The Daily Index — Wednesday, April 17, 2024 · TLDR Index

GENERAL

TLDR InfoSec

TLDR InfoSec

↗️ Get a demo of Orca Security

Summary unavailable

orca.security

TLDR InfoSec

IVANTI WARNS OF CRITICAL FLAWS IN ITS AVALANCHE MDM SOLUTION

Ivanti fixed 27 vulnerabilities in its Avalanche MDM solution, including critical flaws that allowed remote attackers to execute commands. These security updates are crucial for protecting over 100,000 mobile devices from potential attacks. It is recommended that customers update to the latest Avalanche 6.4.3 version to stay secure.

bleepingcomputer.com · 2 min

TLDR InfoSec

OPENJS FOUNDATION TARGETED IN POTENTIAL JAVASCRIPT PROJECT TAKEOVER ATTEMPT

Security researchers discovered a takeover attempt targeting the OpenJS Foundation similar to a recent incident with the XZ Utils project. Suspicious emails urged OpenJS to update a JavaScript project and designate new maintainers without proper involvement. Maintainers of open-source projects should be cautious of social engineering attacks targeting their sense of duty and community.

thehackernews.com · 2 min

TLDR InfoSec

“ALL YOUR SECRETS ARE BELONG TO US” - A DELINEA SECRET SERVER AUTHN/AUTHZ BYPASS

Delinea Secret Server is a PAM that helps organizations secure, manage, and monitor privileged accounts. This post delves through the process of hunting for an AuthN/AuthZ bypass, decompiling the relevant code sections, and crafting the exploit. It includes detailed reproduction steps and a proof of concept for obtaining admin access.

straightblast.medium.com · 7 min

TLDR InfoSec

DEPLOYING TAILSCALE FOR A REMOTE ONLY COMPANY

This post describes the reasoning and process followed to deploy Tailscale for a fully remote company. It goes over the motivation for this deployment, its advantages, and some tips and potential pitfalls in this setup. The post concludes with some features that were introduced since the original deployment that would have been helpful for future deployments.

angrydome.com · 8 min

TLDR InfoSec

UNRAVELING SIEM CORRELATION TECHNIQUES

This post provides an overview of SIEM correlation techniques. It begins by defining correlation, introducing the MITRE ATT&CK framework, and presenting an example of a simple correlation rule. The post then continues to work through an example of detecting a Brute Force Okta Login, while combining multiple TTPs and log sources.

jacknaglieri.substack.com · 5 min

TLDR InfoSec

AWS TOOK 6 MONTHS TO FIX STS BUG - IAM POLICY INADEQUATE

Stedi discovered a vulnerability in AWS STS that arose from its usage of IAM role trust policies that relied upon resource tags and request tags. AWS first denied the issue, then found that the scope of the problem was larger than initially believed, but still took 6 months to deploy a fix. A major issue is that the AWS IAM Policy Simulator lacks many IAM features, which makes it difficult and time consuming to properly test IAM policies.

thestack.technology · 3 min

TLDR InfoSec

FTC FINES MENTAL HEALTH STARTUP CEREBRAL $7 MILLION FOR MAJOR PRIVACY VIOLATIONS

The FTC fined Cerebral $7 million for sharing users' sensitive health data with third parties without consent. Cerebral misled consumers about its privacy practices and failed to protect their information. The company must now improve its privacy policies and delete unnecessary consumer data.

thehackernews.com · 3 min

TLDR InfoSec

CHIRP SYSTEMS VULNERABILITY

Chirp Systems' smart locks have a security flaw allowing remote access to 50,000 homes - the company hasn't fixed it despite being notified in 2021.

krebsonsecurity.com · 3 min

TLDR InfoSec

NSA PUBLISHES GUIDANCE FOR STRENGTHENING AI SYSTEM SECURITY

The NSA has released guidance aimed at national security and defense companies deploying AI systems for securing AI systems to prevent malicious activities.

nsa.gov · 2 min

TLDR InfoSec

DDOS THREAT REPORT FOR 2024 Q1

Cloudflare's DDOS Threat Report for 2024 Q1 contains interesting tidbits like how Sweden experienced a 466% surge in DDoS attacks following its acceptance to the NATO alliance.

blog.cloudflare.com · 11 min