Do Son Kinsing have escalated their exploitation of a vulnerability discovered, referred to as Looney Tunables, to orchestrate incursions into cloud environments
Looney Tunables
Besides the PoC exploit code for the CVE-2023-4911 bug, researchers have also unveiled a video demonstration.
CVE-2023-4911 allows local attackers to gain root privileges by exploiting a buffer overflow weakness in the GNU C Library's ld.so