The Daily Index — Wednesday, October 16, 2024 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

MEDICAL DATA OF ALMOST 400,000 AMERICANS STOLEN: HERE'S WHAT WE KNOW

Gryphon Healthcare has reported a supply-chain cyberattack that affected hundreds of thousands of patients. The breach, which potentially exposed sensitive personal and health information, occurred through an unnamed partner company before August 13. No evidence of data misuse has been found. The compromised data includes names, birthdates, addresses, Social Security numbers, and medical details.

techradar.com · 2 min

TLDR InfoSec

MOZILLA PATCHES CRITICAL FIREFOX VULN THAT ATTACKERS ARE ALREADY EXPLOITING

Mozilla has released a patch for a new Firefox vulnerability with a CVSS of 9.8. The vulnerability arises from a use-after-free bug in the Animation timeline feature in the Page Inspector tool in Firefox. The vulnerability is actively being exploited. Mozilla encourages immediate updating.

theregister.com · 2 min

TLDR InfoSec

THIS NEW SUPPLY CHAIN ATTACK TECHNIQUE CAN TROJANIZE ALL YOUR CLI COMMANDS

Open source ecosystems are vulnerable to supply chain attacks, with entry points being an often overlooked risk. Attackers can exploit this feature across multiple programming ecosystems to execute malicious code when specific commands are run using methods like command-jacking.

checkmarx.com · 14 min

TLDR InfoSec

CISO CONVERSATIONS: JULIEN SORIANO (BOX) AND CHRIS PEAKE (SMARTSHEET)

This article profiles two CISOs by discussing their career paths, leadership development, and views on modern CISO roles. It covers team building, mentoring, and advice they've received and they would give. It also explores their perspectives on emerging threats in cybersecurity, including evolving attack methods and data protection challenges.

securityweek.com · 10 min

TLDR InfoSec

HOW TO BUILD A SECURE RECON NETWORK USING TAILSCALE

Securing offensive security/bug bounty infrastructure is pivotal to protecting the target's sensitive data. This post showcases how Tailscale can be utilized with a VPS and ufw to create a secure, private network. It shows how to use advanced Tailscale features to enable file sharing and keyless SSH.

bugcrowd.com · 7 min

TLDR InfoSec

MICROSOFT SAYS MORE RANSOMWARE STOPPED BEFORE REACHING ENCRYPTION

Microsoft reported a 2.75x increase in ransomware attacks year-over-year, but noted improved defenses. Successful encryptions have decreased threefold in two years due to better automatic detection, while unmanaged devices remain a vulnerability in 90% of cases. Akira is the top ransomware variant, followed by LockBit, Play, ALPHV/BlackCat, and Black Basta.

theregister.com · 5 min

TLDR InfoSec

CLOUD LOGGING TIPS & TRICKS

This blog post contains tips for collecting cloud logs. It introduces Wiz's Cloud Logging Framework, which categorizes logs by security use case, mapping logs to either identity, data, network, compute, or control plane. The post highlights the control plane logs by providing tailored tips for AWS, Azure, GCP, and Google Workspace.

wiz.io · 6 min

TLDR InfoSec

ELIMINATING MEMORY SAFETY VULNERABILITIES AT THE SOURCE

This blog post explores how focusing on writing new code in memory safe languages led to a decrease in vulnerabilities in an Android project. It posits that the next stage in security is to focus on safe coding and secure code practices. This is because vulnerabilities decay exponentially so older code will become safer over time, therefore teams should focus on writing new code in memory safe languages and only work on the legacy code when bug fixing.

security.googleblog.com · 6 min

TLDR InfoSec

LEEDS EQUITY PARTNERS ACQUIRES OFFSEC

Leeds Equity has acquired the OffSec certification company.

prnewswire.com · 1 min

TLDR InfoSec

AMAZON SAYS 175 MILLION CUSTOMER NOW USE PASSKEYS TO LOG IN

Amazon says that over 175 million customers are using passkeys for faster and more secure logins.

bleepingcomputer.com · 2 min

TLDR InfoSec

AUTHORITIES SEIZE DARK WEB MARKETPLACES SIPULITIE AND TSÄTTI

Finnish and Swedish authorities, with Bitdefender's help, closed down dark web marketplaces Sipulitie and Tsätti, stopping illegal drug sales in the millions.

hackread.com · 2 min