Open a new window: either a telnet session to the virtual console port or a full-blown virtual console (GUI) session. Manually configure the IP address, the SSH server, and the user credentials on the first interface. Read more ... ## Open-Source Project Brings Full iOS 27 Virtualization to Apple Silicon DevFeed: [Open-Source Project Brings Full iOS 27 Virtualization to Apple Silicon]() Original publisher: [Read original article]() Author: Sergio De Simone Published: 2026-09-12T16:00:00Z Content type: news Language: en Sources: [InfoQ]() Topics: [iOS](), [Tooling](), [Command-line interface](), [debugging](), [App]() Tags: [apple](), [cli](), [debugging](), [development](), [ios](), [ios-27-virtualization](), [iphone](), [kernel](), [macos](), [mobile](), [mobile-testing](), [news](), [open-source](), [research](), [reverse-engineering](), [security](), [ssh](), [testing](), [virtualization](), [xcode]() ### AI overview vphone-cli runs a full iOS 27 system as a virtual machine on Apple Silicon using Apple's Virtualization.framework. The article contrasts it with the Xcode iPhone Simulator and highlights uses in security research, reverse engineering, debugging, and automated testing. ### Source excerpt The open-Source project vphone-cli enables a full iOS 27 system to run as a virtual machine on Apple Silicon. Built on Apple's own Virtualization.framework rather than traditional emulation, the project opens up new possibilities for security research, reverse engineering, and automated iOS testing. By Sergio De Simone ## 8 Reasons Your Raspberry Pi Wi-Fi is Slow (and How to Fix it) DevFeed: [8 Reasons Your Raspberry Pi Wi-Fi is Slow (and How to Fix it)]() Original publisher: [Read original article]() Author: Thomas Dyan Published: 2026-09-12T05:00:00Z Content type: tutorial Language: en Sources: [RaspberryTips]() Topics: [Network](), [Network Configuration](), [Linux](), [Command-line interface](), [ssh](), [Terminal](), [Operating system]() Tags: [command-line](), [how-to](), [how-to-tutorials](), [linux](), [network](), [network-configuration](), [raspberry-pi](), [raspberry-pi-os](), [ssh](), [time]() ### AI overview A practical guide to diagnosing and fixing slow Raspberry Pi Wi-Fi. It focuses on common causes such as Wi-Fi power-saving settings, weak signal, incorrect country code, older hardware, and network configuration issues, with initial troubleshooting steps and command-line guidance. ### Source excerpt Whenever my Raspberry Pi is slow over Wi-Fi, I've learned that the problem is usually not the Wi-Fi network itself. Most of the time, it comes down to the Pi's setup. And when you look into it, it's often one of the same few causes. If you're having the same issue, here are the first... ## Unlock a LUKS root over SSH on Fedora and Red Hat Enterprise Linux DevFeed: [Unlock a LUKS root over SSH on Fedora and Red Hat Enterprise Linux]() Original publisher: [Read original article]() Author: Josephine Pfeiffer Published: 2026-09-11T13:01:51Z Content type: tutorial Language: en Sources: [Red Hat](), [Red Hat Developer]() Topics: [Fedora](), [Linux](), [OpenSSH](), [ssh](), [systemd](), [datacenter](), [Network](), [Server]() Tags: [config](), [datacenter](), [developer](), [how-to](), [linux](), [network](), [red-hat](), [remote](), [rhel](), [server](), [ssh](), [systemd]() ### AI overview This tutorial explains how to unlock an encrypted LUKS root remotely over SSH on Fedora and Red Hat Enterprise Linux. It describes adding NetworkManager and an SSH server to the dracut initramfs, configuring networking, rebuilding the initramfs, and using the rd.neednet=1 kernel argument. ### Source excerpt An encrypted server in a datacenter reboots and stops in the initramfs, waiting for a passphrase at a console nobody is sitting at. 3 commands and a kernel argument get NetworkManager and sshd into a Fedora or Red Hat Enterprise Linux (RHEL) initramfs, so a remote server with an encrypted root can be unlocked over the network. The post Unlock a LUKS root over SSH on Fedora and Red Hat Enterprise Linux appeared first on Red Hat Developer. ## MikroTik router flaws allow takeover without a password DevFeed: [MikroTik router flaws allow takeover without a password]() Original publisher: [Read original article]() Author: Pieter Arntz Published: 2026-09-08T09:49:16Z Content type: news Language: en Sources: [Malwarebytes]() Topics: [Cybersecurity](), [Vulnerabilities](), [Networks](), [passwords]() Tags: [authentication](), [cve-2026-67276](), [cve-2026-86060](), [cybersecurity](), [mikrotik](), [news](), [ssh](), [update](), [vulnerabilities]() ### AI overview Attackers are actively exploiting two MikroTik RouterOS flaws, dubbed MikroTrick, to bypass SSH authentication and escalate privileges on internet-exposed routers. The article recommends promptly installing RouterOS updates and restricting SSH and other remote-management access. ### Source excerpt Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet. ## Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston DevFeed: [Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston]() Original publisher: [Read original article]() Author: Lyle Smith Published: 2026-09-03T14:57:12Z Content type: news Language: en Sources: [StorageReview.com]() Topics: [Proxmox](), [virtualization](), [Cloud]() Tags: [2026](), [cloud](), [customers](), [enterprise](), [outages](), [production](), [proxmox](), [software](), [ssh](), [support]() ### AI overview Proxmox will begin offering 24/7 global enterprise support on October 19, 2026, covering Proxmox Virtual Environment, Proxmox Backup Server, and Proxmox Datacenter Manager. It is also establishing Proxmox North America Inc. in Kingston, Ontario, to support customers and partners in the United States and Canada. Premium subscribers will receive around-the-clock coverage, while Standard subscribers are scheduled for a later Q4 2026 onboarding window. ### Source excerpt Proxmox is making a major expansion to its enterprise operations, moving to 24/7 global support beginning October 19, 2026, while establishing a new North American subsidiary in Kingston, Ontario. The new support covers Proxmox Virtual Environment, Proxmox Backup Server, and Proxmox Datacenter Manager, giving enterprise customers direct access to Proxmox engineers at any time of The post Proxmox Enterprise Support Goes 24/7 on October 19; North American Subsidiary Opens in Kingston appeared first on StorageReview.com. ## MUST READ: Git - Going Pro DevFeed: [MUST READ: Git - Going Pro]() Original publisher: [Read original article]() Published: 2026-09-01T05:31:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [Git](), [GitHub](), [GitHub Actions](), [ssh](), [Pull Request](), [Command-line interface]() Tags: [article](), [blog](), [cli](), [git](), [github](), [github-actions](), [reviews](), [ssh](), [worth-reading]() ### AI overview A recommendation for Tony Mattke's "Going Pro" article, which covers Git fundamentals and professional practices including SSH keys, pre-commit hooks, GitHub Actions, linting, branch protection, pull-request reviews, and the gh CLI. ### Source excerpt I sure wish Tony Mattke had started publishing his Git-related blog posts in 2017 when I was still struggling with the basics. In his latest Going Pro article he covers: Using SSH keys with Git and GitHub Pre-commit hooks GitHub Actions and linting GitHub Branch protection PR reviews gh CLI Absolutely worth every second you'll spend reading the article! ## RFC 10042: Post-Quantum/Traditional Hybrid Key Exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for Use in SSH DevFeed: [RFC 10042: Post-Quantum/Traditional Hybrid Key Exchange with the Module-Lattice-Based Key-Encapsulation Mechanism for Use in SSH]() Original publisher: [Read original article]() Published: 2026-08-31T00:00:00Z Content type: article Language: fr Sources: [Blog de Stéphane Bortzmeyer]() Topics: [ssh](), [Post-Quantum](), [Security](), [Internet Engineering Task Force (IETF)]() Tags: [ecdh](), [hybrid](), [ietf](), [post-quantum](), [quantum](), [rfc](), [security](), [ssh]() ### AI overview This French article discusses RFC 10042, which standardizes post-quantum/traditional hybrid key exchange for SSH. It explains the use of ML-KEM with traditional algorithms to protect SSH communications against quantum-capable attackers and weaknesses in post-quantum algorithms. ### Source excerpt Tout le monde (et son chat) se met à la cryptographie post-quantique en ce moment et plus précisément à des systèmes hybrides, c'est-à-dire utilisant à la fois un algorithme traditionnel (comme ECDH) et un algorithme post-quantique (comme ML-KEM). Ce RFC décrit l'échange de clés (echange-cles.html) avec un système hybride dans le protocole SSH. ## The lingering legacy of 'reserved' ports DevFeed: [The lingering legacy of 'reserved' ports]() Original publisher: [Read original article]() Author: George Michaelson Published: 2026-08-27T23:29:48Z Content type: article Language: en Sources: [APNIC Blog]() Topics: [Protocol (disambiguation)](), [Network](), [Process](), [Operating system](), [Unix](), [ssh](), [Firewall](), [Internet]() Tags: [dns](), [firewall](), [history](), [internet](), [network](), [ntp](), [opinion](), [process](), [processes](), [ssh](), [systems](), [tech-matters]() ### AI overview An exploration of why reserved TCP and UDP ports persist, tracing conventions such as ports 22, 53, 80, and 443 to early Internet services on multi-user systems. It explains the relationship between ports, protocol-specific daemons, operating-system administration, and modern firewall and service-discovery practices. ### Source excerpt Modern service discovery mechanisms increasingly allow services to run on arbitrary ports, yet DNS may remain the one protocol that cannot fully escape its dependency on the long-established convention of port 53. ## Tailscale PAM beta: Manage connectivity and privileged access in one place DevFeed: [Tailscale PAM beta: Manage connectivity and privileged access in one place]() Original publisher: [Read original article]() Author: Smriti Sharma Published: 2026-08-27T14:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [Authorization](), [Security](), [Kubernetes](), [OpenSSH](), [API](), [Databases](), [web applications](), [incident]() Tags: [api](), [compliance](), [databases](), [external](), [identity](), [incident](), [infrastructure](), [kubernetes](), [logs](), [production](), [security](), [servers](), [slack](), [ssh](), [web-applications]() ### AI overview Tailscale PAM beta brings privileged access management into the Tailscale admin console. It provides resource-specific access policies, just-in-time approvals through Slack, and session logs and recordings for audits and investigations across databases, servers, Kubernetes clusters, and web applications. ### Source excerpt Just-in-time access, resource policies, and session auditing, right where you need them. ## Aperture GA: Building a home(lab) for agentic AI DevFeed: [Aperture GA: Building a home(lab) for agentic AI]() Original publisher: [Read original article]() Author: Remy Guercio Published: 2026-08-26T16:00:00Z Content type: release Language: en Sources: [Blog on Tailscale]() Topics: [AI Bots](), [AI Chat]() Tags: [agentic-ai](), [agents](), [ai](), [announcement](), [api-keys](), [homelab](), [llm](), [mcp](), [model-context-protocol](), [models](), [networking](), [ssh]() ### AI overview Tailscale announces Aperture's general availability, adding purchasable model tokens, an upgraded chat experience, and MCP endpoints for managing tailnets and accessing nodes with Tailscale SSH. ### Source excerpt Adding model tokens, chat Projects, MCP controls, and more. ## The Best WordPress Hosting in 2026 DevFeed: [The Best WordPress Hosting in 2026]() Original publisher: [Read original article]() Author: Paul Andrew Published: 2026-08-26T09:25:27Z Content type: comparison Language: en Sources: [Speckyboy Design Magazine]() Topics: [WordPress](), [WordPress Hosting](), [hosting](), [Caching](), [Security](), [dev-tools](), [ssh](), [SSL]() Tags: [caching](), [comparison](), [developer-tools](), [hosting](), [performance](), [pricing](), [security](), [ssh](), [ssl](), [support](), [tools](), [web-hosting](), [wordpress](), [wordpress-hosting]() ### AI overview A comparison of six WordPress hosting providers--WordPress.com, Bluehost, Pressable, Cloudways, Kinsta, and SiteGround--covering performance, traffic handling, uptime, pricing, support, management, security, backups, staging, caching, CDN access, and developer tools. It explains that different site types have different hosting needs and provides recommendations for common WordPress projects. ### Source excerpt Compare the best WordPress hosting providers for 2026, including pricing, performance, tools, support, and options for different types of sites. The post The Best WordPress Hosting in 2026 appeared first on Speckyboy Design Magazine. ## WordPress.com Education launches free classroom plans for teachers and students DevFeed: [WordPress.com Education launches free classroom plans for teachers and students]() Original publisher: [Read original article]() Author: L. Jeffrey Zeldman Published: 2026-08-17T15:12:09Z Content type: release Language: en Sources: [Jeffrey Zeldman]() Topics: [WordPress](), [Website]() Tags: [automattic](), [blogs-and-blogging](), [career](), [community](), [courseware](), [creativity](), [education](), [free](), [free-software](), [launches](), [learning](), [open-source](), [platforms](), [plugins](), [publishing](), [sftp](), [software](), [ssh](), [students](), [teaching](), [websites](), [wordpress]() ### AI overview Automattic has launched WordPress.com Education, a free classroom product that gives students WordPress.com domains, optional .blog or .art domain names, and plugin support. Teachers can provide access free for the first year without entering payment details. ### Source excerpt Meet WordPress.com Education, a new, free product for teachers and students. The post For students who make websites appeared first on Jeffrey Zeldman Presents. ## Developer secrets management that keeps delivery moving DevFeed: [Developer secrets management that keeps delivery moving]() Original publisher: [Read original article]() Author: info@1password.com (Robert Imeson) Published: 2026-08-17T00:00:00Z Content type: article Language: en Sources: [Blog on 1Password Blog]() Topics: [Security](), [GitHub](), [API keys](), [Software Engineering](), [OpenSSH](), [Database]() Tags: [ai](), [api-keys](), [cloud](), [code](), [developer](), [developers](), [development](), [github](), [incident](), [logs](), [secrets](), [security](), [software](), [software-development](), [ssh](), [tokens](), [unified-access]() ### AI overview The article examines how unmanaged developer credentials--such as API keys, cloud credentials, SSH keys, and tokens--can remain outside approved security controls. It argues that secrets management must reduce workflow friction and address credentials at the point where developers create and use them, while enabling rotation, revocation, auditing, and reporting. ### Source excerpt In March 2025, attackers compromised a GitHub Action used in the development pipelines of more than 23,000 repositories. The malicious code exposed API keys, cloud credentials, SSH keys, and other tokens in workflow logs. Affected teams were advised to review their workflow runs and rotate any credentials the logs exposed. Affected organizations had to determine which credentials had been exposed, what those credentials could reach, and how to replace every one of them without halting development. Many could not confidently answer the first question alone. The incident illustrates the problem those responsible for a team's credentials face today: the credentials that carry the most risk are often the ones nobody is tracking. Security tools cannot govern credentials they never see Unmanaged credentials are simply a byproduct of the modern software development environment, where developers are under pressure to constantly ship code. A developer standing up an application needs a database password or an API key immediately, and the fastest way to supply one is a .env file on the local machine, an SSH key in a home directory, or a token pasted into a pipeline variable. Each choice keeps work moving, and each one creates a working credential that exists outside any approved system, where no one responsible for keeping projects, credentials, and access safe can rotate, revoke, or audit it. Traditional secrets management can leave this gap open because it starts on the wrong side of it. Conventional tools provide a secure destination but depend on developers to bring credentials to it, so governance begins only after migration. When a security process adds friction, teams find workarounds. 1Password's research found that 43% of developers don't use a dedicated secrets manager or vault at all, managing secrets through a mix of secure and unsecure means instead. As a result, credentials remain outside the controls, reporting, and rotation processes intended to protect them. ## The Best WordPress Developer Hosting Packages in 2026 DevFeed: [The Best WordPress Developer Hosting Packages in 2026]() Original publisher: [Read original article]() Author: Paul Andrew Published: 2026-08-12T18:20:15Z Content type: comparison Language: en Sources: [Speckyboy Design Magazine]() Topics: [WordPress Hosting](), [WordPress](), [hosting](), [Deployment](), [Monitoring](), [GitHub](), [Caching](), [API](), [Command-line interface](), [ssh](), [Git](), [Databases]() Tags: [caching](), [cli](), [database](), [deployment](), [git](), [github](), [monitoring](), [performance](), [php](), [security](), [server](), [ssh](), [tools](), [web-hosting](), [wordpress](), [wordpress-developer](), [wordpress-hosting]() ### AI overview A comparison of WordPress hosting packages for developers, focusing on staging, server access, Git and GitHub workflows, deployment, performance, backups, security, monitoring, team management, scaling, and cost. ### Source excerpt The best WordPress hosting for developers in 2026. Tools, performance, security, and scaling you can rely on. The post The Best WordPress Developer Hosting Packages in 2026 appeared first on Speckyboy Design Magazine. ## How to Add the 007revad Community Package Source to Synology DSM DevFeed: [How to Add the 007revad Community Package Source to Synology DSM]() Original publisher: [Read original article]() Author: Rob Andrews Published: 2026-08-10T16:00:01Z Content type: tutorial Language: en Sources: [NAS Compares]() Topics: [Synology](), [synology nas](), [Package Management](), [Script](), [Homelab](), [Open Source](), [Hardware](), [Transcodings](), [GitHub](), [Network]() Tags: [007revad](), [007revad-mod](), [007revad-synology](), [airconnect](), [aqc-unlock](), [command-line](), [compatibility](), [configuration](), [data-recovery](), [dave-russell](), [documentation](), [drive](), [dsm-7](), [github](), [hardware](), [homebridge](), [homelab](), [librespeed](), [nas](), [nas-apps](), [nas-mods](), [nas-software](), [nascompares](), [network](), [network-attached-storage-nas](), [ookla-speedtest](), [open-source](), [openspeedtest](), [package-management](), [plex](), [projects](), [ssh](), [storage](), [synocr](), [synology](), [synology-007revad](), [synology-10gbe](), [synology-2-5g-driver](), [synology-2026](), [synology-2027](), [synology-5gbe-driver](), [synology-add-ons](), [synology-apps](), [synology-community](), [synology-community-packages](), [synology-container-manager](), [synology-nas](), [uncategorised]() ### AI overview This tutorial explains how to add 007revad's unofficial community package source to Synology DSM Package Center. It describes how the source makes selected community packages easier to discover, install, and update, while noting that package availability depends on the NAS model, CPU architecture, and DSM version. ### Source excerpt A New and Easier Way to Mod Your Synology NAS Synology's gradual shift towards business and enterprise users has changed what some home, enthusiast and homelab users can do with DSM, particularly when it comes to 3rd-party drives, SSDs, network adapters, hardware transcoding and other unofficial modifications. Community-developed scripts have helped restore or extend many [...] ## How Two Small Bugs Led to a Critical Vulnerability and a Cryptography Audit of Go's SSH Library DevFeed: [How Two Small Bugs Led to a Critical Vulnerability and a Cryptography Audit of Go's SSH Library]() Original publisher: [Read original article]() Author: info@goteleport.com (Rob Picard) Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [cryptographic audit](), [Go Language](), [ssh](), [Security](), [vulnerability]() Tags: [analysis](), [audit](), [bugs](), [cryptographic-audit](), [cryptography](), [go](), [security](), [security-engineering](), [ssh](), [vulnerability]() ### AI overview Teleport describes a critical vulnerability caused by two interacting bugs in its SSH certificate validation logic and reports that NCC Group conducted a cryptographic audit of Go's SSH package. The audit resulted in nine CVEs and identified subtle issues requiring expert review. ### Source excerpt Learn about NCC Group's cryptographic audit of Go's SSH package. ## ChainDrop: Inside a Self-Propagating npm Worm DevFeed: [ChainDrop: Inside a Self-Propagating npm Worm]() Original publisher: [Read original article]() Author: Unit 42 Published: 2026-08-06T22:26:39Z Content type: article Language: en Sources: [Unit 42]() Topics: [ChainDrop](), [npm](), [Malware](), [C2](), [Ethereum](), [GitHub Actions](), [GitHub](), [CI/CD](), [Security]() Tags: [blockchain](), [c2](), [chaindrop](), [ci](), [claude-code](), [developer-tooling](), [ethereum](), [github](), [github-actions](), [high-profile-threats](), [infrastructure](), [malware](), [security](), [ssh](), [supply-chain](), [tokens]() ### AI overview This article analyzes ChainDrop, a self-propagating npm worm that infected more than 400 packages and threatened developer workstations, CI pipelines, cloud environments and downstream users. It describes credential and token theft, GitHub Actions runner memory extraction, package republishing, persistence through developer and AI coding tools, blockchain-based C2 resolution, and C2 reconfiguration through an Ethereum transaction. ### Source excerpt Analysis of ChainDrop, an npm supply chain worm extracting GitHub Actions runner secrets and using Ethereum smart contracts for C2 routing. The post ChainDrop: Inside a Self-Propagating npm Worm appeared first on Unit 42. ## Scrapli vs Nornir: What's the Difference DevFeed: [Scrapli vs Nornir: What's the Difference]() Original publisher: [Read original article]() Author: Roger Perkin Published: 2026-08-06T11:08:45Z Content type: comparison Language: en Sources: [Roger Perkin Network Automation Consultant]() Topics: [Python](), [Network](), [async](), [NETCONF](), [ssh]() Tags: [async](), [netconf](), [network-automation](), [python](), [scrapli](), [ssh](), [vs]() ### AI overview This comparison explains that Scrapli and Nornir address different layers of Python network automation rather than directly competing. It describes Scrapli as a connection-focused library for communicating with individual network devices and notes its support for SSH, Telnet, NETCONF, synchronous and asynchronous operation, and structured output. ### Source excerpt If you've spent any time in the Python network automation world, you'll have bumped into both Scrapli and Nornir. They come up in the same conversations, the same blog posts and the same job specs, so it's natural to line them up and ask: which one should I use? It's a fair question, but it's built on a slightly ... ## I Tried MX Linux on Raspberry Pi: Here's How to Install It DevFeed: [I Tried MX Linux on Raspberry Pi: Here's How to Install It]() Original publisher: [Read original article]() Author: Dhairya Parikh Published: 2026-08-06T03:06:03Z Content type: tutorial Language: en Sources: [RaspberryTips]() Topics: [Linux](), [xfce](), [Disk image](), [Hardware](), [GUI](), [ssh]() Tags: [flash](), [guide](), [hardware](), [how-to-tutorials](), [linux](), [monitor](), [os](), [pi-4](), [raspberry-pi](), [raspberry-pi-os](), [ssh](), [storage](), [tools](), [tutorial]() ### AI overview A hands-on guide to installing MX Linux on supported Raspberry Pi models. It covers the required hardware and software, downloading the MX Linux image, flashing it to an SD card or USB stick, completing the first boot, and performing initial setup. The distribution is based on Raspberry Pi OS and uses XFCE as its desktop environment. ### Source excerpt I've wanted to try MX Linux on a Raspberry Pi for a long time, but until recently there simply wasn't an official way to install it. Now that that's changed, it's finally possible to see if this distribution is a good fit for the Pi. In this guide, I'll show you how to get it... ## On building scalable control planes DevFeed: [On building scalable control planes]() Original publisher: [Read original article]() Author: werner@allthingsdistributed.com (Dr. Werner Vogels) Published: 2026-08-04T14:00:00Z Content type: article Language: en Sources: [All Things Distributed]() Topics: [distributed-systems](), [Amazon Web Services](), [Amazon EC2](), [DSQL](), [Cloud]() Tags: [aws](), [cloud](), [distributed-systems](), [dsql](), [infrastructure](), [kubernetes](), [posts](), [servers](), [ssh]() ### AI overview This article explores the engineering of scalable control planes through Zak van der Merwe's experience building them at AWS, first for EC2 and later for DSQL. It explains how control planes record intended state and reconcile it with actual state, bringing together difficult distributed-systems problems and influencing whether services can survive growth. ### Source excerpt Zak van der Merwe has spent his entire career at AWS building control planes. First for EC2 and now for DSQL. On the surface, the control plane looks quite boring: it records what should exist and reconciles that with what actually does. Nobody leaves school dreaming of building one, but Zak will be the first to tell you that if you like solving hard problems in distributed systems, there are few better places to be. It's where many of those hard problems converge, and where the decisions you make determine whether a service survives its own growth. ## Linux ssh-keygen: Set Up SSH Key Authentication the Right Way DevFeed: [Linux ssh-keygen: Set Up SSH Key Authentication the Right Way]() Original publisher: [Read original article]() Author: Hayden James Published: 2026-08-03T10:53:19Z Content type: tutorial Language: en Sources: [Hayden James]() Topics: [OpenSSH](), [ssh](), [Linux](), [Authentication](), [Security](), [passwords]() Tags: [authentication](), [blog](), [guide](), [linux](), [openssh](), [password](), [private-key](), [public-key](), [security](), [server](), [ssh](), [sysadmins]() ### AI overview A practical guide to setting up SSH key authentication on Linux with ssh-keygen. It covers generating key pairs, copying public keys to servers, disabling password login safely, configuring multiple identities, and using passphrases or FIDO2 security keys. ### Source excerpt Password-based SSH login is a liability. This guide walks through generating SSH key pairs with ssh-keygen, deploying public keys, disabling password authentication, and managing multiple keys cleanly with ~/.ssh/config. Continue reading... [Next page]()