The Daily Index — Monday, May 13, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

GOOGLE FIXES FIFTH CHROME 0-DAY EXPLOITED IN ATTACKS THIS YEAR

Google has released a security update to fix a use-after-free vulnerability in the component that handles rendering of content in the Chrome browser. Google has stated that exploit code is available. Google Chrome updates automatically for security fixes but users can verify that they are on the latest version in Settings.

bleepingcomputer.com · 2 min

TLDR InfoSec

MALICIOUS GO BINARY DELIVERED VIA STEGANOGRAPHY IN PYPI

A malicious Go binary was hidden in a PyPI package named requests-darwin-lite. The binary was concealed within a large PNG image file, allowing the attacker to target specific macOS systems. Versions of the package containing the malicious binary were removed from PyPI after being detected.

blog.phylum.io · 5 min

TLDR InfoSec

HACKING MORE THAN 130,000 CARS WORLDWIDE IN 5 MINUTES

This post goes into how curiosity led a pentester to discover a vulnerability that allowed him to track 130,000 cars worldwide. It reminds readers to not download just any random app that uses IoT or GPS as they are wildly insecure.

links.tldrnewsletter.com · 4 min

TLDR InfoSec

ANDROID GREYBOX FUZZING WITH AFL++ FRIDA MODE

This blog post walks through the process of fuzzing an Android application using AFL++ in Frida mode. It details the process of building the application and writing a test harness. The post then provides a primer on JNI linking and details the process of building a harness for weak JNI linking and strong JNI linking.

blog.quarkslab.com · 8 min

TLDR InfoSec

AWS CLOUDQUARRY: DIGGING FOR SECRETS IN PUBLIC AMIS

Researchers from KPMG Romania have published this in-depth article about how public AMIs are exposing sensitive data. They collected AMIs from all AWS regions, identified owners with many public AMIs, and accessed the contents to discover secrets like access keys and confidential data. The researchers emphasized responsible disclosure and highlighted the need for companies to secure their public AMIs.

packetstormsecurity.com · 35 min

TLDR InfoSec

TOKEN SECURITY (PRODUCT LAUNCH)

Token Security is a "machine-first" identity security platform that provides visibility and continuous threat exposure management to manage identities. It starts with a list of machines and identifies who can access each machine by integrating into existing infrastructure. It then triages data to extract context, evaluate, and prioritize threat detection

token.security

TLDR InfoSec

HOW THE FEDS WILL TACKLE THE SOFTWARE BUG BACKLOG

The CISA has announced a new vulnrichment program to enrich vulnerabilities from the CVE database with additional details from testing. The goal of this project is to alleviate some of the load that has plagued databases like the NVD and led to slowdowns in cataloging new CVEs

links.tldrnewsletter.com · 2 min

TLDR InfoSec

GHOSTSTRIPE ATTACK HAUNTS SELF-DRIVING CARS BY MAKING THEM IGNORE ROAD SIGNS

Six researchers have demonstrated a technique called GhostStripe that can interfere with autonomous vehicles' ability to recognize road signs by exploiting the camera-based computer vision systems and rolling shutters of CMOS sensors used by brands like Tesla and Baidu Apollo.

theregister.com · 5 min

TLDR InfoSec

NEW SPECTRE-STYLE 'PATHFINDER' ATTACK TARGETS INTEL CPU, LEAK ENCRYPTION KEYS AND DATA

Researchers have uncovered two new attack methods called Pathfinder, targeting high-performance Intel CPUs, which enable reconstruction of program control flow history and launching high-resolution Spectre attacks.

thehackernews.com · 3 min

TLDR InfoSec

RESILIENCE THREAT RESEARCHERS IDENTIFY NEW CAMPAIGNS FROM SCATTERED SPIDER

Threat Researchers have found that Scattered Spider group is targeting various companies in finance and insurance with convincing lookalike domains and login pages and advises defenders to monitor lookalike domains and train employees to detect phishing attacks.

cyberresilience.com · 5 min

TLDR InfoSec

BOEING REFUSED TO PAY $200 MILLION LOCKBIT RANSOMWARE DEMAND

Boeing refused to pay a $200 million ransom demand from the LockBit hacking group after a ransomware attack.

bitdefender.com · 2 min

TLDR InfoSec

EXPLOITS AND VULNERABILITIES IN Q1 2024

This article discusses software vulnerabilities and exploits, analyzing trends and noteworthy vulnerabilities in Q1 2024.

securelist.com · 12 min