The Daily Index — Friday, April 12, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

PERSONAL INFORMATION OF 287,000 TAXI PASSENGERS EXPOSED IN DATA BREACH

Irish taxi software firm iCabbi suffered a data breach that exposed nearly 300,000 customers' personal data, including names, emails, and phone numbers of senior officials and journalists. The breach was due to an unprotected database resulting from "human error" during a database migration. iCabbi acknowledged the breach, stating that it notified affected taxi companies, but did not disclose if any individuals suffered losses.

independent.ie · 3 min

TLDR InfoSec

HOME DEPOT CONFIRMS THIRD-PARTY DATA BREACH EXPOSED EMPLOYEE INFO

Home Depot has confirmed that a third-party SaaS vendor that it uses was breached, leading to the exposure of 10k employee's data. The exposed information includes names, work email addresses, and user IDs. This information is not inherently sensitive but could be utilized in phishing attempts.

bleepingcomputer.com · 2 min

TLDR InfoSec

INSIDE AWS'S CRUSADE AGAINST IP SPOOFING AND DDOS ATTACKS

In an ongoing effort to combat DDoS attacks, Amazon Web Services (AWS) has made significant progress in tackling the long-standing issue of IP spoofing, which allows attackers to hide the source of attacks. In this interview, AWS explains its new approach in disrupting a decades-old problem that has given attackers a major advantage.

securityweek.com · 7 min

TLDR InfoSec

CREATING THE PERFECT BUG BOUNTY AUTOMATION

Hakluke describes his bug bounty automation process and its evolution. Hakluke began with a bash script before moving to a framework that relied upon Django admin commands. To scale better, Hakluke moved to a distributed Golang environment and now plans to move over to a Cloud Native solution.

labs.detectify.com · 8 min

TLDR InfoSec

GOOGLE PUBLIC DNS'S APPROACH TO FIGHT AGAINST CACHE POISONING ATTACKS

Google Public DNS uses multiple strategies like case randomization and DNS-over-TLS to protect users from cache poisoning attacks. These measures make it harder for attackers to manipulate DNS responses and improve security for users worldwide. Google Public DNS aims to enhance DNS security by actively implementing countermeasures and collaborating with the DNS community.

security.googleblog.com · 4 min

TLDR InfoSec

KNOSTIC (PRODUCT LAUNCH)

Knostic prevents the chatbots used by enterprises from sharing sensitive information with employees who should not have access to it.

knostic.ai

TLDR InfoSec

GOOGLE CLOUD'S AI-POWERED SECURITY TOOLS IMPROVE ENTERPRISE SECURITY

Google Cloud has integrated its flagship Gemini language model into new AI-powered security tools unveiled at its Next 2024 event. These include Gemini in Threat Intelligence for conversational threat research, Gemini in Security Operations to assist in investigations and draft detection rules, and Gemini in Security Command Center to generate summaries of security alerts.

aibusiness.com · 4 min

TLDR InfoSec

96% OF US HOSPITAL WEBSITES SHARE VISITOR INFO WITH META, GOOGLE, DATA BROKERS

Research from the University of Pennsylvania reveals a concerning lack of privacy on hospital websites, with 96% transmitting user data to third parties like Google, Meta, and data brokers without explicit consent. Despite being places where privacy is expected, many hospitals employ tracking technologies and lack transparency, with only 56% of those with privacy policies disclosing the third parties receiving user information.

theregister.com · 5 min

TLDR InfoSec

THOUSANDS OF LG TVS ARE VULNERABLE TO TAKEOVER — HERE'S HOW TO ENSURE YOURS ISN'T ONE

Researchers at Bitdefender have discovered multiple vulnerabilities affecting LG TVs running WebOS versions 4 through 7 that allow remote attackers to gain root access, execute arbitrary commands, and potentially drop malware or conduct lateral network attacks.

arstechnica.com · 4 min

TLDR InfoSec

CHROME ENTERPRISE GETS PREMIUM SECURITY BUT YOU HAVE TO PAY FOR IT

Google's Chrome Enterprise Premium promises to add security features at a cost of $6/user/month. Chrome Enterprise Premium supports enforcing policies, managing software updates and extensions, and some TCP protocols such as SSH and RDP. Early adopters have reportedly been getting value from it.

bleepingcomputer.com · 3 min

TLDR InfoSec

TWITTER'S CLUMSY PIVOT TO X.COM IS A GIFT TO PHISHERS

X briefly launched a change that automatically replaced any instance of x.com (even in cases like fedex.com) in its redirects with twitter.com. The feature has since been rolled back.

krebsonsecurity.com · 2 min

TLDR InfoSec

GOOGLE LAUNCHES ITS UPGRADED FIND MY DEVICE NETWORK

Google's Find My Device network has been updated to be able to locate offline Android devices and integrate some third-party trackers.

techcrunch.com · 2 min

TLDR InfoSec

WHY CISA IS WARNING CISOS ABOUT A BREACH AT SISENSE

CISA is investigating a breach at Sisense, and has advised Sisense customers to reset their credentials due to possible data exposure.

krebsonsecurity.com · 3 min