The Daily Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

RETAILER PEPCO LOSES ABOUT 15 MLN EUROS IN HUNGARIAN PHISHING ATTACK

Pepco, a European discount retailer, lost €15 million in a phishing attack targeting its Hungarian business. Whether the funds are recoverable is uncertain. The company is financially stable and currently conducting a security review. No customer or employee data was compromised.

reuters.com · 3 min

TLDR InfoSec

TOP 10 FEATURES TO ENHANCE YOUR OKTA SECURITY POSTURE

This post breaks down 10 security features that can be used to enhance your Okta security posture. Highlighted features include ThreatInsight, behavior profiling, admin and user session management, and password and MFA policies.

rezonate.io · 12 min

TLDR InfoSec

DETECT STRIPE KEYS IN S3 BUCKETS WITH AMAZON MACIE

A tutorial from AWS on how to utilize the newly added `STRIPE_CREDENTIALS` managed data identifier in Amazon Macie to identify Stripe API keys in S3 Buckets. It walks through setting up the Macie job and includes sample data.

aws.amazon.com · 5 min

TLDR InfoSec

HOW WE BUILT PINGORA, THE PROXY THAT CONNECTS CLOUDFLARE TO THE INTERNET

Cloudflare made the decision to abandon its usage of Nginx in favor of building its own proxy. This article goes through the issues Cloudflare faced with Nginx and the design decisions that went into Pingora's design. It concludes with an in-depth review of the performance gains that were achieved.

blog.cloudflare.com · 9 min

TLDR InfoSec

EUROPEAN DIPLOMATS TARGETED BY SPIKEDWINE WITH WINELOADER

An invitation to a wine-tasting event was discovered to be part of a targeted spearphishing campaign that distributed a new stealthy backdoor called WINELOADER to European diplomats. The invitation included a malicious link to a fake questionnaire - targets were told that the questionnaire must be filled out in order to participate in the event. The link redirected to a compromised site that downloaded a file containing obfuscated JavaScript code to execute the attack.

zscaler.com · 8 min

TLDR InfoSec

DATA SCIENTISTS TARGETED BY MALICIOUS HUGGING FACE ML MODELS WITH SILENT BACKDOOR

Researchers discovered a malicious AI model on Hugging Face that could enable attackers to gain full control of users' machines. The model executes code after loading a pickle file, leaving victims unaware that their systems were compromised.

jfrog.com · 7 min

TLDR InfoSec

FBI WARNS USERS TO CHECK THEIR ROUTERS FOR COMPROMISE

Ubiquiti EdgeRouters are being used by the Russian-backed APT28 group to collect information and proxy malicious traffic. The FBI revealed that it accessed routers belonging to businesses and homes to remove APT28’s malware and add firewall rules to prevent reinfection. The operation did not patch any vulnerabilities - owners are urged to check their equipment for signs of compromise.

arstechnica.com · 3 min

TLDR InfoSec

TOP 10 WEB HACKING TECHNIQUES OF 2023

Each year, PortSwigger accepts nominations for the top novel web hacking techniques of the year. Users then vote on finalists and panelists choose the winners. This list contains links and summaries for each chosen attack.

portswigger.net · 5 min

TLDR InfoSec

GITHUB ENABLES PUSH PROTECTION BY DEFAULT TO STOP SECRETS LEAK

GitHub has enabled push protection by default for all public repositories to prevent accidental exposure of secrets such as access tokens and API keys when pushing new code.

bleepingcomputer.com · 2 min

TLDR InfoSec

SYNOPSYS REPORT: 74% OF CODEBASES HARBOUR HIGH-RISK OPEN SOURCE VULNERABILITIES, UP 54%

Synopsys reported a 54% increase in high-risk vulnerabilities in commercial codebases compared to the year before.

itsecurityguru.org · 3 min

TLDR InfoSec

POPULAR VIDEO DOORBELLS CAN BE EASILY HIJACKED, RESEARCHERS FIND

RETAILER PEPCO LOSES ABOUT 15 MLN EUROS IN HUNGARIAN PHISHING ATTACK

TOP 10 FEATURES TO ENHANCE YOUR OKTA SECURITY POSTURE

DETECT STRIPE KEYS IN S3 BUCKETS WITH AMAZON MACIE

HOW WE BUILT PINGORA, THE PROXY THAT CONNECTS CLOUDFLARE TO THE INTERNET

EUROPEAN DIPLOMATS TARGETED BY SPIKEDWINE WITH WINELOADER

DATA SCIENTISTS TARGETED BY MALICIOUS HUGGING FACE ML MODELS WITH SILENT BACKDOOR

FBI WARNS USERS TO CHECK THEIR ROUTERS FOR COMPROMISE

TOP 10 WEB HACKING TECHNIQUES OF 2023

GITHUB ENABLES PUSH PROTECTION BY DEFAULT TO STOP SECRETS LEAK

SYNOPSYS REPORT: 74% OF CODEBASES HARBOUR HIGH-RISK OPEN SOURCE VULNERABILITIES, UP 54%