The Daily Index — Monday, April 1, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

AT&T CONFIRMS DATA BREACH AND RESETS MILLIONS OF CUSTOMER PASSCODES

AT&T confirmed a massive data breach impacting over 7.6 million current and 65 million former customers. The leaked information included personal details like names, emails, addresses, phone numbers, social security numbers, dates of birth, and account credentials. The company has reset affected customers' passcodes and is notifying impacted individuals.

theverge.com · 2 min

TLDR InfoSec

EASY-TO-USE MAKE-ME-ROOT EXPLOIT LANDS FOR RECENT LINUX KERNELS. GET PATCHING

Apart from xz, Linux users have another vulnerability with CVE-2024-1086. Linux kernel versions between at least 5.14 and 6.6.14 are susceptible to privilege escalation. The exploit has a success rate of 99.4% on kernel 6.4.16.

theregister.com · 4 min

TLDR InfoSec

WHY SMALL B2B SAAS COMPANIES SHOULD FOCUS ON PRESALES INFORMATION SECURITY

This post dives into why investing in infosec is key for B2B SaaS companies as they are trying to sell to enterprises that will want to know how secure they are. These processes are usually long and rigorous and require startups to focus on showing their security acumen.

thereppingnerd.medium.com · 4 min

TLDR InfoSec

VULNERABILITY MANAGEMENT LIFECYCLE IN DEVSECOPS

This blog post discusses the vulnerability management lifecycle in DevSecOps, focusing on three key stages: identification, observability, and management. The goal is to empower engineering teams to prioritize and address security risks within their digital products through technology-driven processes. The post emphasizes the importance of integrating security practices into software development to ensure a secure-by-design approach.

blog.gitguardian.com · 10 min

TLDR InfoSec

MIND THE PATCH GAP: EXPLOITING AN IO_URING VULNERABILITY IN UBUNTU

This blog post from Exodus Intel explains a vulnerability (CVE-2024-0582) in io_uring in the Linux kernel related to a use-after-free bug. The vulnerability occurs when an application registers and later unregisters a provided buffer ring with a specific flag, leading to memory issues. The post details the exploitation of this vulnerability and a data-only exploit strategy.

blog.exodusintel.com · 16 min

TLDR InfoSec

ROOT (PRODUCT LAUNCH)

Root is a software supply chain collaboration and transparency platform that helps software consumers understand, prioritize, and mitigate their risks.

root.io

TLDR InfoSec

EU PUBLISHES ELECTION SECURITY GUIDANCE FOR SOCIAL MEDIA GIANTS AND OTHERS IN SCOPE OF DSA

The European Union has published draft election security guidelines targeting around two dozen large platforms like Facebook, Google, Instagram, TikTok, YouTube, and X that are regulated under the Digital Services Act. The guidelines aim to mitigate systemic risks such as political deepfakes while safeguarding rights like free speech and privacy.

techcrunch.com · 3 min

TLDR InfoSec

DINODASRAT LINUX VARIANT TARGETS USERS WORLDWIDE

Summary unavailable

securityaffairs.com · 3 min

TLDR InfoSec

UBUNTU WILL MANUALLY REVIEW SNAP STORE AFTER CRYPTO WALLET SCAMS

Ubuntu is manually reviewing apps in the Snap Store after fake crypto wallet scams. Apps are now checked by engineers before being available for users to download. This change aims to prevent further cryptocurrency thefts and enhance app safety.

packetstormsecurity.com · 3 min

TLDR InfoSec

A YEAR IN REVIEW OF ZERO-DAYS EXPLOITED IN-THE-WILD IN 2023

This report found a 56% increase in actively exploited zero-days in 2023 over 2022.

storage.googleapis.com · 20 min

TLDR InfoSec

THREAD HIJACKING: PHISHES THAT PREY ON YOUR CURIOSITY

This post talks about hijacking attacks, often involving compromised accounts, that use curiosity to trick people into clicking on malicious links or attachments in emails.

krebsonsecurity.com · 4 min

TLDR InfoSec

OPENAI DEEMS ITS VOICE CLONING TOOL TOO RISKY FOR GENERAL RELEASE

OpenAI's Voice Engine technology, capable of cloning voices with just 15 seconds of audio, has been deemed too risky for widespread release due to misinformation concerns.

theguardian.com · 3 min