The Daily Index — Friday, July 12, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

FUJITSU SAYS "ADVANCED" MALWARE WAS TO BLAME FOR CYBERATTACK, CONFIRMS CUSTOMER DATA LEAKED

Fujitsu Japan has confirmed a cyberattack affecting 49 internal business PCs. First detected on March 15, the sophisticated malware evaded detection and stole sensitive customer and business data. The attack was limited to Fujitsu's internal Japanese network and didn't spread to customer environments. Affected individuals have been notified.

techradar.com · 2 min

TLDR InfoSec

ADVANCE AUTO PARTS: 2.3M PEOPLE'S DATA ACCESSED WHEN CRIMS BROKE INTO OUR SNOWFLAKE ACCOUNT

2.3 million individuals were affected by a breach of Advance Auto Parts' Snowflake instance. The stolen data includes names, birthdates, social security numbers, and ID information.

theregister.com · 3 min

TLDR InfoSec

CAN AI BE MEANINGFULLY REGULATED, OR IS REGULATION A DECEITFUL FUDGE?

Governments are rushing to regulate AI despite a limited understanding of its potential and risks. This article dives into the possible ways AI can be regulated without the regulation being too restrictive or too loose.

securityweek.com · 8 min

TLDR InfoSec

AUDITING THE ASK ASTRO LLM Q&A APP

This blog post discusses security issues found in the Ask Astro open-source chatbot application, focusing on potential chatbot output poisoning, inaccurate document ingestion, and denial of service risks. An audit identified architectural and implementation flaws in Ask Astro, including data poisoning through source material deletion and split-view poisoning through GitHub issues. Recommendations include implementing proper audit and moderation tools to mitigate data poisoning risks and ensuring content updates propagate accurately to the vector database.

blog.trailofbits.com · 11 min

TLDR InfoSec

BINARY SECRET SCANNING HELPED US PREVENT (WHAT MIGHT HAVE BEEN) THE WORST SUPPLY CHAIN ATTACK YOU CAN IMAGINE

The JFrog Security Research team found a leaked access token with administrator access to important Python repositories, preventing a potential supply chain attack. The leaked secret was identified in a Docker container, highlighting the importance of scanning for secrets in both source code and binary files. PyPI's quick response to revoke the leaked token (within 17 minutes) highlights the importance of acting swiftly when leaks are discovered.

jfrog.com · 8 min

TLDR InfoSec

CYTACTIC (PRODUCT LAUNCH)

Cytactic consolidates crisis readiness, response, and recovery tailored to versatile business profiles and risk landscapes.

cytactic.com

TLDR InfoSec

'CRYSTALRAY' ATTACKS JUMP 10X, USING ONLY OSS TO STEAL CREDENTIALS

A new threat actor named "Crystalray" is using open-source software tools to scale its credential stealing and cryptomining operations. First spotted in February, Crystalray has now affected over 1,800 IP addresses globally. Its attack chain includes tools like ASN for reconnaissance, zmap for port scanning, and httpx for domain verification.

darkreading.com · 4 min

TLDR InfoSec

SIGNAL DOWNPLAYS ENCRYPTION KEY FLAW, FIXES IT AFTER X DRAMA

Signal is finally fixing a security flaw in its desktop client's encryption key storage after downplaying the issue since 2018. The flaw allowed anyone with access to the key to decrypt the database, making it vulnerable. Signal is implementing a new encryption method to enhance security and protect user data.

bleepingcomputer.com · 5 min

TLDR InfoSec

COMPLIANCE TO IMPLEMENTATION: EXPLORING DORA AND NIS 2 FRAMEWORKS

The EU introduced NIS 2 and DORA frameworks to enhance cybersecurity in the financial sector. NIS 2 covers various sectors, while DORA focuses specifically on financial entities. Both frameworks aim to improve digital resilience and compliance across different sectors.

blog.aquasec.com · 5 min

TLDR InfoSec

GOOGLE INCREASES BUG BOUNTY REWARDS FIVE TIMES, UP TO $151K

Google has increased bug bounty rewards by five times - the maximum payout now at $151,515 for finding a single security flaw.

bleepingcomputer.com · 2 min

TLDR InfoSec

NATO TO CREATE ITS OWN CYBER DEFENSE CENTER

NATO is creating a new cyber defense center at its headquarters in Belgium to protect against cyber threats.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

GOOGLE ADDS PASSKEYS TO ADVANCED PROTECTION PROGRAM FOR HIGH-RISK USERS

Google is now offering passkeys for high-risk users who join its Advanced Protection Program, replacing the need for a physical security key.

thehackernews.com · 2 min