The Daily Index — Wednesday, July 24, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

SAFETY GEAR GIANT CADRE HOLDINGS REPORTS CYBERSECURITY BREACH

Cadre Holdings reported a cybersecurity breach on July 15. The company detected unauthorized access to its systems, promptly initiated response protocols, and engaged external experts. While certain operations are affected, the full impact remains unclear. Cadre is working to restore normal operations and continues to investigate the incident.

thecyberexpress.com · 2 min

TLDR InfoSec

SQUARESPACE PUBLISHES ABOUT DOMAIN HIJACKING INCIDENTS

Squarespace has published an incident report about how some Squarespace Domains customers had their accounts compromised, leading to unauthorized changes in domain settings. Squarespace suspended affected accounts for security and restored access after verifying customer identities. It has strengthened security measures and continues to monitor for any abnormal activity.

status.squarespace.com · 3 min

TLDR InfoSec

UNIVERSAL CLOUD THREAT MODEL

Securosis and PrimeHarbor Technologies put together a provider and industry agnostic threat model for cloud environments. The model covers threat actors, objectives, targets, and techniques. The authors note that the vast majority of cloud attacks are untargeted/undifferentiated as even small targets can provide financial incentives.

securosis.com · 18 min

TLDR InfoSec

GETTING STARTED WITH EXPLOIT DEVELOPMENT

A collection of courses to learn exploit development. The list of resources begins with buffer overflows before moving on to return oriented programming and other forms of corruption vulnerabilities. Each link includes an explanation of why that resource was chosen.

dayzerosec.com · 10 min

TLDR InfoSec

A FIVE YEAR RETROSPECTIVE ON DETECTION AS CODE

Detection as Code is the concept of taking advantage of the codifying process when writing detections. Detection as Code does not require the use of a full programming language and goes beyond storing detections in Sigma format. The future of Detection as Code lies in utilizing test driven development and CI/CD pipelines as well as utilizing LLMs to audit and improve context around detections.

magonia.io · 5 min

TLDR InfoSec

PROTEXXA (PRODUCT LAUNCH)

Protexxa is an AI-powered platform that helps companies understand their cyber health. It finds exposed passwords, provides incident response plans, and recommends improvements.

protexxa.com

TLDR InfoSec

GOOGLE'S PLAN TO TURN OFF THIRD-PARTY COOKIES IN CHROME IS DYING

Google has abandoned plans to disable third-party cookie tracking by default in Chrome. Instead, users will be asked to make an informed choice about tracking across websites. This decision follows years of testing and delays as early tests of Google's Privacy Sandbox alternative showed weaker results for re-marketing efforts.

theverge.com · 3 min

TLDR InfoSec

CROWDSTRIKE'S UBIQUITY UNDER FIRE AS CONGRESS CALLS FOR CEO TO TESTIFY

The House Committee on Homeland Security has demanded transparency from CrowdStrike CEO George Kurtz following major global outages caused by a software defect. The committee seeks detailed explanations of the incident and CrowdStrike's mitigation steps.

arstechnica.com · 3 min

TLDR InfoSec

META GIVEN WEEKS TO TELL EU CONSUMER PROTECTION AUTHORITIES HOW IT'LL FIX ‘PAY OR CONSENT'

Meta faces EU scrutiny over its "pay or consent" model for Facebook and Instagram introduced in November. The Consumer Protection Cooperation Network has given Meta until September 1 to address concerns about potential misleading practices and undue pressure on users.

techcrunch.com · 4 min

TLDR InfoSec

AMAZON ADDED AS CVE NAMING AUTHORITY

Amazon can now issue CVEs for Amazon and AWS products.

cve.org · 1 min

TLDR InfoSec

GOOGLE SHORTENED LINKS WILL STOP WORKING NEXT YEAR

Google is shutting down the goo.gl link shortener in August 2025. All existing links will redirect to a 404.

theverge.com · 2 min

TLDR InfoSec

VERIZON TO PAY $16 MILLION IN TRACFONE DATA BREACH SETTLEMENT

Verizon will pay $16 million to settle data breaches at TracFone that exposed customer data and led to unauthorized activities.

bleepingcomputer.com · 2 min