The Daily Index — Friday, January 5, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

FALLON AMBULANCE SERVICE DATA BREACH IMPACTS 911K INDIVIDUALS

Transformative Healthcare is informing more than 900,000 individuals that their personal information was stolen in a data breach at now-defunct subsidiary Fallon Ambulance Service. The files contained names, addresses, Social Security numbers, COVID-19 testing and vaccination information, medical information, and information provided to Fallon in connection with employment. Fallon notified impacted individuals about the breach in December 2023.

healthitsecurity.com · 2 min

TLDR InfoSec

CISA WARNS OF EXPLOITED VULNERABILITIES IN CHROME AND EXCEL PARSING LIBRARY

The Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of two recently identified vulnerabilities that have been exploited. The vulnerabilities include a Google Chrome flaw and a bug in the open-source Perl library "Spreadsheet::ParseExcel" for reading information in Excel files. The vulnerabilities expose systems to potential remote code execution and data theft.

hackread.com · 2 min

TLDR InfoSec

COMPROMISING GOOGLE ACCOUNTS: MALWARES EXPLOITING UNDOCUMENTED OAUTH2 FUNCTIONALITY FOR SESSION HIJACKING

A critical Google exploit was discovered in October 2023 that enabled persistent access after password resets. A threat actor reverse-engineered this into Lumma Infostealer, protecting it with blackboxing. The exploit spread rapidly among malware groups. CloudSEK identified its root as an undocumented Google Oauth endpoint "MultiLogin". This report examines the exploit's discovery, evolution, and cybersecurity implications.

cloudsek.com · 10 min

TLDR InfoSec

KRAMPUS DELIVERS AN END-OF-YEAR STRUTS VULNERABILITY

NIST updated CVE-2023-50164 for a new path traversal vulnerability in struts-core. It is reminiscent of the 2017 Equifax breach stemming from an unpatched Struts issue. This post discusses the vulnerability, provides a proof-of-concept exploit, and outlines remediation steps.

snyk.io · 8 min

TLDR InfoSec

YOU SHOULDN'T RUN NSA-GRADE WI-FI AT HOME. HERE'S HOW TO DO IT

This blog post describes the steps to setup an enterprise-grade Wifi network with WPA3 Enterprise 192-bit and Radius server for authentication. The post mentions that this is more than anyone needs for a home network, but it's fun to learn how to set up a secure Wifi infrastructure. It walks through creating a Certificate Authority, Radius server, and configuring access points to set up a secure network using WPA3 Enterprise.

smallstep.com · 14 min

TLDR InfoSec

MANDIANT, THE SECURITY FIRM GOOGLE BOUGHT FOR $5.4 BILLION, GETS ITS X ACCOUNT HACKED

The hacked Mandiant account was initially used to masquerade as one belonging to Phantom, a company that offers a wallet for storing cryptocurrency. Posts on X encouraged people to visit a malicious website to see if their wallet was one of 250,000 that were eligible for an award of tokens. Mandiant has since regained control of the account and is investigating the incident.

arstechnica.com · 4 min

TLDR InfoSec

DON’T TRUST LINKS WITH KNOWN DOMAINS: BMW AFFECTED BY REDIRECT VULNERABILITY

Cybernews researchers discovered two BMW subdomains that were vulnerable to a SAP redirect vulnerability. The vulnerability allows attackers to redirect users to a malicious website or inject arbitrary content into a legitimate website. BMW was immediately notified and the vulnerability was fixed.

securityaffairs.com · 3 min

TLDR InfoSec

ANDROID GAME DEV’S GOOGLE DRIVE MISCONFIG HIGHLIGHTS CLOUD SECURITY RISKS

Japanese game developer Ateam accidentally exposed the personal information of nearly one million people due to an insecurely configured Google Drive instance that was accessible to anyone with the link since March 2017.

bleepingcomputer.com · 2 min

TLDR InfoSec

AWS SECURITY SERVICES BEST PRACTICES (GUIDE)

AWS has published a guide for its security services like GuardDuty and Inspector with detailed information on what to do before enabling a security service and how to tune it afterwards.

aws.github.io

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech