Kinsing threat actors are exploiting a newly disclosed Linux flaw, Looney Tunables, to breach cloud environments. This marks the first public instance of active exploitation of this flaw, which could allow root privileges. The attackers are also extracting credentials from the Cloud Service Provider (CSP), indicating a shift in their operational scope. This development suggests that Kinsing’s operations may diversify and intensify, posing an increased threat to cloud-native environments.
Read more at The Hacker News…