TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 9 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 13 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 12 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR DesignTLDR Design · 13 stories
  8. Page 8: TLDR FoundersTLDR Founders · 13 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 12 stories
  10. Page 10: Resources & ToolsTLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders, TLDR Marketing · 11 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Founders, TLDR Marketing · 9 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

GITHUB COMMENTS ABUSED TO PUSH MALWARE VIA MICROSOFT REPO URLS

Threat actors are exploiting a GitHub flaw to distribute malware through URLs linked to a Microsoft repository, tricking users into thinking the files are safe. This is accomplished by leaving a comment with an uploaded file in a Microsoft repository in GitHub, which uploads the file to GitHub CDN associated with Microsoft's repository, allowing the attacker to make the URLs look more trustworthy. GitHub and Microsoft have been contacted regarding this issue, but the distribution of malware continues through Microsoft's GitHub repository.

links.tldr.tech · 3 min

TLDR InfoSec

BACKDOORING DOTNET APPLICATIONS

This blog post explains how to modify and add functionality to a dotnet application by manipulating its binary disassembly. The author demonstrates the process of injecting custom code into the application and reassembling it to create a backdoor. The manual approach described involves working with the disassembled code, adding new instructions, and reassembling the application to achieve the desired modifications without causing errors.

links.tldr.tech · 9 min

TLDR InfoSec

MAGICDOT: A HACKER'S MAGIC SHOW OF DISAPPEARING DOTS AND SPACES

MagicDot is a set of several critical vulnerabilities in Windows related to path handling. It includes a remote code execution flaw and elevation of privilege flaws involving shadow copy restoration and file deletion, as well as techniques for an unprivileged user to gain rootkit-like abilities. These vulnerabilities stem from how Windows removes trailing dots and spaces during path conversion, permitting malicious path manipulation.

links.tldr.tech · 20 min

TLDR InfoSec

UNPACKING THE BLACKJACK GROUP'S FUXNET MALWARE

This article discusses the Fuxnet malware attack by the Blackjack hacking group against Moscollector that targeted Moscow's infrastructure monitoring systems. Initially reported to affect around 500 sensor gateways, recent updates indicate broader impact with 1,700 gateways compromised. The malware destroyed data and disabled network systems, aiming to disrupt emergency services in Moscow by targeting sensor gateways and flooding sensor channels with random data packets.

links.tldr.tech · 13 min

TLDR IndexPage 5