CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

The document aggregates recent cybersecurity reporting, including critical vulnerabilities under active exploitation, malware campaigns, supply-chain compromises, state-sponsored activity, data breaches, cryptocurrency theft, and DDoS trends. The most severe items include a CVSS 10.0 LXD/MicroCloud client-impersonation flaw, actively exploited Ivanti, Drupal, GitLab, and WordPress vulnerabilities, and a Linux kernel TCP flaw rated CVSS 9.8 that enables unauthenticated remote root command execution. It also reports major crypto thefts, trojanized developer tooling, targeted government malware,-