Cyber Security, Without the Jargon

Cybersecurity doesn't have to be complicated. I am here to break down concepts, threats, tips, and tools in simple language. For mere mortals and developers alike.

Since I have been asked this a lot: The best way to support this site, is to buy my books.

LXD Trusted a Certificate Without Proof of Its Key

Nov 2, 2026 | 14 min read

For Developers

LXD Trusted a Certificate Without Proof of Its Key

A certificate-chain mistake let reachable LXD, MicroCloud, and Incus APIs accept a copied public certificate as identity. Here is how the failure worked, where exposure was limited, and what engineering teams should verify now.