The Daily Index — Friday, August 23, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

HACKERS STEAL BANKING CREDENTIALS FROM IOS, ANDROID USERS VIA PWAS

A new trend in phishing campaigns is to use progressive web apps (PWAs) to trick victims into entering banking credentials. The campaigns being tracked are using bogus notifications to update banking apps or ads on social media to download a bank's application to earn a promotion. The victim is then directed to a fake Google Play or App Store page that downloads the PWA which mimics the official app and steals the victim's credentials. The benefit of this method is that attackers can bypass App Store or Play Store restrictions.

bleepingcomputer.com · 4 min

TLDR InfoSec

ENHANCING LINKEDIN'S SECURITY POSTURE MANAGEMENT WITH AI-DRIVEN INSIGHTS

This blog post from Linkedin explains why and how LinkedIn developed its own AI-driven Security Posture Platform (SPP) to manage vulnerabilities across its vast hardware estate. The SPP employs generative AI models and GraphQL API to efficiently map security engineers' queries to the graph, providing rapid access to accurate vulnerability information.

linkedin.com · 10 min

TLDR InfoSec

RESEARCHERS HIGHLIGHT HOW POISONED LLMS CAN SUGGEST VULNERABLE CODE

There is new research that reveals AI code assistants can be manipulated to suggest vulnerable code. A technique called CodeBreaker can poison training data, creating undetectable malicious code samples using comments in code.

links.tldrnewsletter.com · 5 min

TLDR InfoSec

C++ UNWIND EXCEPTION METADATA: A HIDDEN REVERSE ENGINEERING BONANZA

This blog post discusses how C++ compilers insert wind and unwind metadata to ensure proper destructor calls during exceptions in C++ programs. Compilers invisibly insert special blocks to handle object destruction when exceptions occur, even if control flow skips normal destructor calls. Wind metadata provides valuable information for analyzing constructors and destructor calls in C++ programs.

msreverseengineering.com · 14 min

TLDR InfoSec

GARTNER 2024 HYPE CYCLE FOR EMERGING TECHNOLOGIES HIGHLIGHTS DEVELOPER PRODUCTIVITY, TOTAL EXPERIENCE, AI, AND SECURITY

The yearly hype cycle from Gartner suggests organizations will start adopting human-centric security and privacy techniques. Emerging technologies include AI TRiSM, cybersecurity mesh, digital immune systems, and homomorphic encryption.

links.tldrnewsletter.com · 4 min

TLDR InfoSec

WHAT DOES A SOC ANALYST DO?

This blog post provides an overview of the role of a SOC analyst. The main functions of a SOC analyst are security monitoring, incident detection, incident analysis, and incident response. Most SOCs are organized into tiers, with tier 1 analysts doing basic triage of alerts and higher tiered analysts doing more senior incident response and threat hunting.

tcm-sec.com · 6 min

TLDR InfoSec

ARDEN CLAIMS SERVICE REPORTS DATA BREACH, 139,000 AFFECTED

Arden Claims Service experienced a data breach in October 2023 that affected 139,000 people. Personal information, including names and possibly Social Security numbers, was stolen by a third party. The firm is providing affected individuals with free identity protection services.

securityweek.com · 2 min

TLDR InfoSec

U.S. APPEALS COURT RULES GEOFENCE WARRANTS ARE UNCONSTITUTIONAL

A Fifth Circuit appeals court judge ruled that geofence warrants, where law enforcement requests all data from users in an area, are unconstitutional.

techcrunch.com · 3 min

TLDR InfoSec

DOJ SUES GEORGIA TECH OVER ALLEGEDLY FAILING TO MEET CYBER REQUIREMENTS FOR DOD CONTRACTS

The Justice Department is suing Georgia Tech for not meeting the cybersecurity standards needed for Pentagon contracts.

cyberscoop.com · 2 min

TLDR InfoSec

DEF CON 32: WHAT WE LEARNED ABOUT SECRETS SECURITY AT APPSEC VILLAGE

This post discusses the AppSec village and notes the utility of tools like GitGuardian to detect and address security vulnerabilities in software development.

blog.gitguardian.com · 8 min