The Daily Index — Friday, March 22, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

FUJITSU HACKED - ATTACKERS INFECTED COMPANY COMPUTERS WITH MALWARE

Fujitsu has reported that its internal systems were breached. An internal investigation revealed that customers’ personal information may have been accessed and exfiltrated. At this time, Fujitsu has not reported any illicit use of the stolen data.

gbhackers.com · 2 min

TLDR InfoSec

FRAUD RISK FOR VANS CUSTOMERS AFTER DATA BREACH

VF Group - which owns brands such as Vans, The North Face, and Timberland - reported that it suffered a data breach in December 2023. Stolen information included email addresses, full names, phone numbers, and billing and shipping addresses. The company maintains that no financial information could have been stolen as it doesn't collect or retain any.

bbc.com · 2 min

TLDR InfoSec

AMAZON S3 BLOCK PUBLIC ACCESS BYPASS

A group of researchers discovered a method to bypass AWS’ Block Public Access protections in a way that will not be detected by AWS. The method requires using a Customer Managed KMS key and a permissive bucket policy.

fogsecurity.io · 5 min

TLDR InfoSec

PERSISTENCE - VISUAL STUDIO CODE EXTENSION

This post discusses utilizing Visual Studio Code extensions as a persistence mechanism. It begins with an overview of the process of creating extensions for VS Code and then walks through the process of developing a malicious extension that utilizes activation events to install a malicious implant.

pentestlab.blog · 6 min

TLDR InfoSec

CODE INJECTION ON ANDROID WITHOUT PTRACE

This post describes a project, inspired by linux_injector, for injecting code into a process on Android without the use of ptrace. The injector locates a function in /proc/mem to overwrite and then utilizes a multistage shell code injector to map memory and inject to it. The post goes through the process of developing the shell code and the injector in Rust.

erfur.github.io · 7 min

TLDR InfoSec

APFS: FILES AND CLONES

This article provides an overview of the APFS file system. It begins by describing the data structures that make up a file in APFS, then describes the clone operation that allows for efficient file duplication and how hard links work. The post concludes by describing how to use the author’s tool to inspect APFS file attributes.

eclecticlight.co · 5 min

TLDR InfoSec

LAWMAKERS PASS MILESTONE PRIVACY BILL

The House has passed a landmark data privacy bill. The bill prevents any company that is defined as a data broker from selling data to foreign adversaries. It now moves to the Senate along with the TikTok ban. The bill faces much wider bipartisan support.

politico.com · 3 min

TLDR InfoSec

GITHUB’S LATEST AI TOOL CAN AUTOMATICALLY FIX CODE VULNERABILITIES

GitHub has launched a beta for its code-scanning autofix feature. This feature combines CodeQL and Copilot to suggest fixes for detected vulnerabilities. GitHub promises that the feature can remediate two-thirds of vulnerabilities it finds with 90% coverage of its supported languages.

techcrunch.com · 2 min

TLDR InfoSec

US WEIGHS SANCTIONING HUAWEI’S CHINESE CHIP NETWORK

The U.S. is reportedly considering blacklisting the Chinese chipmakers that are responsible for making Huawei’s chips.

reuters.com · 1 min

TLDR InfoSec

GLASSDOOR WANTS TO KNOW YOUR REAL NAME

Glassdoor has announced a new policy that requires posters to verify their real names.

wired.com · 4 min

TLDR InfoSec

HACKERS EARN $1,132,500 FOR 29 ZERO-DAYS AT PWN2OWN VANCOUVER

Hackers at Pwn2Own Vancouver 2024 earned $1,132,500 by demonstrating 29 zero-day vulnerabilities across various categories like web browsers, enterprise applications, and more.

bleepingcomputer.com · 2 min