The Daily Index — Friday, May 24, 2024

GENERAL

TLDR InfoSec

Get a demo at kiteworks.com >>

Summary unavailable

info.kiteworks.com

TLDR InfoSec

CANADA'S LONDON DRUGS CONFIRMS RANSOMWARE ATTACK AFTER LOCKBIT DEMANDS $25M

London Drugs confirmed a ransomware attack stole corporate files with employee information but stated it is unwilling and unable to pay the demanded ransom. Patient/customer databases currently appear uncompromised. LockBit ransomware group claims London Drugs was willing to pay $8 million initially. It is now demanding $25 million to avoid a data leak.

theregister.com · 4 min

TLDR InfoSec

MICROSOFT PUSHES EMERGENCY FIX FOR WINDOWS SERVER 2019 UPDATE ERRORS

Microsoft released an emergency out-of-band update to fix a bug that causes errors when trying to apply the May 2024 patch Tuesday updates in Windows Server 2019. The error is more likely to affect servers without the English (United States) language pack, but has been seen in servers that do as well. Microsoft confirmed that the bug was connected to the English (United States) language pack and that the update will fail if the language pack can't be located.

bleepingcomputer.com · 3 min

TLDR InfoSec

A STEP-BY-STEP GUIDE TO SECURELY UPGRADING YOUR EKS CLUSTERS

A guide to upgrading EKS clusters that includes an overview as well as detailed commands. Kubernetes supports security updates for the current and previous 2 minor versions, which means that version upgrades are frequently necessary. During upgrades, users are responsible for initiating the upgrade and upgrading the data plane whereas AWS manages the control plane upgrades.

links.tldrnewsletter.com · 7 min

TLDR InfoSec

“GOT THAT BOOMER!”: HOW CYBERCRIMINALS STEAL OTPS FOR SIM SWAPS AND RAIDING BANK ACCOUNTS

This article details findings from the leak of logs belonging to Estate, an interception operation that carried out thousands of automated phone calls for phishing attacks. Members can only sign up to Estate with referral codes and once registered can search through breached account passwords for victims. Estate contains automated scripts to convince victims to provide SMS OTPs or credit card security codes.

techcrunch.com · 8 min

TLDR InfoSec

THE SELF-DRIVING IDE IS COMING

A blog post that describes the difficulty in creating IDE plugins and how Sourcegraph aims to solve this by implementing plugins for its AI assistant, Cody. There are over a dozen popular IDEs that each utilize different APIs, leading to plugin developers needing to reimplement each feature for every IDE, an insurmountable barrier. Sourcegraph is attempting to solve this problem with Cody by utilizing a separate Cody binary to orchestrate interactions with each IDE's API instead of fully implementing each feature for each IDE.

sourcegraph.com · 12 min

TLDR InfoSec

AMPLIFIER (PRODUCT LAUNCH)

Amplifier has launched a self-healing AI copilot (Ampy) that helps employees understand the risks they are creating and helps them address the identified issues. The AI copilot guides employees through security protocols, involving them in the process of improving the organization's security posture.

amplifiersecurity.com

TLDR InfoSec

IN SEOUL SUMMIT, HEADS OF STATES AND COMPANIES COMMIT TO AI SAFETY

Government officials and AI industry executives have agreed to apply basic safety measures and establish an international AI safety research network. The agreement will promote a common understanding of AI safety, aligning research, standards, and testing to accelerate advancements.

techcrunch.com · 3 min

TLDR InfoSec

CYBER SIGNALS: INSIDE THE GROWING RISK OF GIFT CARD FRAUD

A Moroccan cybercrime group called Atlas Lion upgraded the gift card scam by compromising retailer portals used to issue gift cards, enabling them to "print" money at will without targeting individual victims. This automated approach eliminates labor-intensive social engineering tactics while maximizing profitability.

microsoft.com · 7 min

TLDR InfoSec

JAVS COURTROOM RECORDING SOFTWARE BACKDOORED IN SUPPLY CHAIN ATTACK

Rapid7 discovered that attackers had backdoored JAVS courtroom recording software with malware, allowing them to take over systems. JAVS has removed the compromised version and advises reimaging all potentially affected endpoints.

bleepingcomputer.com · 3 min

TLDR InfoSec

2024 ATTACK INTELLIGENCE REPORT

This attack report covers zero-day exploits, mass supply chain compromise incidents, and multi-factor authentication woes.

rapid7.com · 30 min

TLDR InfoSec

UK WATCHDOG LOOKING INTO MICROSOFT AI TAKING SCREENSHOTS

The UK has launched an investigation into the “privacy nightmare” that is Microsoft's recently announced Recall, a feature of its new Copilot+ PCs that stores encrypted screenshots on devices.

bbc.com · 2 min

TLDR InfoSec

THE SEC SLAPS NYSE'S PARENT COMPANY WITH A $10M FINE FOR NOT IMMEDIATELY REPORTING A HACK

The SEC fined Intercontinental Exchange (ICE) $10 million for not promptly reporting a cybersecurity breach to its subsidiaries.

zdnet.com · 2 min