The Daily Index — Wednesday, April 10, 2024

GENERAL

TLDR InfoSec

>> Get a free demo of Orca

Summary unavailable

orca.security

TLDR InfoSec

MICROSOFT FIXES TWO WINDOWS ZERO-DAYS EXPLOITED IN MALWARE ATTACKS

Microsoft fixed two actively exploited zero-day vulnerabilities in the latest Patch Tuesday, addressing malware attacks. One vulnerability involved a malicious driver signed with a valid Microsoft certificate, while the other bypassed a security feature to deploy malware on Windows systems.

bleepingcomputer.com · 2 min

TLDR InfoSec

FAKE FACEBOOK MIDJOURNEY AI PAGE PROMOTED MALWARE TO 1.2M PEOPLE

Hackers have been leveraging hijacked Facebook accounts to impersonate legitimate AI services like MidJourney and OpenAI’s SORA to trick users into installing malware. The pages utilize Facebook ads that pushed communities that supposedly allowed members to test new features but instead posted links to download malware masquerading as beta versions of the software. One particularly successful campaign operated a MidJourney page that amassed 1.2 million members over nearly a year.

bleepingcomputer.com · 3 min

TLDR InfoSec

STRATEGIES TO MONITOR AND PREVENT VULNERABLE DRIVER ATTACKS

This post discusses the history and evolving threat of vulnerable drivers in Windows operating systems, highlighting the need for monitoring and prevention strategies. Microsoft recommends a defense-in-depth approach that leverages technologies like Memory Integrity, Smart App Control, and the Vulnerable Driver Block List to enhance security against driver-based attacks.

techcommunity.microsoft.com · 8 min

TLDR InfoSec

GALACTICAL BUG HUNTING: HOW WE DISCOVERED NEW ISSUES IN CD PROJEKT RED’S GAMING PLATFORM

This technical blog post details the vulnerabilities and exploits that led to the discovery of issues in CD Projekt Red's GOG Galaxy 2.0 gaming platform related to Denial-of-Service and Local Privilege Escalation (assigned CVE IDs 2023-50915 and 2023-50914). It highlights the risks associated with insecure interactions within the platform. The vulnerabilities involve inter-process communication and filesystem manipulation and can lead to potential exploitation for impactful attacks.

anvilsecure.com · 11 min

TLDR InfoSec

HOW TO GENERATE SECURITY FINDINGS TO HELP YOUR SECURITY TEAM WITH INTERNAL IR SIMULATIONS

A tutorial from AWS on how to create security events for testing IR playbooks. The solution generates findings for a list of included CVEs that can be detected for GuardDuty, Inspector, or sent to a SIEM. AWS recommends that these should be run in a dedicated, sandboxed environment as a purple-teaming exercise.

aws.amazon.com · 5 min

TLDR InfoSec

WE TESTED KIDS’ SMART TOYS FOR PRIVACY. HERE’S HOW YOU CAN TOO

This is a guide on evaluating children’s toys for privacy. It begins with some tips for evaluating privacy policies for the toys and companion apps. The post then provides a deep dive into how to inspect Bluetooth and Wi-Fi traffic and what to look for.

themarkup.org · 7 min

TLDR InfoSec

TERRAFORM CI/CD AND TESTING ON AWS

An introduction by AWS to the new Terraform Test framework introduced in v1.6. The tutorial includes worked examples on writing tests for success, failure, and tests for resources or variable validations. It also includes examples on how to run tests in a CodePipeline.

aws.amazon.com · 8 min

TLDR InfoSec

CISO CONVERSATIONS: NICK MCKENZIE (BUGCROWD) AND CHRIS EVANS (HACKERONE)

This edition of CISO conversations with Nick McKenzie and Chris Evans discusses the evolving role of CISOs in cybersecurity. The conversation provides an insightful look into the evolution and best practices of bug bounty and vulnerability disclosure initiatives from the perspective of two industry leaders.

packetstormsecurity.com · 11 min

TLDR InfoSec

FCC LOOKS TO LIMIT HOW DOMESTIC VIOLENCE ABUSERS USE CONNECTED CARS

The FCC is working to protect domestic violence survivors from being tracked by their abusers through connected car features like GPS and is seeking input from vehicle manufacturers and wireless service providers on how to limit abusers' access to these features.

cyberscoop.com · 2 min

TLDR InfoSec

ANDROID 15'S PRIVATE SPACE FEATURE COULD BETTER PROTECT YOUR SENSITIVE DATA

Android 15 introduces Private Space for added data protection on your Android device, which will allow you to hide and secure sensitive apps and files within an encrypted area.

zdnet.com · 3 min

TLDR InfoSec

GOOGLE ANNOUNCES V8 SANDBOX TO PROTECT CHROME USERS

Google introduced the V8 Sandbox as a default option on supported platforms in Chrome to protect users from memory corruption exploits.

securityaffairs.com · 3 min