The Daily Index — Friday, March 15, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

FORTINET WARNS OF CRITICAL RCE IN ENDPOINT MANAGEMENT SOFTWARE

Fortinet has a critical vulnerability in its FortiClient EMS that enables remote code execution. The SQL injection vulnerability enables unauthenticated attackers to execute arbitrary commands. Horizon3 said that it will release a technical deep dive and proof-of-concept exploit code next week.

bleepingcomputer.com · 2 min

TLDR InfoSec

HACKERS CAN READ PRIVATE AI-ASSISTANT CHATS EVEN THOUGH THEY’RE ENCRYPTED

Researchers have discovered a new side-channel attack called token inference that can be used to infer the topic behind 55% of chats between an AI assistant and users on all platforms other than Gemini. The attack makes use of the fact that most AI Assistants send messages back token by token to provide faster responses. The encrypted token length is identical to the token length so the researchers were able to train two LLMs based on stylistic patterns in public chats from the various AI Assistants.

arstechnica.com · 10 min

TLDR InfoSec

GOOGLE'S THREAT MODEL FOR POST-QUANTUM CRYPTOGRAPHY

This blog post from Google discusses its threat model for post-quantum cryptography, which emphasizes the urgency of adopting quantum-safe algorithms to protect data from future quantum computing threats. It also outlines recommendations for prioritizing quantum threats and deploying hybrid post-quantum cryptography solutions and addresses specific use cases like encryption in transit, firmware signatures, software signatures, public key infrastructure, tokens, and other scenarios vulnerable to quantum threats.

bughunters.google.com · 9 min

TLDR InfoSec

PRACTICAL AND THEORETICAL ATTACKS IN THE INDUSTRIAL LANDSCAPE (PART 2)

This document, part of a two-part series, delves into practical and theoretical attacks in the industrial landscape, focusing on the vulnerabilities and potential methods attackers can use to disrupt automation processes within a factory setting.

claroty.com · 11 min

TLDR InfoSec

2024 THREAT DETECTION REPORT

Red Canary has released its annual threat detection report, which provides an overview of the current threat landscape. Humans remain the most exploited vulnerabilities. Cloud account compromise has increased 16-fold. Containers are now nearly omnipresent, and MacOS malware is on the rise. MFA fatigue attacks have become increasingly prevalent and Cobalt Strike is no longer in the top 10 C2 platforms.

resource.redcanary.com · 130 min

TLDR InfoSec

WHAT’S IN YOUR NOTEPAD? INFECTED TEXT EDITORS TARGET CHINESE USERS

Modified versions of text editors were found in search results on a popular Chinese search engine. The fake software contained backdoors designed to execute remote commands and communicate with a malicious server. This kind of "malvertising" has been used to lure victims to malicious sites.

securelist.com · 5 min

TLDR InfoSec

CEO OF DATA PRIVACY COMPANY ONEREP.COM FOUNDED DOZENS OF PEOPLE-SEARCH FIRMS

Data privacy company Onerep.com, supposedly based in Virginia, helps individuals remove personal information from people-search websites for a fee. However, investigations reveal the company actually operates from Belarus and Cyprus. The company's founder, Dimitri Shelest, has launched numerous people-search services over the years. Despite claims of independence, connections between Onerep.com and Nuwber.com raise questions about their relationship and practices.

krebsonsecurity.com · 6 min

TLDR InfoSec

SIM SWAPPERS NOW STEALING PHONE NUMBERS FROM ESIMS

Attackers have started to hijack user accounts on service providers' platforms and apps to initiate procedures to port victims' numbers to other devices or generate QR codes to activate new eSIMs.

bleepingcomputer.com · 2 min

TLDR InfoSec

FCC APPROVES CYBERSECURITY LABEL FOR CONSUMER DEVICES

The Federal Communications Commission has approved a new U.S. Cyber Trust Mark for consumer Internet of Things (IoT) devices that will denote that devices such as 'smart' home appliances meet baseline security standards.

cyberscoop.com · 4 min

TLDR InfoSec

TECH SUPPORT FIRMS RESTORO, REIMAGE FINED $26 MILLION FOR SCARE TACTICS

Tech support firms Restoro and Reimage have been fined $26 million by the US Federal Trade Commission (FTC) due to their use of scare tactics to trick customers into paying for unnecessary computer repair services.

bleepingcomputer.com · 2 min