Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is
CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key
TN

The Hacker News

2h ago
1 0

Discussion

Take the lead—comment now

Lead the way—your insights can inspire others.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

alex_but_tired91

alex but tired

alex but tiredUpvoted 1h ago0 comments · 120 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Chainalysis Confirms Intrusion Into Internal Tools and Exposure…

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer dat…
Carlos the great

Carlos the great

15h ago
0
bleepingcomputer.com
Northflank security breach leads to abuse of customers' AI API …

Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a security breach led to…
alex but tired

alex but tired

16h ago
0
schneier.com
Friday Squid Blogging: Bigfin Squid Off California Coast

Neat video: The sighting, announced September 2, marks the first time anyone has spotted a live bigfin squid, which belongs to the Magnapinna genus, in the nor…
SS

Schneier on Security

1d ago
0
bleepingcomputer.com
Linux kernel exploit enables remote root attacks on MPTCP serve…

Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely execute…
EK

Emma Klein

1d ago
0
darkreading.com
Devs Hit by Trojanized Claude Code Extension for Cursor

Two serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).
DR

Dark Reading

1d ago
0
thehackernews.com
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organiz…

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in at…
TN

The Hacker News

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Chainalysis Confirms Intrusion Into Internal Tools and Exposure…

American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer dat…
Carlos the great

Carlos the great

15h ago
0
thehackernews.com
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organiz…

Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in at…
TN

The Hacker News

1d ago
0
thehackernews.com
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS …

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploit…
TN

The Hacker News

2d ago
0
thehackernews.com
Binance Suffers Security Breach Affecting $6.3 Billion in Asset…

Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform has impacted about $6. 3 billion worth of assets. The world's biggest…
TN

The Hacker News

2d ago
0
thehackernews.com
ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, We…

Some attacks take real skill. Others just need someone to leave a door open. This week has both. Exposed passwords, old bugs still getting exploited, and trust…
TN

The Hacker News

2d ago
0
thehackernews.com
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day …

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put…
Giulia

Giulia

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest