News
cybersecurity CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key - The Hacker News cybersecurity Apple’s new child safety features now available - Pro CISO cybersecurity Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script - The Hacker News cybersecurity NetamLoader Malware Targets Government Windows 10 Systems in Asia via .NET Injection - The Hacker News cybersecurity Northflank security breach leads to abuse of customers' AI API keys - BleepingComputer cybersecurity New Android SMS of Death exploit can remotely crash unpatched phones - BleepingComputer ai Accenture Contractor Allegedly Gave Claude AI Agent Access to Secure Pentagon Network - CyberSecurityNews - Anthropic - Claude AI cybersecurity From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era. - BleepingComputer cybersecurity Chainalysis discloses data breach from "offensive agentic techniques" - BleepingComputer cybersecurity Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data - The Hacker News cybersecurity Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims - Wired Security ai Anthropic denies breach as tampered Claude Code extension hits Cursor users - The Next Web - Anthropic - Claude AI cybersecurity Syrian Hacker Gets Prison Time in US After Over a Decade on the Run - SecurityWeek cybersecurity Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access - The Hacker News threat-intel Hackers Impersonate IT Help Desk on Microsoft Teams to Gain Domain Admin Access via AD CS Attacks - GBHackers
1 / 15
All news ›
Cybersecurity

CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

The Hacker News ·

A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client without holding that client's private key. To do it, the attacker had to reach their HTTPS API over the network and have the trusted client's public certificate. Once in, the attacker would act as that client, with access to the cluster and its virtual machines. If the impersonated account is

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.