The Daily Index — Wednesday, May 1, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

VERIZON, AT&T, T-MOBILE, AND SPRINT FINED ALMOST $200M FOR SHARING CUSTOMER DATA

The FCC reported that Verizon, AT&T, T-Mobile, and Sprint sold data “aggregators” access to their customers' location data. This data was then resold to third-party location-based service providers. The FCC has issued a fine for circumventing the requirement to obtain user consent after the telecommunications providers were alerted of this issue and did not remediate it.

qz.com · 3 min

TLDR InfoSec

PHILADELPHIA INQUIRER: DATA OF OVER 25,000 PEOPLE STOLEN IN 2023 BREACH

Over 25,000 people had their personal and financial data stolen in a breach at the Philadelphia Inquirer in May 2023. The breach disrupted newspaper operations, but the website remained unaffected. The ransomware group responsible, named Cuba, published stolen files after the newspaper refused to pay a ransom.

bleepingcomputer.com · 2 min

TLDR InfoSec

FROM BYOVD TO A 0-DAY: UNVEILING ADVANCED EXPLOITS IN CYBER SECURITY RECRUITING SCAMS

Avast tracked a campaign that targeted users in the Asian region with fake recruitment offers. Victims were socially engineered into installing and running a Trojan version of AmazonVNC that utilized a 0-day to install a novel RAT. This RAT had the ability to change file timestamps.

decoded.avast.io · 24 min

TLDR InfoSec

NO, LLM AGENTS CAN NOT AUTONOMOUSLY EXPLOIT ONE-DAY VULNERABILITIES

This blog post takes a critical look at an academic paper that received widespread media attention which claimed to have built an LLM Agent that can exploit one-day vulnerabilities. The author points out that the paper included an agent that had Internet access and that the authors of the paper chose CVEs that had very detailed exploits and PoCs available. The post concludes that the paper demonstrated the capabilities of GPT-4 as an intelligent scanner and crawler but based on the data provided didn't demonstrate its ability to rediscover these vulnerabilities or generate novel exploit code.

struct.github.io · 4 min

TLDR InfoSec

SPRINTO (PRODUCT LAUNCH)

Sprinto is a security compliance platform that works with any cloud setup and helps monitor entity-level risks and controls from a single dashboard. It focuses on continuous compliance and healthy operational practices.

sprinto.com

TLDR InfoSec

R LANGUAGE FLAW ALLOWS CODE EXECUTION VIA RDS/RDX FILES

A critical vulnerability has been discovered in the R programming language, widely used for data analysis and AI/ML, that allows arbitrary code execution when deserializing specially crafted RDS and RDX files. The vulnerability exploits R's handling of serialization/deserialization, enabling attackers to embed malicious code in file metadata for execution upon opening the files.

bleepingcomputer.com · 4 min

TLDR InfoSec

MILLIONS OF MALICIOUS 'IMAGELESS' CONTAINERS PLANTED ON DOCKER HUB OVER 5 YEARS

Cybersecurity researchers have uncovered multiple malicious campaigns targeting Docker Hub that planted millions of "imageless" containers over the past five years. Over 4 million repositories have been found to be empty except for documentation containing links to phishing or malware sites.

thehackernews.com · 3 min

TLDR InfoSec

MORE THAN 800 VULNERABILITIES RESOLVED THROUGH CISA RANSOMWARE PILOT

CISA reports that it notified 1,754 Internet-facing devices that they might be vulnerable to ransomware. Of those, 852 were resolved.

therecord.media · 1 min

TLDR InfoSec

GOOGLE UPDATE ITS MINIMUM VIABLE SECURE PRODUCT

Google has updated its Minimum Viable Secure Product standard, focusing on essential security controls for products and services.

scotthelme.co.uk · 5 min

TLDR InfoSec

DHS PUBLISHES GUIDELINES TO MITIGATE AI RISKS TO CRITICAL INFRASTRUCTURE

The U.S. Department of Homeland Security has released new guidelines to protect critical infrastructure from AI risks and a report on AI misuse in CBRN threats.

dhs.gov · 5 min