The Daily Index — Monday, May 6, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

A MILLION AUSTRALIAN PUB GOERS WAKE UP TO FIND PERSONAL INFO LISTED ON LEAK SITE

A massive data leak has exposed over a million records of Australians who visited local pubs and clubs, including names, partial addresses, dates of birth, and venue details. The leaked data allegedly came from Outabox, a tech services company, and was posted on an anonymous leak site.

theregister.com · 3 min

TLDR InfoSec

DROPBOX SAYS HACKERS STOLE CUSTOMER DATA AND AUTH SECRETS FROM ESIGNATURE SERVICE

Dropbox reported a breach of its Dropbox Sign signature platform. Attackers gained access to authentication tokens, MFA keys, hashed passwords, and customer information. Dropbox says that the attackers gained access through a backend system configuration tool.

bleepingcomputer.com · 2 min

TLDR InfoSec

HOW TO ENFORCE USAGE OF PRIVILEGED ACCESS WORKSTATIONS FOR ADMINS

This community post explains how to enforce the use of Privileged Access Workstations (PAWs) for administrators at Microsoft by using Conditional Access policies to block logins from non-PAW devices. It details steps such as tagging PAW devices, setting permissions in Microsoft Graph Explorer, and creating a device-based Conditional Access policy in the Entra Admin Center.

techcommunity.microsoft.com · 12 min

TLDR InfoSec

USING FEATURE FLAGS FOR SECURITY

This post provides a few examples of why it can be effective for security teams to adopt the use of feature flags. The proposed uses are: to release unreviewed code that can be enabled once it has been reviewed, to enable features only for external security testers as a beta, and to be able to speed up security incident response.

alsmola.medium.com · 3 min

TLDR InfoSec

SEMGREP FOR TERRAFORM SECURITY

This article provides some use cases and examples of using Semgrep to secure Terraform deployments. Some examples presented are to use Semgrep to evangelize secure-by-default, internal modules, enforce opinionated rules, and prevent unverified providers. The article also works through an example of writing a custom rule for a more niche scenario.

ramimac.me · 5 min

TLDR InfoSec

READ SATYA NADELLA'S MICROSOFT MEMO ON PUTTING SECURITY FIRST

Microsoft is overhauling its security processes, making security the "top priority" for all employees, after facing high-profile attacks. CEO Satya Nadella has instructed the company's over 200,000 employees to prioritize security above all else, even delaying new features or legacy support if needed.

theverge.com · 6 min

TLDR InfoSec

COUNTERFEIT CISCO GEAR ENDED UP IN US MILITARY BASES, USED IN COMBAT OPERATIONS

A Florida resident, Onur Aksoy, was sentenced to 78 months in prison and ordered to pay $100 million in restitution to Cisco for running a counterfeit networking gear scam that generated $100 million in revenue and put U.S. military security at risk. Aksoy pleaded guilty to conspiring to traffic counterfeit goods, mail fraud, wire fraud, and importing fake Cisco products from China and Hong Kong and selling them as genuine through various online storefronts.

arstechnica.com · 6 min

TLDR InfoSec

A SYSTEMATIC LITERATURE REVIEW ON ADVANCED PERSISTENT THREAT BEHAVIORS AND ITS DETECTION STRATEGY

This research paper from Oxford University Press discusses advanced persistent threats (APTs) and proposes a detection strategy based on multi-stage attack behaviors and network vulnerabilities. It emphasizes the importance of understanding APT attack-related behaviors to improve detection accuracy and response. By integrating attributes of APT attacks into detection methods, security experts can enhance their ability to prevent these sophisticated threats.

academic.oup.com · 54 min

TLDR InfoSec

FRENCH CYBERWARRIORS READY TO TEST THEIR DEFENSE AGAINST HACKERS AND MALWARE DURING THE OLYMPICS

French cyberdefense is deep into preparation for the 2024 Paris Olympics.

securityweek.com · 4 min

TLDR InfoSec

THE STATE OF PENTESTING REPORT 2024

This report analyzes the impact of pentests, revealing a 21% increase in the number of findings per pentest engagement year-over-year.

cobalt.io · 30 min

TLDR InfoSec

FINLAND WARNS OF ANDROID MALWARE ATTACKS BREACHING BANK ACCOUNTS

Finland warns of an ongoing Android malware campaign targeting online bank accounts through deceitful SMS messages, impersonating banks, or payment service providers.

bleepingcomputer.com · 2 min