#pam

Velvet Ant Lived Inside PAM and OpenSSH for Nearly Ten Years

A China-nexus crew skipped the endpoints defenders actually watch and backdoored the Linux login stack itself, where IR runbooks rarely reach.