The Daily Index — Wednesday, December 6, 2023 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

DECEMBER ANDROID UPDATES FIX CRITICAL ZERO-CLICK RCE FLAW

Google has released the December 2023 Android security updates, which address 85 vulnerabilities, including a critical zero-click remote code execution (RCE) bug. The RCE bug, tracked as CVE-2023-40088, was found in Android's System component and can be exploited without additional privileges.

bleepingcomputer.com · 2 min

TLDR InfoSec

P2PINFECT - NEW VARIANT TARGETS MIPS DEVICES

A new variant of the P2Pinfect malware has been discovered specifically targeting embedded devices based on 32-bit MIPS processors. The malware attempts to brute force SSH access to these devices, making it highly likely that routers and IoT devices will be infected.

cadosecurity.com · 7 min

TLDR InfoSec

MICROSOFT CYBERSECURITY REFERENCE ARCHITECTURES

The Microsoft Cybersecurity Reference Architectures (MCRA) are shared as part of the Security Adoption Framework. This post describes how Microsoft's cybersecurity capabilities integrate with their own and third party platforms. The resource includes information on antipatterns, best practices, and threat trends, among other topics. It also includes detailed technical diagrams for various aspects of cybersecurity.

learn.microsoft.com · 2 min

TLDR InfoSec

PREVENTING ACCIDENTAL EXPOSURE OF AWS RESOURCES

Summary unavailable

kevinhock.github.io · 10 min

TLDR InfoSec

DETECTING AITM PHISHING SITES WITH FUZZY HASHING

Summary unavailable

obsidiansecurity.com · 3 min

TLDR InfoSec

MICROSOFT CONFIRMS WINDOWS BUG RENAMES PRINTERS TO HP LASERJET M101-M106

Microsoft has confirmed a bug that causes all printers to be renamed to HP LaserJet M101-M106, leading to automatic installation of the HP Smart app on Windows 10 and 11 devices. This occurs even on systems that are not HP computers or printers.

bleepingcomputer.com · 2 min

TLDR InfoSec

15,000 GO MODULE REPOSITORIES ON GITHUB VULNERABLE TO REPOJACKING ATTACK

Security research firm Vulncheck claims that 15,000 Go module repositories on GitHub are vulnerable to an attack called repojacking, where bad actors take advantage of account username changes and deletions to create repositories with the same name and stage open-source software supply chain attacks. These repositories account for at least 800,000 Go module-versions.

thehackernews.com · 2 min

TLDR InfoSec

IAM ACCESS ANALYZER ADDS UNUSED ACCESS AND CUSTOM POLICY CHECKS

AWS IAM Access Analyzer has added a new analyzer to continuously monitor roles and users for permissions that are granted and not used. The custom policy checks can be integrated with a CI/CD tool to allow for reporting on whether a change will add any additional IAM permissions.

aws.amazon.com · 3 min

TLDR InfoSec

A DECADE OF HAVE I BEEN PWNED

A post from Troy Hunt reflecting on and detailing the history of Have I Been Pwned on its 10th birthday.

troyhunt.com · 7 min

TLDR InfoSec

SCAN FOR TAILSCALE SECRETS WITH TRUFFLEHOG

Tailscale announced a collaboration with TruffleHog to add their secrets’ patterns to TruffleHog. The tool will now be able to detect exposed Tailscale secrets in source code.

tailscale.com · 1 min

TLDR InfoSec

THE TORTOISE AND THE MALWAHARE

PWC discusses how they're tracking a highly capable Türkiye-nexus threat actor known as Teal Kurma.

pwc.com · 5 min

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech