The Daily Index — Wednesday, July 31, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

META'S AI SAFETY SYSTEM DEFEATED BY THE SPACE BAR

Summary unavailable

theregister.com · 3 min

TLDR InfoSec

RANSOMWARE OPERATORS EXPLOIT HYPERVISOR VULNERABILITY FOR MASS ENCRYPTION

Microsoft has posted a warning about a vulnerability in domain joined ESXi hypervisors. ESXi hypervisors were found to consider any member of the AD group “ESX Admins” to have full administrative privileges. Microsoft recommends applying the latest patches. The post includes threat hunting queries.

microsoft.com · 9 min

TLDR InfoSec

SELENIUMGREED: THREAT ACTORS EXPLOIT EXPOSED SELENIUM GRID SERVICES FOR CRYPTOMINING

Wiz has detected a campaign that targets exposed Selenium Grid services. The attackers are using the Selenium WebDriver API to run a Python reverse shell to download a crypto miner. Selenium warns against exposing Selenium Grid to the public Internet and enabling authentication by default.

links.tldrnewsletter.com · 10 min

TLDR InfoSec

BREAKING ICHANO ATHOME'S NETWORK ENCRYPTION WITH FRIDA

iChano AtHome Camera is a pair of applications that enable smartphones and computers to be used as smart cameras. The applications use a custom encryption protocol instead of HTTPS. This author first attempted to crack the encryption protocol using static reverse engineering but discovered that it was using Blowfish in ECB mode. Decryption with this method didn't work, so the author utilized a Frida script to decrypt messages and hijack cameras on the network.

links.tldrnewsletter.com · 6 min

TLDR InfoSec

HOW TO WRITE A GENERATIVE AI CYBERSECURITY POLICY

This blog post discusses how CISOs face urgent challenges in establishing effective security practices and provides some guidelines on how to create effective AI Cybersecurity policy. Key recommendations include prohibiting sensitive data sharing with public AI platforms, validating AI-generated information, and adopting a zero-trust approach. While AI presents risks, it also offers significant benefits when used wisely, making a thoughtful security strategy crucial for organizations navigating this evolving landscape.

links.tldrnewsletter.com · 6 min

TLDR InfoSec

LINEAJE (PRODUCT LAUNCH)

Lineaje comprises a software bill of materials (SBOM) manager and an SBOM exchange, as well as a third-party risk manager and an open source risk manager, which can be used by companies that source, build, buy, or use software applications.

lineaje.com

TLDR InfoSec

META TO PAY $1.4 BILLION SETTLEMENT WITH TEXAS OVER FACIAL RECOGNITION AND PHOTO TAGS

This landmark settlement between Texas and Meta for $1.4 billion over Facebook's facial recognition feature sets a precedent for privacy rights enforcement. The lawsuit, filed in 2022, claimed the "Tag Suggestions" feature breached biometric identifiers and deceptive trade practices acts.

theverge.com · 3 min

TLDR InfoSec

CONTROVERSIAL INTERNET BILL KOSA PASSED BY SENATE

The Kids Online Safety Act (KOSA) has passed the Senate. This act requires online platforms to protect minors from various harms. It mandates transparency in algorithm use, opt-out options for data collection, and limits on addictive features. Critics worry about potential misuse of surveillance and censorship.

techcrunch.com · 4 min

TLDR InfoSec

SIDEWINDER UTILIZES NEW INFRASTRUCTURE TO TARGET PORTS AND MARITIME FACILITIES IN THE MEDITERRANEAN SEA

SideWinder is targeting ports and maritime facilities in the Mediterranean Sea and Indian Ocean using phishing emails with specific themes and logos. The threat actor uses techniques like spear-phishing and document exploitation to deliver targeted implants. Malicious documents with remote template injection techniques are used to gain initial access to victims' systems.

blogs.blackberry.com · 9 min

TLDR InfoSec

CYBER RANSOM PAYMENTS WILL NEED TO BE DISCLOSED BY AUSTRALIAN BUSINESSES UNDER NEW LAWS

New laws will require Australian businesses to disclose ransom payments to hackers to increase transparency and combat ransomware attacks.

abc.net.au · 6 min

TLDR InfoSec

CROOKS BYPASSED GOOGLE'S EMAIL VERIFICATION TO CREATE WORKSPACE ACCOUNTS, ACCESS 3RD-PARTY SERVICES

Crooks bypassed Google's email verification to create Workspace accounts and access third-party services - the issue was fixed within 72 hours of discovery.

krebsonsecurity.com · 2 min

TLDR InfoSec

AI-POWERED DEEPFAKE TOOLS BECOMING MORE ACCESSIBLE THAN EVER

This post uncovers new cybercrime tools that pose increased threats to security, highlighting the rapid evolution of AI-powered hacking services and their potential for mass exploitation.

trendmicro.com · 2 min