The Daily Index — Monday, November 20, 2023 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

EFF RESEARCHER FINDS MALWARE ON TABLET FOR CHILDREN

An EFF researcher's child was given a Dragon Touch Android tablet as a gift. Upon investigation, the researcher discovered the Corejava and Adups malwares as well as the KIDOZ App, which reports extensive data back to kidoz.net. Amazon and Google have begun investigations into the product and Walmart has removed it from its online store.

techcrunch.com · 4 min

TLDR InfoSec

BEWARE: MALICIOUS GOOGLE ADS TRICK WINSCP USERS INTO INSTALLING MALWARE

Threat actors are using manipulated search results and Google ads using Google's Dynamic Search Ads to trick users into downloading malware instead of legitimate software such as WinSCP. The malicious ads redirect users to a compromised WordPress website, which in turn takes them to an attacker-controlled phishing site.

thehackernews.com · 4 min

TLDR InfoSec

AN OVERVIEW OF BIOMETRIC SECURITY IN MODERN DEVICES

Biometric security has become a crucial layer in personal and enterprise security systems. It utilizes unique biological or behavioral identifiers to authenticate individuals. This article provides an overview of biometric security, including its definition, types, benefits, and applications.

medium.com · 13 min

TLDR InfoSec

INTRO TO AI SECURITY PART 1: AI SECURITY 101

This series aims to demystify AI Security and its intersection with other fields like cyber security and national security. It is designed to be accessible to people from any background. The first post focuses on AI Security basics. There are 8 more posts available and 1 more to be released.

medium.com · 10 min

TLDR InfoSec

SEARCHING FOR MALICIOUS HTTP SERVERS BY IDENTIFYING TYPOS IN HTTP RESPONSES

This post from NCCGroup explains how it utilizes typos in HTTP server responses to develop unique fingerprints to identify malicious servers. NCCGroup’s team sampled 800,000 HTTP responses from Censys scan data and applied a spell-checking model to detect any anomalous activity. The researchers concluded that while typos are useful to group and identify anomalous behavior, they aren’t sufficient alone to detect malicious behavior. Typo-detection should be used as part of a larger framework.

research.nccgroup.com · 7 min

TLDR InfoSec

PROTECT AI’S NOVEMBER VULNERABILITY REPORT

Since August 2023, members of the Huntr bug bounty platform for AI and ML have uncovered over a dozen vulnerabilities exposing AI/ML models to system takeover and sensitive information theft. Some of the tools count with hundreds of thousands or millions of downloads per month, such as H2O-3, MLflow, and Ray. These issues potentially impact the entire AI/ML supply chain.

protectai.com · 3 min

TLDR InfoSec

RUST BINARY ANALYSIS

The Rust programming language employs a number of features that lead to vastly more complex binary analysis as compared to C/C++ code. Checkpoint presents a guided tour of various Rust features and how to reverse engineer the assembly code that the rustc compiler generates in debug mode. The post uses IDA for its disassembler.

research.checkpoint.com · 18 min

TLDR InfoSec

NOTHING CHATS IS A PRIVACY NIGHTMARE

Users have found that Nothing Chats, which is a Sunbird-based iMessage app on Android, sends all media attachments to Sentry with links to those attachments in plain text. It also sends and stores unencrypted data in Firebase.

9to5google.com · 2 min

TLDR InfoSec

NEW SAMSUNG DATA BREACH IMPACTS UK CUSTOMERS

Samsung reported that a third-party application used by the company was breached, exposing the data of customers who used the Samsung UK online store between July 2019 and June 2020.

bleepingcomputer.com · 2 min

TLDR InfoSec

FCC ADOPTS NEW RULES TO PROTECT AGAINST SIM-SWAPPING ATTACKS

The Federal Communications Commission (FCC) has introduced new rules to protect consumers from SIM-swapping attacks and port-out fraud.

bleepingcomputer.com · 2 min