48-Hour Digest: Xray Update, Filtering Outage, and SSH Attacks

The main theme of the period is the security of connections and infrastructure. Xray-core released an emergency update due to certificate issues, while the community discussed a filtering system outage and a massive SSH attack via Tor nodes. XConnect users should update and review their security settings.

Over the past 48 hours, security and connection stability have been in the spotlight. Most important for XConnect users is the release of Xray-core v26.10.21. This is an emergency update: three certificates with compromised private keys were removed from the built-in root certificate library. Developers strongly recommend updating as soon as possible, without waiting for the stable release at the end of the month. The update also ensures problematic certificates are filtered even if the system library is outdated.

The second notable story is an analysis of a traffic filtering network outage. The incident showed how centralized configuration management and dependence on routing protocols can lead to large-scale consequences. For users, this is a reminder that access stability depends on many links, and Cheburnet filters can fail.

The third topic is a mass compromise of Tor exit nodes. Attackers intercepted SSH connections and collected unencrypted data. This highlights the importance of using keys instead of passwords and encrypting traffic. XConnect users should verify that their connections are protected and SSH access is configured securely.

Also in the digest: PHP vulnerabilities affecting many websites, and a secrets leak at deployment platform Railway. Both stories remind about timely updates and key rotation. There is less data on these topics, but they are important for the overall security picture.

Sources