The Daily Index — Wednesday, July 3, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

JUNIPER NETWORKS RELEASES EMERGENCY PATCHES FOR CRITICAL VULNERABILITY

Juniper Networks has released emergency patches for routers due to a critical CVE. The vulnerability is an authentication bypass in Juniper Networks' Session Smart Routers and Conductors running with a redundant peer. Juniper does not have evidence of ongoing exploitation but urges immediate patching.

theregister.com · 2 min

TLDR InfoSec

EVOLVE BANK DATA BREACH IMPACTED FINTECH FIRMS WISE AND AFFIRM

Fintech firms Wise and Affirm were impacted by a recent data breach at Evolve Bank. Evolve Bank & Trust confirmed the security breach and is investigating the incident. Affirm and Wise are reaching out to customers whose data may have been compromised.

securityaffairs.com · 3 min

TLDR InfoSec

MITIGATING SKELETON KEY, A NEW TYPE OF GENERATIVE AI JAILBREAK TECHNIQUE

Researchers at Microsoft found a new generative AI jailbreak technique to avoid guardrails in models. The Skeleton Key attack involves asking the model to augment its behavior as opposed to modifying it by having the model provide a warning before the blocked content instead of refusing to produce it. This blog provides examples of Skeleton Key prompts and some suggestions, such as output filtering, to mitigate this attack.

microsoft.com · 6 min

TLDR InfoSec

ATTACK PATHS INTO VMS IN THE CLOUD

A comprehensive overview of different attacks against VM services from AWS, Azure, and GCP. The overview examines six classes of attack vectors and provides a scenario, overview, example attack, and mitigation for each attack. The attack vectors are vulnerability exploitation, startup script manipulation, SSH key push, direct code execution, SSH over middleware, and serial console access.

unit42.paloaltonetworks.com · 14 min

TLDR InfoSec

EXTENDING BURP SUITE FOR FUN AND PROFIT - THE MONTOYA WAY

The first part of an ongoing series on building Burp Suite extensions using the new Montoya API. The first post explains Burp Extender and the Montoya API and walks through the process of setting up your environment to build a Hello World extension. Subsequent posts include topics such as interacting with HTTP requests and websockets, modifying the UI, and adding functionality to the context menu.

security.humanativaspa.it · 5 min

TLDR InfoSec

INTRODUCING DETECTION AS CODE BETA SUPPORT IN RUNREVEAL

RunReveal has introduced Detection as Code in beta, enabling users to manage security detections using code. This feature integrates with the runreveal CLI, allowing easy export and import of detections in JSON or YAML formats. Users can create, test, and deploy new detections efficiently, with GitHub actions supporting CI/CD workflows.

blog.runreveal.com · 6 min

TLDR InfoSec

SUPPLY CHAIN COMPROMISE LEADS TO TROJANIZED INSTALLERS FOR NOTEZILLA, RECENTX, COPYWHIZ

Trojanized installers for Notezilla, RecentX, and Copywhiz have been discovered distributing malware capable of stealing information and executing additional payloads. The malware observed can steal browser credentials, cryptocurrency wallet information, clipboard contents, and keystrokes. These malicious installers, belonging to a malware family known as dllFake, were distributed through the official website and have been active since early June.

rapid7.com · 9 min

TLDR InfoSec

BYTECODE BREAKDOWN: UNRAVELING FACTORIO'S LUA SECURITY FLAWS

This blog post provides a detailed breakdown of the flaws in Lua runtime that led to an exploit in the video game Factorio. It's possible to leak memory addresses and manipulate objects in memory by exploiting Lua's handling of numbers as doubles. This manipulation allows for security flaws like bypassing ASLR in programs using Lua.

memorycorruption.net · 47 min

TLDR InfoSec

EXPOSING FAKEBAT LOADER: DISTRIBUTION METHODS AND ADVERSARY INFRASTRUCTURE

The Fakebat loader is a widespread loader malware sold as a service on cybercrime forums since at least December 2022. It is distributed through malvertising, fake software updates, and social engineering tactics. The malware offers anti-detection features and targets popular software applications.

blog.sekoia.io · 13 min

TLDR InfoSec

XBOX LIVE GOES DOWN IN NEARLY SEVEN-HOUR OUTAGE

Xbox Live experienced a seven-hour outage - Microsoft has since fixed the technical issues.

variety.com · 2 min

TLDR InfoSec

BIDEN EARMARKS $500M TO EXPAND A DOZEN US TECH HUBS

The Biden Administration is providing $504 million to expand twelve US tech hubs as part of the Tech Hub development program.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

GOOGLE PIXEL 6 SERIES PHONES BRICKED AFTER FACTORY RESET

Google Pixel 6 series phones are being "bricked" after being factory reset.

bleepingcomputer.com · 2 min