Every story tagged SSH, curated for CIOs and IT leaders — ranked by source credibility, engagement, and freshness.
2 stories · open in the command center
A consumer audio device (RODE Caster Duo) ships with SSH enabled by default and hardcoded public keys, creating an unnecessary attack surface for any networked deployment of this hardware. This discovery highlights a critical gap in firmware security practices even among reputable manufacturers, and exposes a broader industry pattern of poor security defaults in IoT and networked hardware devices. IT organizations managing similar devices or considering hardware standardization should immediately audit their device inventories for undocumented network services and establish baseline firmware security requirements.
Modern TPM chips present in most enterprise hardware (required for Windows 11) can store SSH private keys as an alternative to traditional file-based storage or dedicated hardware security modules like Yubikeys. While TPM-based storage offers stronger security than filesystem keys by preventing malware extraction and keeping keys out of memory, it provides less protection than portable HSMs since TPM chips are device-bound and may lose data during BIOS updates. This approach enables organizations to leverage existing hardware for improved SSH key security without additional token procurement costs, though backup strategies become critical given TPM data persistence limitations.