Cybersecurity Archives - Ezeelogin Blog | SSH Security, PAM & Linux Server Management https://www.ezeelogin.com/blog/category/cybersecurity/ Expert articles on SSH jump servers, bastion hosts, SSH key management, PAM, RBAC, and Linux security. Practical guides from the Ezeelogin team. Wed, 04 Nov 2026 10:06:01 +0000 en-US hourly 1 https://wordpress.org/?v=7.1.4 RADIUS MFA for network devices https://www.ezeelogin.com/blog/radius-mfa-for-network-devices/ Tue, 03 Nov 2026 04:54:01 +0000 https://www.ezeelogin.com/blog/?p=2827 RADIUS MFA for network devices: how it works and where it breaks Most teams already have MFA on email, VPN and cloud consoles. The admin login on a core switch is often still a password, sometimes one shared by the whole network team. RADIUS MFA, also called RADIUS 2FA, is the usual way to fix

The post RADIUS MFA for network devices appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> PHP2Shell: Patch CVE-2026-109618 & CVE-2026-109619 https://www.ezeelogin.com/blog/php2shell-two-critical-php-flaws-and-how-to-patch-them/ Tue, 27 Oct 2026 12:17:02 +0000 https://www.ezeelogin.com/blog/?p=2882 PHP2Shell: Two Critical PHP Flaws That Turn One HTTP Request into Code Execution PHP2Shell is a critical PHP remote code execution vulnerability pair, tracked as CVE-2026-109618 and CVE-2026-109619. On 21 October 2026 the PHP project shipped emergency releases for both flaws in the language runtime itself. Each is rated 9.2 (Critical) on CVSS v4.0, and

The post PHP2Shell: Patch CVE-2026-109618 & CVE-2026-109619 appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> Plague: The PAM-Based Linux Backdoor https://www.ezeelogin.com/blog/plague-the-pam-based-linux-backdoor/ Thu, 19 Feb 2026 09:48:14 +0000 https://www.ezeelogin.com/blog/?p=1964 Plague is a newly discovered, highly sophisticated Linux backdoor making headlines across the cybersecurity community. Unlike conventional malware, Plague embeds itself into PAM (Pluggable Authentication Modules)—the core authentication framework for Linux—granting attackers stealthy, persistent access that bypasses standard login mechanisms. Researchers warn that Plague has been quietly evolving since mid-2024 and remained undetected for more than

The post Plague: The PAM-Based Linux Backdoor appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> SSHStalker: A deep dive into the new IRC-controlled Linux botnet infecting thousands of servers https://www.ezeelogin.com/blog/sshstalker-a-deep-dive-into-the-new-irc-controlled-linux-botnet-infecting-thousands-of-servers/ Thu, 19 Feb 2026 04:02:51 +0000 https://www.ezeelogin.com/blog/?p=2456 In early 2026, cybersecurity researchers uncovered a stealthy Linux botnet operation that has infected nearly 7,000 servers worldwide — not with advanced AI or zero-day exploits — but by resurrecting old-school techniques: SSH brute-force compromise, decade-old Linux vulnerabilities, and text-based IRC (Internet Relay Chat) command-and-control (C2) communication. Dubbed SSHStalker, this campaign staggering in scale highlights

The post SSHStalker: A deep dive into the new IRC-controlled Linux botnet infecting thousands of servers appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> Critical Privilege Escalation Vulnerability Discovered in Dropbear SSH Server https://www.ezeelogin.com/blog/critical-privilege-escalation-vulnerability-discovered-in-dropbear-ssh-server/ https://www.ezeelogin.com/blog/critical-privilege-escalation-vulnerability-discovered-in-dropbear-ssh-server/#respond Fri, 16 Jan 2026 13:19:49 +0000 https://www.ezeelogin.com/blog/?p=2196 The open-source Dropbear SSH server, widely deployed on embedded devices, routers, and lightweight systems like OpenWRT, has been found to contain a serious privilege escalation flaw. This vulnerability could allow an authenticated user to execute arbitrary programs with root privileges — essentially giving them full control over the system. This flaw is tracked as CVE-2025-14282

The post Critical Privilege Escalation Vulnerability Discovered in Dropbear SSH Server appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> https://www.ezeelogin.com/blog/critical-privilege-escalation-vulnerability-discovered-in-dropbear-ssh-server/feed/ 0 SSH Tunneling: A Complete Guide to Secure Network Access https://www.ezeelogin.com/blog/ssh-tunneling-a-complete-guide-to-secure-network-access/ Fri, 16 Jan 2026 08:33:10 +0000 https://www.ezeelogin.com/blog/?p=2180 Introduction In today’s interconnected world, securing data as it travels across networks is more important than ever. Whether you’re accessing a remote server, managing databases, or working from an untrusted network, exposed connections can become easy targets for attackers. SSH tunneling offers a powerful yet lightweight solution by encrypting network traffic and safely forwarding it

The post SSH Tunneling: A Complete Guide to Secure Network Access appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> Access Control: Types and Benefits https://www.ezeelogin.com/blog/access-control-types-and-benefits/ Fri, 16 Jan 2026 06:49:33 +0000 https://www.ezeelogin.com/blog/?p=2171 Access control is one of the most fundamental pillars of cybersecurity and operational governance in any organization. It defines who can access specific systems, applications, data, or physical resources, ensuring that only authorized individuals can perform permitted actions. Proper access control is essential for protecting sensitive information, maintaining business continuity, and meeting regulatory obligations.  

The post Access Control: Types and Benefits appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> Authentication Vs Authorization https://www.ezeelogin.com/blog/authentication-vs-authorization/ Fri, 31 Oct 2025 11:43:25 +0000 https://www.ezeelogin.com/blog/?p=2069 In today’s digital era, cybersecurity has become a major concern for individuals and organizations alike. One key aspect of securing systems is controlling access to digital devices and data. This is where the concepts of authentication and authorization come into play. In this article, we will explain what authentication and authorization are, the key differences

The post Authentication Vs Authorization appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> CVE-2025-61984 — OpenSSH command injection vulnerability https://www.ezeelogin.com/blog/cve-2025-61984-openssh-client-command-injection-vulnerability/ Tue, 28 Oct 2025 12:41:41 +0000 https://www.ezeelogin.com/blog/?p=2042 CVE-2025-61984 is a newly discovered OpenSSH client command injection vulnerability that affects OpenSSH client versions prior to 10.1. This article focuses on what CVE-2025-61984 is, the root cause of the vulnerability, and how to mitigate it. Root cause of CVE-2025-61984 OpenSSH includes a ProxyCommand option in its ssh_config file, which allows administrators to run an

The post CVE-2025-61984 — OpenSSH command injection vulnerability appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> OpenSSH 10.0: Security Features & Updates https://www.ezeelogin.com/blog/openssh-10-0-security-features-updates/ https://www.ezeelogin.com/blog/openssh-10-0-security-features-updates/#respond Thu, 07 Aug 2025 13:17:39 +0000 https://www.ezeelogin.com/blog/?p=1933 OpenSSH 10.0: A Comprehensive Look at it’s Security-Driven Overhaul OpenSSH 10.0 released on April 9, 2025, marks a turning point for one of the most critical tools in modern IT infrastructure. As the de facto standard for secure remote administration, file transfer, and tunneling, OpenSSH has continuously evolved to address new threats and cryptographic trends.

The post OpenSSH 10.0: Security Features & Updates appeared first on Ezeelogin Blog | SSH Security, PAM & Linux Server Management.

]]> https://www.ezeelogin.com/blog/openssh-10-0-security-features-updates/feed/ 0