The Daily Index — Wednesday, September 27, 2023 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

ATTACK

GPUs from all major suppliers are susceptible to a new attack, as demonstrated in a recent research paper, that allows malicious websites to read visual data from other websites, violating the Internet's critical same-origin security policy. While currently deemed more of a curiosity than an immediate threat, the vulnerability highlighted by the attack underscores the risks inherent in hardware optimizations and the need to re-evaluate trust in hardware as a foundational security measure.

arstechnica.com · 4 min

TLDR InfoSec

MULTI-YEAR CAMPAIGN

Chinese state-sponsored hackers identified as TAG-74 have been conducting a multi-year cyber espionage campaign targeting academic, political, and government organizations in South Korea. The hackers utilize social engineering attacks, including Microsoft Compiled HTML Help (CHM) file lures, to deploy the ReVBShell backdoor and Bisonal remote access trojan.

thehackernews.com · 2 min

TLDR InfoSec

SOURCE CODE MANAGEMENT PLATFORM BEST PRACTICES

A list of best practices and configurations for GitHub and GitLab. The list includes tools to aid in source code management best practices as well as a series of controls that are recommended to be implemented.

best.openssf.org · 4 min

TLDR InfoSec

Untitled entry

This article talks about one of the latest phishing delivery methods - a sophisticated infostealer that targets the hospitality industry through online booking services. It involves a malicious actor making a booking request and sending a series of urgent emails with links to an executable infostealer. The article provides recommendations for staying safe online, including avoiding clicking on unsolicited links and verifying the authenticity of messages through official channels.

akamai.com · 3 min

TLDR InfoSec

DEFENDING AGAINST DDOS ATTACKS: WHAT YOU NEED TO KNOW

This article talks about four main variants of DDoS attacks, including flooding, amplification, resource depletion, and diversion or ransom attacks. Mitigation strategies include recognizing the signs of DDoS attacks, having an incident response plan, contacting an ISP provider, having threat intel handy, and using other mitigation defenses and tools.

tripwire.com · 5 min

TLDR InfoSec

JA4+ NETWORK FINGERPRINTING

JA4+ is a network fingerprinting tool that provides a suite of modular network fingerprints for multiple protocols, allowing for improved threat-hunting and security analysis. The fingerprints include TLS client and server response, HTTP client, light distance/location, X509 TLS certificate, and SSH traffic.

blog.foxio.io · 14 min

TLDR InfoSec

AI DEV ASSISTANTS SOMETIMES EMIT OTHER PEOPLE’S API KEYS

A group of researchers found that GitHub Copilot and Amazon CodeWhisperer can be coaxed into revealing other people’s API keys. The keys that can be leaked were included in training data as they were accidentally committed in public repositories. The researchers have also released a tool to search for publicly exposed credentials.

theregister.com · 5 min

TLDR InfoSec

OPENAI LAUNCHES A RED TEAMING NETWORK

OpenAI announced a Red Teaming Network made up of a contracted group of employees to bolster its AI model risk assessment and mitigation strategies. The goal of this effort is to flag biases in models and prompts that can be used to bypass safety filters.

techcrunch.com · 3 min

TLDR InfoSec

ISRAEL

A Spanish judge has closed an investigation into the alleged hacking of ministers' phones with Pegasus spyware due to a complete lack of cooperation from Israel. The judge had sent a formal request for information about the software made by Israeli firm NSO Group, but Israel did not respond.

theguardian.com · 3 min

TLDR InfoSec

DEFI HACKS USUALLY COME DOWN TO POOR SECURITY

Crypto has a poor reputation for poor cybersecurity, and according to crypto cybersecurity company Halborn’s COO David Schwed, the culprit is simply poor security practices.

decrypt.co · 4 min

TLDR InfoSec

MICROSOFT IS ROLLING OUT SUPPORT FOR PASSKEYS IN WINDOWS 11

Microsoft has introduced passkeys to Windows 11, allowing users to log in to websites and applications without a username or password, instead relying on device PIN or biometric information.

thehackernews.com · 2 min