The Daily Index — Wednesday, March 13, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

QNAP WARNS OF CRITICAL AUTH BYPASS FLAW IN ITS NAS DEVICES

QNAP released an advisory about its NAS software products. Three vulnerabilities have been discovered, one of which allows unauthenticated users to compromise systems. QNAP is urging users to update ASAP.

bleepingcomputer.com · 2 min

TLDR InfoSec

STANFORD: DATA OF 27,000 PEOPLE STOLEN IN SEPTEMBER RANSOMWARE ATTACK

Stanford University has announced that the personal information of 27,000 people was stolen in a ransomware attack in September that targeted its Department of Public Safety network. The attackers did not gain access to other systems. The Akira ransomware group claimed responsibility for the attack in October and has since published the stolen data on its dark web leak site.

bleepingcomputer.com · 2 min

TLDR InfoSec

4 SECURITY TIPS FROM PCI DSS 4.0 ANYONE CAN USE

Compliance standards like the new PCI DSS 4.0 increasingly align with security best practices, making them more relevant for security teams. With its transition period ending in March, PCI DSS 4.0 provides an opportunity to examine how the updated requirements impact security professionals' priorities within governance, risk, and compliance efforts.

darkreading.com · 7 min

TLDR InfoSec

THE AWS S3 DENIAL OF WALLET AMPLIFICATION ATTACK

A novel attack method on AWS allows attackers to create a large amount of RANGE requests for parts of large (>1GB) files before quickly canceling the request. This bills owners for the full request, which can result in a 50x cost amplification. This post discusses defenses against this attack and why current remedies fail.

blog.limbus-medtec.com · 6 min

TLDR InfoSec

HOW BOTTLEROCKET OPTIMIZES EKS WORKLOADS

A comparison of the available EKS optimized base OSes for security and scalability. Amazon Linux 2023 provides consistent improvements over Amazon Linux 2, but Bottlerocket, which was designed specifically for container orchestration, trumps both. Bottlerocket provides strong security defaults while providing a minimal host OS as it strips out traditional tools like shells and interpreters that are not necessary for container orchestration.

autify.com · 5 min

TLDR InfoSec

BIDEN'S BUDGET PROPOSAL BOOSTS CISA FUNDING TO $3B

President Biden's proposed $7.3 trillion budget seeks to boost cybersecurity funding. It includes $3 billion in funding for the CISA. The budget also allocates $13 billion for improved cyber defenses across government agencies.

theregister.com · 4 min

TLDR InfoSec

MAGNET GOBLIN TARGETS PUBLICLY FACING SERVERS USING 1-DAY VULNERABILITIES

Magnet Goblin is a financially motivated threat group that rapidly exploits 1-day vulnerabilities in internet-facing services. They use an Ivanti VPN exploit discovered within a day of its release. Their arsenal includes NerbianRAT, WARPWIRE, MiniNerbian backdoors, and remote management tools. They have targeted Ivanti, Magento, Qlik Sense, and possibly Apache ActiveMQ in recent campaigns.

research.checkpoint.com · 15 min

TLDR InfoSec

AWS LAUNCHES WAF TRAFFIC OVERVIEW DASHBOARDS

AWS has launched a new set of dashboards that provide near-real-time visualizations of Cloudwatch logs generated by AWS WAF. The dashboards visualize key WAF metrics such as bot detection, CAPTCHA solve rates, and the top 10 matched rules for each web ACL. The dashboards are enabled by default at no additional charge.

aws.amazon.com · 4 min

TLDR InfoSec

GOOGLE VULNERABILITY REWARD PROGRAM: 2023 YEAR IN REVIEW

Google paid out $10 million through its bug bounty programs in 2023. It has paid out $59 million since 2010.

security.googleblog.com · 5 min

TLDR InfoSec

AIRBNB IS BANNING INDOOR SECURITY CAMERAS INSIDE ITS LISTINGS

Indoor security cameras will be banned inside all Airbnb listings to protect customer privacy. Stricter regulations on outdoor cameras and noise decibel monitoring devices were also announced.

techcrunch.com · 2 min

TLDR InfoSec

KALI NETHUNTER NOW SUPPORTS BAD BLUETOOTH HID ATTACKS TO INJECT KEYSTROKES WIRELESSLY

Kali Nethunter now supports performing bad bluetooth HID attacks.

mobile-hacker.com · 6 min