The Daily Index — Friday, June 7, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

AUSTRALIAN FOOD SERVICE PROVIDER'S INTERNAL RECORDS AND INVOICES EXPOSED IN THIRD PARTY DATA BREACH

Security researcher Jeremiah Fowler discovered an unprotected database belonging to Patties Food Limited that was internet accessible. The database contained nearly 500K internal logs which exposed internal, customer, and vendor emails. The database also contained over 25K invoices which included vendors, contacts, emails, and banking information. The databases were managed by a third party known as Proveno.ai, which has responded to the responsible disclosure and protected the databases.

websiteplanet.com · 4 min

TLDR InfoSec

UNCLE SAM SEEKS TO CLAW BACK $5M+ STOLEN FROM TRADE UNION THROUGH SPOOFED EMAIL

The US Justice Department filed a civil forfeiture action seeking to recover over $5 million stolen from a Massachusetts trade union. The funds, part of a $6.4 million theft, have been traced to seven bank accounts which are currently seized. The legal action aims to enable the recovery of the stolen money held in those accounts

theregister.com · 3 min

TLDR InfoSec

SECURITY FIRST: DEVSECOPS EMPOWERMENT WITH TERRASCAN

Terrascan is an IaC scanner by Tenable that can be used to scan Terraform files, Helm Charts, Dockerfiles, and other IaC files. This post walks through the steps to install Terrascan and run it against Terraform files. It provides the full output of the sample run and walks through the found vulnerabilities.

blog.devops.dev · 8 min

TLDR InfoSec

SECURE YOUR TAILSCALE INFRASTRUCTURE FURTHER WITH MUTUAL TLS

Viktor Petersson, co-founder of Screenly, walks through the process of utilizing certificates generated by Tailscale for Mutual TLS to provide an added layer of security to sensitive applications or those that don't require authentication. Petersson first generates a client certificate with Tailscale and exports it to a PKCS#12 bundle, then he imports that to a browser, and finally deploys a ghostunnel server to reverse proxy traffic on the server.

blog.viktorpetersson.com · 4 min

TLDR InfoSec

WHY SAST + DAST CAN'T BE ENOUGH

Static and dynamic app testing are important but not enough to fully secure modern software. New automated testing procedures are needed to address evolving threats and vulnerabilities. Detection in source code is crucial for enhancing application security beyond traditional methods.

blog.gitguardian.com · 7 min

TLDR InfoSec

demo here

Summary unavailable

info.kiteworks.com

TLDR InfoSec

VULNCHECK (PRODUCT LAUNCH)

VulnCheck provides exploit intelligence for vulnerability prioritization and an early-warning system for in-the-wild software exploitation activity.

vulncheck.com

TLDR InfoSec

UK RETAILERS FILE A £1.1B COLLECTIVE ACTION AGAINST AMAZON OVER CLAIMS OF DATA MISUSE

The British Independent Retailers Association filed a damages claim against Amazon in a £1.1 billion ($1.3 billion) collective action, alleging illegal misuse of members' proprietary data for competitive purposes and manipulation of the coveted "Buy Box" feature.

techcrunch.com · 3 min

TLDR InfoSec

HACKERS EXPLOIT LEGITIMATE PACKER SOFTWARE TO SPREAD MALWARE UNDETECTED

Threat actors are increasingly abusing legitimate packer software like BoxedApp to evade detection and distribute malware such as remote access trojans and information stealers, primarily targeting financial institutions and government sectors.

thehackernews.com · 2 min

TLDR InfoSec

MICROSOFT DEPRECATES WINDOWS NTLM AUTHENTICATION PROTOCOL

Microsoft announced that it has officially deprecated the outdated NTLM authentication protocol in favor of more secure alternatives. NTLM will still work in the next release of Windows server and the next annual release of Windows. Administrators are encouraged to audit their use of NTLM and users are encouraged to transition to Negotiate which attempts authentication with Kerberos before falling back to NTLM.

bleepingcomputer.com · 3 min

TLDR InfoSec

FBI OBTAINS 7,000 LOCKBIT RANSOMWARE DECRYPTION KEYS

The FBI obtained 7,000 decryption keys from the LockBit ransomware group. Victims can now unlock their data for free.

statescoop.com · 2 min

TLDR InfoSec

225,000 MORE CYBERSECURITY WORKERS NEEDED IN US: CYBERSEEK

There are more than 1.2 million cybersecurity workers in the United States, but 225,200 more people are needed.

securityweek.com · 2 min

TLDR InfoSec

GOOGLE MAPS TIMELINE DATA TO BE STORED LOCALLY ON YOUR DEVICE FOR PRIVACY

Google plans to store Maps Timeline data on users' devices instead of in their Google account starting December 1.

thehackernews.com · 2 min