CROOKS EXPLOIT OPENMETADATA HOLES TO MINE CRYPTO – AND LEAVE A SOB STORY FOR VICTIMS

Summary from the TLDR InfoSec newsletter

Cybercriminals are exploiting recently patched OpenMetadata vulnerabilities in exposed Kubernetes clusters to illegally mine cryptocurrency using victims' resources. The open-source data organization tool had five flaws fixed in March that allowed authentication bypass and remote code execution if left unpatched.