Exposed SSH is still a patching problem with a name: CVE-2024-6387
Qualys called it regreSSHion. The durable lesson is that an admin service on the open internet needs an owner, a version, and a weekend plan.
ZeroDay Times Desk4 min read
Desk 03
Zero-Days & CVEs
Newly disclosed vulnerabilities, exposure, and what is actually worth patching first.