You need to either a) turn off password authentication on the host in sshd_config (recommended), or b) man ssh to find the option (I think it's -o ...

A team of academic researchers from universities in California and Massachusetts demonstrated that it’s possible under certain conditions for passive network attackers to retrieve secret RSA keys from ...

Here's a rundown on the latest news on KRACK, ROCA, and the news you might have missed about SSH and encryption backdoor regulation. SSH Keys Being Scanned by Attackers and Ignored by Security SSH ...