The Daily Index — Wednesday, June 19, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

LIFE360 CONFIRMS A HACKER STOLE TILE TRACKER IDS AND CUSTOMER INFO

A hacker breached the systems behind Tile device trackers and stole customer data like names, addresses, emails, and phone numbers by accessing a law enforcement request tool. Tile's parent company Life360 confirmed the breach, stating that the hacker attempted extortion.

theverge.com · 2 min

TLDR InfoSec

HIGH-SEVERITY VULNERABILITIES AFFECT A WIDE RANGE OF ASUS ROUTER MODELS

Asus has released updates patching multiple critical vulnerabilities in its routers. The first is an authentication bypass that allows remote attackers to log into the router with no authentication. The second vulnerability is a buffer overflow that could allow attackers with administrative access to execute arbitrary commands. The third vulnerability allows attackers to execute remote commands with no user interaction. Asus hasn't seen any exploitation of these vulnerabilities.

arstechnica.com · 2 min

TLDR InfoSec

ATTACKERS DEPLOYING NEW TACTICS IN CAMPAIGN TARGETING EXPOSED DOCKER APIS

This blog post dives into a new malware campaign that targets exposed Docker API endpoints to deliver cryptocurrency miners and other payloads. The campaign uses a remote access tool to execute more malware and a utility to spread via SSH.

securitylabs.datadoghq.com · 15 min

TLDR InfoSec

BUILDING TO PREVENT SUBDOMAIN TAKEOVERS

This blog post discusses architectural decisions that can be made by platforms offering custom domains to proactively prevent subdomain takeovers. The most common mitigation method employed is requiring domain verification, which is most commonly implemented as a TXT record with a verification string. Other mechanisms suggested are to add entropy to the underlying record to make it difficult to generate an identical record, preventing the re-registration of custom domains, and charging for custom domains.

ramimac.me · 5 min

TLDR InfoSec

7 REASONS WHY SECURITY WILL ALWAYS BE AMAZON'S TOP PRIORITY

AWS CISO, Chris Bentz, details some of the ideas driving AWS' security prioritization with a focus on generative AI. Bentz highlights some conventional wisdom such as focusing on the basics, security being everyone's job, and security requiring innovation and being necessary to innovation. He also touches on the importance of customers having control over their data and the potential value of generative AI in the AWS security strategy.

aboutamazon.com · 5 min

TLDR InfoSec

MOVE FROM ALWAYS-ON PRIVILEGES TO ON-DEMAND ACCESS WITH NEW PRIVILEGED ACCESS MANAGER

Google Cloud's Privileged Access Manager (PAM) enhances security by granting on-demand access with just-in-time approvals. PAM helps organizations shift from always-on privileges to time-bound, approved access for improved security and operational efficiency. IAM admins can create entitlements for users to request specific access, promoting least privilege principles.

cloud.google.com · 3 min

TLDR InfoSec

SECURITY BUG ALLOWS ANYONE TO SPOOF MICROSOFT EMPLOYEE EMAILS

A researcher found an unpatched bug allowing anyone to impersonate Microsoft corporate email accounts for credible phishing attempts. He reported the email spoofing bug to Microsoft, but the company dismissed it after failing to reproduce the issue, so he then publicized the vulnerability on X.

techcrunch.com · 5 min

TLDR InfoSec

‘ENCRYPTION IS DEEPLY THREATENING TO POWER': MEREDITH WHITTAKER OF MESSAGING APP SIGNAL

The CEO of Signal warned that the EU's proposed law to scan private messages for child exploitation material threatens web security. She argued it fundamentally undermines encryption by creating vulnerabilities that would have global implications beyond Europe.

theguardian.com · 4 min

TLDR InfoSec

DRIVING FORWARD IN ANDROID DRIVERS

Google's Project Zero team discusses a vulnerability in an Android driver related to JPEG decoding. The vulnerability allows for a race condition that can lead to memory corruption and potential exploitation. Attackers can achieve arbitrary read and write capabilities in the system by exploiting this vulnerability.

googleprojectzero.blogspot.com · 20 min

TLDR InfoSec

AWS ADDS PASSKEY MFA FOR ROOT AND IAM USERS

AWS has added passkeys to its list of supported MFA methods and has begun to enforce MFA for root users of organization management accounts.

aws.amazon.com · 4 min

TLDR InfoSec

LOS ANGELES UNITED BECOMES LATEST US SCHOOL DISTRICT TO BAN SMARTPHONES

The Los Angeles United School District banned students from using smartphones on campus to address mental health risks and distractions.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

PRIVATE CLOUD COMPUTE: A NEW FRONTIER FOR AI PRIVACY IN THE CLOUD

In this blog post, Apple describes how it extends device security into the cloud by using Private Cloud Compute, ensuring user data privacy.

security.apple.com · 15 min