Liar Infestation Problem in the Media (Misreporting, Linux FUD)
They exaggerate severity and misattribute, bringing back a story from last month just when the media recalls and discusses how Azure got totally, completely cracked (while Microsoft tried to cover this up instead of solving it)
References:
-
Exploited ‘Looney Tunables’ Linux privileged escalation bug linked to Kinsing threat actor [Ed: It's not a Linux issue, so the image at the top is wrong and the quotes come from snail oil vendors]
The first instance of an exploit attack on the so-called "Looney Tunables" Linux privileged escalation vulnerability (CVE-2023-4911) was reported by researchers from Aqua Nautilus.
-
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments [Ed: Same anti-Linux talking point from Microsoft-friendly sites. They show penguins and say "linux", but this is a gnu library, not Linux at all.]
We already covered this last month. The severity isn't so high and in most cases it's very hard to exploit this. Remember what happened a year ago.