The Daily Index — Friday, February 16, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

SOUTHERN WATER CUSTOMERS AFFECTED BY CYBER ATTACK

Summary unavailable

bbc.co.uk · 3 min

TLDR InfoSec

RANSOMWARE ATTACK FORCES 100 ROMANIAN HOSPITALS TO GO OFFLINE

A ransomware attack encrypted the database of the Hipocrate healthcare management system used by over 100 Romanian hospitals. 25 facilities have been confirmed impacted while another 75 are offline as a precaution. The massive incident took HIS servers down, encrypting files and databases.

bleepingcomputer.com · 3 min

TLDR InfoSec

WHY YOU NEED AN ACCEPTABLE USE POLICY FOR AI … YESTERDAY

An AI Acceptable Use Policy (AUP) establishes guidelines on the proper deployment of generative AI to mitigate risks. This post navigates how to create one with real examples. Developing an AI AUP forces risk leaders to define controls and frameworks to oversee emerging generative AI given its potential negative impacts if utilized without oversight.

medium.com · 8 min

TLDR InfoSec

MERCARI’S PASSKEY ADOPTION

Mercari discusses the considerations that went into the design of its passkey implementation. The company chose to adopt passkeys to try to create a phishing-resistant environment. Complications encountered included issues preventing attackers from registering passkeys, problems syncing passkeys, and UX difficulties around using passkeys.

engineering.mercari.com · 10 min

TLDR InfoSec

KUBERNETES SECURITY FUNDAMENTALS: AUTHENTICATION

Summary unavailable

securitylabs.datadoghq.com · 8 min

TLDR InfoSec

Take back control of your DNS with Control D — from $2/mo

Summary unavailable

controld.com

TLDR InfoSec

KTRUST (PRODUCT LAUNCH)

KTrust aims to secure Kubernetes workloads with a continuous threat exposure management platform that provides risk prioritization, breach and attack simulation, and ransomware protection capabilities.

ktrust.io

TLDR InfoSec

MICROSOFT AND OPENAI SAY HACKERS ARE USING CHATGPT TO IMPROVE CYBERATTACKS

Microsoft’s threat intelligence team has captured evidence of foreign government-backed hacking teams interacting with OpenAI’s ChatGPT to automate malicious vulnerability research, target reconnaissance, and create malware.

theverge.com · 4 min

TLDR InfoSec

FBI DISMANTLES UBIQUITI ROUTER BOTNET CONTROLLED BY RUSSIAN CYBERSPIES

The US Department of Justice announced that a court-authorized operation has dismantled a botnet of hundreds of Ubiquiti Edge OS routers controlled by Russian cyber spies. The group, known as APT28 or Fancy Bear, was using the hijacked routers as a global espionage platform.

securityweek.com · 2 min

TLDR InfoSec

HP WOLF SECURITY THREAT INSIGHTS REPORT Q4 2023

Summary unavailable

threatresearch.ext.hp.com · 12 min

TLDR InfoSec

NEW WI-FI AUTH BYPASS FLAWS EXPOSE HOME, ENTERPRISE NETWORKS

A new wifi auth vulnerability has been discovered. It allows an adversary to skip messages 2 and 3 of the 4-way handshake, enabling them to complete the authentication process without knowing the network’s password.

packetstormsecurity.com · 2 min

TLDR InfoSec

YOUR REFERRAL LINK - https://tldr.tech/infosec?ref=2613930

Summary unavailable

tldr.tech