The Daily Index — Wednesday, January 24, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

RESEARCHER UNCOVERS ONE OF THE BIGGEST PASSWORD DUMPS IN RECENT HISTORY

A researcher discovered a password dump containing nearly 71 million unique credentials for various sites circulating on the internet. This password dump is unique from many other multisite dumps because it contains nearly 25 million credentials that have never been leaked before. The credentials were collected by a stealer malware running on compromised machines.

arstechnica.com · 3 min

TLDR InfoSec

APPLE FIXES FIRST ZERO-DAY BUG EXPLOITED IN ATTACKS OF THE YEAR

Apple has released a fix for a WebKit confusion issue. The vulnerability can result in remote code execution when processing malicious web content. This article contains a full list of affected devices.

bleepingcomputer.com · 2 min

TLDR InfoSec

HOW DO YOU ACTUALLY FIND BUGS? (MY 2 YEAR EXPERIENCE)

This post describes how to find vulnerabilities in applications. It explains a method for hunting CSRFs, a familiar vulnerability for most people to start with.

medium.com · 6 min

TLDR InfoSec

AI SLEEPER AGENTS

AI Sleeper Agents are AI agents that behave normally until a certain trigger occurs and their behavior changes. Researchers created AI Sleeper Agents and then applied standard safety training methods that are used by GPTs like ChatGPT and Claude. They observed that the models still responded to the sleeper triggers and were able to adapt their behavior even after going through all the safety training.

astralcodexten.com · 5 min

TLDR InfoSec

CACTUS RANSOMWARE MALWARE ANALYSIS — SHADOWSTACKRE

The Cactus ransomware has been targeting victims across various industries and putting pressure on them by releasing personal information. The malware uses standard C++ constructs and Windows scheduled tasks for persistence. This analysis provides information on the build of the malware, its program flow, its setup process, and the techniques it uses to inhibit system recovery.

shadowstackre.com · 9 min

TLDR InfoSec

HP CEO EVOKES JAMES BOND-STYLE HACK VIA INK CARTRIDGES

HP claims blocking third-party ink cartridges prevents viruses. CEO Enrique Lores said viruses could "go to the printer" via cartridges, justifying HP's controversial Dynamic Security system. While hacked cartridges sound concerning, the actual security risk appears low, casting doubt on HP's virus justification.

arstechnica.com · 6 min

TLDR InfoSec

CISA DIRECTOR WAS TARGET OF ‘HARROWING’ SWATTING INCIDENT

CISA Director Jen Easterly was the target of a swatting incident on Dec 30. She described it as "harrowing," noting the rise in harassment and threats against public officials.

finance.yahoo.com · 4 min

TLDR InfoSec

HOW PENTESTING MIRRORS THE EVOLUTION OF QUALITY ASSURANCE

A post in which Ross Haleliuk, best-selling author of the recently released Cyber for Builders, draws parallels between the development of the quality assurance industry and penetration testing. Haleliuk observes that both QA and pentesting followed a similar trajectory, going from companies not doing them at all before outsourcing the functions, and then finally bringing them back in-house. He predicts that just as software development and testing have become linked, securing and testing software security will become the standard.

tldrsec.com · 6 min

TLDR InfoSec

WE ARE SEEING ATLASSIAN CONFLUENCE CVE-2023-22527 PRE-AUTH TEMPLATE INJECTION RCE ATTEMPTS SINCE 2024-01-19

Over 39K attacks on Atlassian Confluence Data Centre deployment attempting to make use of CVE-2023-22527.

twitter.com · 1 min

TLDR InfoSec

TRELLO API ABUSED TO LINK EMAIL ADDRESSES TO 15 MILLION ACCOUNTS

An exposed API in the project management tool Trello allows the linking of private email addresses with Trello accounts, resulting in the creation of millions of data profiles containing public and private information.

bleepingcomputer.com · 3 min

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech