[ebury]

October 23, 2026

• The Tor Project has blocked hundreds of hijacked relays used to steal SSH credentials and deploy the Ebury backdoor, following the exit-node SSH interception reported earlier this month (earlier coverage). CyberInsider · Threat Activity

in Two Unpatched KSMBD RCEs Go Public — and an AI Scanner Found Them