A critical flaw in Canonical’s LXD and MicroCloud allowed an attacker to log in as a trusted client without possessing that client’s private key. Exploitation required network access to the products’ HTTPS API and the trusted client’s public certificate.
Why it matters
After successful impersonation, the attacker could act as the client and access the cluster and its virtual machines.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Security Daily
Security · The Hacker News
What happened
Malicious code on Polymarket’s website sold some signed-in traders’ positions and moved their funds to hackers on October 29. The malicious code replaced a page-speed script that Polymarket loaded from an outside company.
Why it matters
Polymarket says it is refunding about $2.7 million to 726 affected wallets.
Known limitation: This item is supported by one source record and has not been independently corroborated here.
Evidence is visible. Uncertainty stays visible too.
Baitaphish separates source records from interpretations, labels AI-assisted enrichment, and avoids turning ingestion volume into unsupported claims about threats, prevalence, or risk.
