LOONEY TUNABLES VULNERABILITY EXPLOITED BY KINSING

Summary from the TLDR InfoSec newsletter

Aqua Security has discovered that the Kinsing threat actor has shifted tactics in a new experimental campaign targeting cloud environments. The threat actor manually exploited the Looney Tunables vulnerability in GNU libc’s ld.so, marking the first known instance of such an exploit. This vulnerability was reported in October. Any unpatched systems should be patched urgently.