The Daily Index — Wednesday, January 3, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

MORTGAGE FIRM LOANCARE WARNS 1.3 MILLION PEOPLE OF DATA BREACH

Mortgage servicing firm LoanCare has started informing more than 1.3 million individuals about a data breach impacting their personal information. The attackers have exfiltrated data from FNF’s systems, including personal information such as names, addresses, Social Security numbers, and loan numbers.

bleepingcomputer.com · 3 min

TLDR InfoSec

4 YEAR CAMPAIGN BACKDOORED IPHONES USING POSSIBLY THE MOST ADVANCED EXPLOIT EVER

Researchers have unveiled new findings surrounding an attack that backdoored iPhones belonging to Kaspersky employees. Operation Triangulation exploited 4 zero days including an undocumented hardware feature which allowed for an unprecedented level of access. The malware was delivered via an iMessage text that kicked off an incredibly complex kill chain that begins with a zero-day in Apple’s TrueType font implementation and includes several other complex techniques.

arstechnica.com · 4 min

TLDR InfoSec

WHAT IS A PARSER MISMATCH VULNERABILITY?

This blog post explains the class of vulnerabilities known as parser mismatch vulnerabilities. These are caused by two systems parsing data differently. This class of vulnerabilities includes vulnerabilities such as HTTP Request Smuggling and URL parsing vulnerabilities. Examples are included in the post.

brainonfire.net · 4 min

TLDR InfoSec

AN INTRODUCTION TO BYPASSING USER MODE EDR HOOKS

Summary unavailable

malwaretech.com · 10 min

TLDR InfoSec

CATCHING OPENSSL MISUSE USING CODEQL

This post walks through five different CodeQL queries that can be used to catch potentially serious bugs in the OpenSSL libcrypto API that can cause memory leaks, authentication bypasses, and other cryptographic issues. It encourages developers and code reviewers to use tools like CodeQL to build and share queries to secure their code.

blog.trailofbits.com · 6 min

TLDR InfoSec

GOOGLE SETTLES LAWSUIT OVER TRACKING PEOPLE IN 'INCOGNITO MODE'

Google has agreed to settle a lawsuit filed in June 2020 that alleged that the company misled users by tracking their surfing activity who thought that their internet use remained private when using the "incognito" or "private" mode on web browsers. The class-action lawsuit sought at least $5 billion in damages. The settlement terms were not disclosed.

euronews.com · 2 min

TLDR InfoSec

DUAL PRIVILEGE ESCALATION CHAIN: EXPLOITING MONITORING AND SERVICE MESH CONFIGURATIONS AND PRIVILEGES IN GKE TO GAIN UNAUTHORIZED ACCESS IN KUBERNETES

An attacker with access to a Kubernetes cluster can chain two vulnerabilities in Google Kubernetes Engine (GKE) to escalate privileges and take over the cluster. The recently identified vulnerabilities in FluentBit and ASM can be exploited as part of the second stage of an attack, provided that the attacker has achieved remote code execution in the FluentBit container or that they can break out of another container.

unit42.paloaltonetworks.com · 10 min

TLDR InfoSec

THIS CLEVER NEW IDEA COULD FIX AIRTAG STALKING WHILE MAXIMIZING PRIVACY

In an effort to combat stalking, Apple modified its location privacy system for AirTags by reducing the frequency of key rotations to allow for better identification of malicious AirTags at a sacrifice of privacy. Researchers have devised a cryptographic scheme that blends secret sharing and error correction coding to better preserve user privacy while also allowing for anti-stalking detection. The group of researchers has proposed their scheme to a consortium of Apple, Google, and other companies working on this issue.

wired.com · 6 min

TLDR InfoSec

NISSAN OCEANIA RANSOMWARE UPDATE

Nissan has confirmed that an unauthorized third party illegally accessed some of the company’s network systems. Akira has taken credit for the attack, claiming to have stolen 100 GB of data, including corporate files and personal information belonging to employees.

nissan.com.au · 2 min

TLDR InfoSec

PREPARING FOR A SECURITY ENGINEER INTERVIEW

A guide from TryHackMe on preparing for security engineer interviews. The guide includes helpful general interview tips as well as sample technical questions and scenarios with answers.

tryhackme.com · 10 min

TLDR InfoSec

NASA ISSUES NEW SPACE SECURITY BEST PRACTICES GUIDE

NASA has released its Space Security Best Practices Guide, aimed at enhancing the cybersecurity efforts of both public and private sector space activities.

nasa.gov · 2 min

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech