<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>libssh2 on DanSec Daily</title><link>https://blog.dansec.red/vendors/libssh2/</link><description>Recent content in libssh2 on DanSec Daily</description><generator>Hugo</generator><language>en-gb</language><lastBuildDate>Mon, 29 Jun 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://blog.dansec.red/vendors/libssh2/rss.xml" rel="self" type="application/rss+xml"/><item><title>Cybersecurity Brief – 2026-06-29</title><link>https://blog.dansec.red/posts/2026-06-29-cybersecurity-news/</link><pubDate>Mon, 29 Jun 2026 00:00:00 +0000</pubDate><guid>https://blog.dansec.red/posts/2026-06-29-cybersecurity-news/</guid><description>&lt;h2 id="major-incidents-or-breaches"&gt;Major Incidents or Breaches&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Japanese telecommunications operator KDDI Corporation disclosed a data breach impacting an email system used by five additional internet service providers, exposing up to 14.2 million email logins to threat actors &lt;sup class="citation"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/" title="Data breach exposes up to 14.2 million email logins at six ISPs - bleepingcomputer.com" target="_blank" rel="noopener"&gt;[3]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="newly-discovered-vulnerabilities"&gt;Newly Discovered Vulnerabilities&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;A public proof-of-concept exploit has been released for CVE-2026-55200, a critical client-side flaw in libssh2 that allows a malicious or compromised SSH server to trigger memory corruption on connecting clients, potentially leading to code execution &lt;sup class="citation"&gt;&lt;a href="https://thehackernews.com/2026/06/public-poc-released-for-critical.html" title="Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw - thehackernews.com" target="_blank" rel="noopener"&gt;[1]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="notable-threat-actor-activity"&gt;Notable Threat Actor Activity&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;Researchers identified hijacked npm and Go packages designed to deploy a Python-based information stealer via Visual Studio Code tasks, targeting Windows, Linux, and macOS environments &lt;sup class="citation"&gt;&lt;a href="https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html" title="Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer - thehackernews.com" target="_blank" rel="noopener"&gt;[2]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;h2 id="trends-tools-or-tactics-of-interest"&gt;Trends, Tools, or Tactics of Interest&lt;/h2&gt;&#10;&lt;ul&gt;&#10;&lt;li&gt;OpenAI announced the release of GPT-5.6 Sol, its most advanced cybersecurity AI model, claiming comparable performance to competing systems while using fewer output tokens &lt;sup class="citation"&gt;&lt;a href="https://www.securityweek.com/openai-unveils-gpt-5-6-sol-as-its-most-advanced-cybersecurity-ai/" title="OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI - securityweek.com" target="_blank" rel="noopener"&gt;[5]&lt;/a&gt;&lt;/sup&gt;.&lt;/li&gt;&#10;&lt;/ul&gt;&#10;&lt;hr&gt;&#10;&lt;h3 id="sources"&gt;Sources&lt;/h3&gt;&#10;&lt;ol class="sources"&gt;&#10; &lt;li id="src-3"&gt;&lt;a href="https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/" title="Data breach exposes up to 14.2 million email logins at six ISPs - bleepingcomputer.com" target="_blank" rel="noopener"&gt;Data breach exposes up to 14.2 million email logins at six ISPs&lt;/a&gt; &lt;span class="source-host"&gt;- bleepingcomputer.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-1"&gt;&lt;a href="https://thehackernews.com/2026/06/public-poc-released-for-critical.html" title="Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw - thehackernews.com" target="_blank" rel="noopener"&gt;Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw&lt;/a&gt; &lt;span class="source-host"&gt;- thehackernews.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-2"&gt;&lt;a href="https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html" title="Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer - thehackernews.com" target="_blank" rel="noopener"&gt;Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer&lt;/a&gt; &lt;span class="source-host"&gt;- thehackernews.com&lt;/span&gt;&lt;/li&gt;&#10; &lt;li id="src-5"&gt;&lt;a href="https://www.securityweek.com/openai-unveils-gpt-5-6-sol-as-its-most-advanced-cybersecurity-ai/" title="OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI - securityweek.com" target="_blank" rel="noopener"&gt;OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI&lt;/a&gt; &lt;span class="source-host"&gt;- securityweek.com&lt;/span&gt;&lt;/li&gt;&#10;&lt;/ol&gt;</description></item></channel></rss>