The Daily Index — Wednesday, December 20, 2023

ATTACKS & VULNERABILITIES

TLDR InfoSec

DELTA DENTAL OF CALIFORNIA DATA BREACH EXPOSED INFO OF 7 MILLION PEOPLE

Delta Dental of California and its affiliates are warning patients that it suffered a data breach due to MOVEit attacks. The nearly 7 million affected customers had their names, financial information, and social security numbers exposed. This is the third largest MOVEit data breach thus far.

bleepingcomputer.com · 2 min

TLDR InfoSec

TERRAPIN ATTACKS CAN DOWNGRADE SECURITY OF OPENSSH CONNECTIONS

A group of researchers have discovered a novel attack against SSH connections that can downgrade the security of the connection by truncating negotiation messages. The attack requires the attacker to have established a man-in-the-middle position and the SSH connection to be secured with either ChaCha20-Poly1305 or CBC with Encrypt-then-MAC. The researchers have released a scanner to determine if servers are vulnerable.

bleepingcomputer.com · 4 min

TLDR InfoSec

HUNTING RANSOMWARE-ASSOCIATED PATTERNS: A KQL-BASED APPROACH

This blog explores a few advanced KQL (Kusto Query Language) queries designed to identify and track known patterns, files, and other Indicators of Compromise (IOCs) commonly associated with the Cactus ransomware.

medium.com · 5 min

TLDR InfoSec

WTF IS ASPM?

Application Security Posture Management is a new Gartner category that refers to tools that provide everything needed to scan for and remediate vulnerabilities in an application. Broadly speaking, an ASPM should be able to track the lifecycle of a vulnerability, suggest where in the code the vulnerability can be fixed, provide a robust set of scanners, and allow for workflow creation. ASPMs typically include a subset of the following scanners: SDLC, SCA, SAST, IaC, container scanning, secret scanning, DAST, and CSPM.

latio.beehiiv.com · 5 min

TLDR InfoSec

NKABUSE MALWARE ABUSES NKN BLOCKCHAIN FOR STEALTHY ATTACKS

NKAbuse is a new Go-based malware that utilizes NKN technology for stealthy communication. NKN is a new, decentralized protocol that leverages blockchain technology. NKAbuse can function as a RAT or a DDOS botnet with communication that is difficult to track.

bleepingcomputer.com · 3 min

TLDR InfoSec

THE AGE OF WEAPONIZED LLMS IS HERE

A researcher simulated using large language models (LLMs) like ChatGPT to craft personalized spearphishing emails targeting UK Parliament members. His paper reveals LLMs can iterate malicious emails to successfully trick victims at a fraction of a cent per message. The researcher's findings usher in an era of weaponized LLMs posing immense new cyberthreats.

venturebeat.com · 6 min

TLDR InfoSec

MALWARE LEVERAGING PUBLIC INFRASTRUCTURE LIKE GITHUB ON THE RISE

Threat actors exploit public services to conceal command and control infrastructure amongst legitimate traffic. Blending malicious actions through services like GitHub hinders threat detection and allows inexpensive, reliable control of breached systems. This post navigates how malicious actors are using this technology to frustrate incident response and security teams.

reversinglabs.com · 14 min

TLDR InfoSec

AUTHORITIES CLAIM SEIZURE OF NOTORIOUS ALPHV RANSOMWARE GANG’S DARK WEB LEAK SITE

The FBI has reportedly seized the ALPHV Blackcat ransomware gang's dark web leak site as part of a coordinated, international effort. The FBI also released a decryption tool that has allowed more than 500 victims to restore their systems. ALPHV and the FBI have gone back and forth seizing and “unseizing” the site since the publication of this article.

techcrunch.com · 3 min

TLDR InfoSec

VULNERABILITY IMPACT SCORING SYSTEM VERSION 1.0.0

The Vulnerability Impact Scoring System, or VISS, is a customizable framework that provides a web-based user interface and algorithms to help organizations assess and prioritize vulnerabilities based on actual demonstrated exploitation rather than theoretical impact.

viss.zoom.com · 4 min

TLDR InfoSec

IOS 17.2 PUTS AN END TO FLIPPER ZERO’S IPHONE SHENANIGANS

The Xtreme firmware for Flipper Zero had previously included a BLE spam attack that could DOS an iPhone by causing non-stop Bluetooth popups to overwhelm a device. Apple has added protections to prevent the DOS attack with its latest iOS update.

zdnet.com · 2 min

TLDR InfoSec

HOW NORTH KOREA IS COMPROMISING SUPPLY CHAINS

This blog post talks about how North Korea uses open source package managers and the GitHub platform to orchestrate supply chain attacks.

medium.com · 6 min

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech