The Daily Index — Wednesday, May 22, 2024 · TLDR Index

GENERAL

TLDR InfoSec

TLDR InfoSec

Learn more here: blog [4] | product [5] | demo

Summary unavailable

orca.security

TLDR InfoSec

OMNIVISION SAYS PERSONAL INFORMATION STOLEN IN RANSOMWARE ATTACK

Semiconductor manufacturing giant OmniVision Technologies disclosed a ransomware attack in September 2023 that led to data theft, including personal information. However, it has not detailed the type of personal information that was compromised.

securityweek.com · 3 min

TLDR InfoSec

CRITICAL GITHUB ENTERPRISE SERVER FLAW ALLOWS AUTHENTICATION BYPASS

GitHub has addressed a critical authentication bypass vulnerability (CVE-2024-4985) in GitHub Enterprise Server that allowed attackers to gain unauthorized administrative access by forging a SAML response on instances using SAML single sign-on with encrypted assertions enabled.

thehackernews.com · 2 min

TLDR InfoSec

BUILDING AN AI APPSEC TEAM

This blog post presents a workflow that uses AI agents to simulate an AppSec team. The workflow features a manager, code reviewer, exploiter, mitigation expert, and report writer agent to attempt to find vulnerabilities, write PoCs, and mitigate the vulnerabilities. The post makes slightly exaggerated claims on the efficacy of the toolchain, but it serves as an early demonstration of the potential of these tools.

srajangupta.substack.com · 5 min

TLDR InfoSec

BUILDING A SOC 2 COMPLIANT GITOPS CI/CD PIPELINE WITH GITHUB ACTIONS

This is a walkthrough for implementing a SOC 2-compliant GitOps workflow. The workflow features an app repo to test and build the code and an infra repo to deploy it. The walkthrough also presents hotfix and rollback flows.

mathieularose.com · 8 min

TLDR InfoSec

ENDPOINT VULNERABILITY MANAGEMENT AT SCALE

A post from Canva outlining its vulnerability management pipeline. The pipeline begins by extracting vulnerability information from its EDR, then utilizing its MDM to automatically push updates for managed applications or when an application is not managed, creating tickets for IT. The post also includes success metrics and a discussion of the results and difficulties of the process.

canva.dev · 10 min

TLDR InfoSec

Join the webinar to find out

Summary unavailable

hubs.la

TLDR InfoSec

NIGHTVISION (PRODUCT LAUNCH)

Covering API and web application security, NightVision will simulate attacks to identify exploitable defects before they enter production and integrates directly with the standard development workflows and CI/CD pipelines.

nightvision.net

TLDR InfoSec

TWO STUDENTS FIND SECURITY BUG THAT COULD LET MILLIONS DO LAUNDRY FOR FREE

Students have discovered a security flaw in internet-connected laundry machines used by millions of college students that allows free operation and manipulation of account balances through an app's API vulnerability. The vulnerability affects over a million machines across North America and Europe owned by CSC ServiceWorks.

theverge.com · 3 min

TLDR InfoSec

EU COUNCIL GIVES FINAL NOD TO SET UP RISK-BASED REGULATIONS FOR AI

The European Union has approved the groundbreaking and first-of-its-kind AI Act, establishing risk-based regulations for artificial intelligence. The law bans certain high-risk AI use cases and imposes obligations for high-risk applications like biometrics. It will come into force across the EU in phases.

techcrunch.com · 4 min

TLDR InfoSec

INVISIBLE MINERS: UNVEILING GHOSTENGINE'S CRYPTO MINING OPERATIONS

Elastic Security Labs uncovered an intrusion set named REF4578 with a primary payload called GHOSTENGINE that targeted crypto mining operations by deploying malicious modules and exploiting vulnerable drivers. GHOSTENGINE aims to disable security solutions, establish persistence, and execute a crypto-miner while utilizing elaborate techniques to evade detection and ensure system infection.

elastic.co · 7 min

TLDR InfoSec

VEEAM WARNS OF CRITICAL BACKUP ENTERPRISE MANAGER AUTH BYPASS BUG

Veeam has warned customers about a critical security vulnerability in its Backup Enterprise Manager (VBEM), which allows attackers to sign into any account without authentication.

bleepingcomputer.com · 2 min

TLDR InfoSec

WHY YOUR WI-FI ROUTER DOUBLES AS AN APPLE AIRTAG

Summary unavailable

krebsonsecurity.com · 7 min