TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 10 stories
  3. Page 3: TLDR AITLDR AI · 10 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 9 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 11 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR DesignTLDR Design · 12 stories
  8. Page 8: TLDR FoundersTLDR Founders · 12 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 9 stories
  10. Page 10: Resources & ToolsTLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders, TLDR Marketing · 15 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR InfoSec, TLDR Crypto, TLDR Founders · 8 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

TEAMVIEWER'S CORPORATE NETWORK WAS BREACHED IN ALLEGED APT HACK

TeamViewer has notified customers that its corporate network was breached by APT29, also known as Cozy Bear and Midnight Blizzard. It assured customers that its corporate and customer networks are completely separate and no customer information was compromised. Health-ISAC informed providers that it has detected threat actors exploiting TeamViewer to attack networks. It is unclear if the two are related.

bleepingcomputer.com · 3 min

TLDR InfoSec

LEARN HOW UNSAFE DESERIALIZATION VULNERABILITIES WORK IN RUBY

An in-depth blog post from GitHub that explores how unsafe deserialization vulnerabilities manifest in Ruby and works through the process of creating a gadget chain to detect unsafe deserialization vulnerabilities in the Oj library. The post breaks down how the universal deserialization gadget for Marshal works and how it can be adapted to the Oj and other deserialization libraries. It then extends the gadget chain that they create to achieve RCE using the zip command and lists the vulnerable sinks that CodeQL uses to detect unsafe deserialization vulnerabilities.

github.blog · 13 min

TLDR InfoSec

GOOGLE TO BLOCK ENTRUST CERTIFICATES IN CHROME STARTING NOVEMBER 2024

Google will block websites using Entrust certificates in Chrome starting November 2024 due to compliance failures and security issues. This decision aims to ensure secure connections between browsers and websites, with users being warned of insecure connections from Entrust-issued certificates. Website operators are advised to switch to other trusted certificate authorities to avoid disruptions by October 31.

thehackernews.com · 2 min

TLDR InfoSec

CISA: MOST CRITICAL OPEN SOURCE PROJECTS NOT USING MEMORY SAFE CODE

A report from CISA examined 172 broadly deployed open source projects. Some key findings include that 52% of the analyzed projects contain code written in memory unsafe languages, 55% of the total lines of code across all projects were written in memory unsafe languages, and that the median proportion of lines of code written in memory unsafe languages across the ten largest projects was 62.5% with four projects exceeding 94%. CISA notes that some of these projects are designed with critical performance and resource constraints where memory unsafe languages will likely remain prevalent.

bleepingcomputer.com · 3 min

TLDR IndexPage 5