The Daily Index — Friday, October 18, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

JETPACK FIXES CRITICAL INFORMATION DISCLOSURE FLAW EXISTING SINCE 2016

The Jetpack WordPress plugin has released a fix for a critical vulnerability that was discovered during an internal audit. The vulnerability allowed logged-in users to view forms that were submitted by other users. Automattic has released updates for 101 impacted versions of Jetpack and recommends updating immediately.

bleepingcomputer.com · 2 min

TLDR InfoSec

REVENUE CYCLE VENDOR NOTIFYING NEARLY 400K PATIENTS OF HACK

Gryphon Healthcare is notifying nearly 400K individuals that their data was breached due to an unnamed third party. Potentially compromised information includes names, dates of birth, addresses, Social Security numbers, dates of service, diagnoses, health insurance information, medical treatment and record numbers, providers, and prescriptions. Gryphon is not aware of any misuse of this information.

bankinfosecurity.com · 3 min

TLDR InfoSec

HACKERS ARE EXTORTING GLOBE LIFE WITH STOLEN CUSTOMER DATA

Globe Life has reported a data breach affecting its AIL subsidiary. A hacker stole sensitive customer information, including names, addresses, and sometimes Social Security numbers and health data. While 5,000 individuals are confirmed affected, the total impact could be much larger.

techcrunch.com · 2 min

TLDR InfoSec

DECONSTRUCTING SECURITY MONITORING ANTIPATTERNS

Many security teams jump to security monitoring before implementing basic security hygiene. This post introduces a collection of security monitoring antipatterns. These antipatterns include focusing on data collection without implementing effective detection and response strategies, relying on custom-built solutions instead of off-the-shelf tooling, prioritizing shiny new tools over established practices, and expecting one tool to be sufficient for all needs.

links.tldrnewsletter.com · 7 min

TLDR InfoSec

PERFECTING RANSOMWARE ON AWS — USING KEYS TO THE KINGDOM TO CHANGE THE LOCKS

Ransomware attacks on AWS using cross-account KMS keys can be blocked by AWS if the key is owned by them. The new AWS KMS External Key Store feature allows for secure communication with on-premises HSMs for encryption. Simulating ransomware attacks on AWS can help to develop understanding of vulnerabilities and improve security measures.

links.tldrnewsletter.com · 8 min

TLDR InfoSec

GATEKEEPER BYPASS: UNCOVERING WEAKNESSES IN A MACOS SECURITY MECHANISM

macOS may not properly enforce the quarantine attribute, potentially allowing a bypass of the Gatekeeper security mechanism. Gatekeeper is designed to ensure only trusted software runs on systems by validating applications before execution. To reduce the risk of malicious Gatekeeper bypasses, developers should enforce the attribute on all files their applications handle.

unit42.paloaltonetworks.com · 7 min

TLDR InfoSec

👉 Try Pluralsight for free

Summary unavailable

pluralsight.com

TLDR InfoSec

PASSBOOK

Passbook is a paid app that allows users to create an Apple Wallet pass from any QR code.

9to5mac.com · 3 min

TLDR InfoSec

CHINESE RESEARCHERS FIND A POTENTIAL QUANTUM ATTACK ON CLASSICAL ENCRYPTION

A group of researchers have published a paper detailing a new attack using commercial D-wave quantum annealing systems. The attack targets Substitution-Permutation Network structured algorithms, which are at the heart of the AES encryption standards. The report was limited to targeting a 22-bit key though, which is much smaller than those commonly used.

theregister.com · 4 min

TLDR InfoSec

HYBRID WORK EXPOSES NEW VULNERABILITIES IN PRINT SECURITY

Hybrid work has increased printer, unmanaged devices, and network security risks. A study showed that 67% of organizations experienced printer-related incidents in 2024. This article discusses recently disclosed print-related vulnerabilities.

darkreading.com · 5 min

TLDR InfoSec

DEEPFAKE LOVERS SWINDLE VICTIMS OUT OF $46M IN HONG KONG AI SCAM

Hong Kong police arrested 27 people involved in a $46 million AI-powered romance scam. The operation used face-swapping technology to create fake attractive personas for online dating, tricking victims into fraudulent cryptocurrency investments.

arstechnica.com · 3 min

TLDR InfoSec

CISA, FBI SEEK PUBLIC COMMENT ON SOFTWARE SECURITY BAD PRACTICES GUIDANCE

The CISA and FBI have released a guidance on software security bad practices and are seeking public feedback.

securityweek.com · 2 min

TLDR InfoSec

TWO SUDANESE NATIONALS INDICTED FOR OPERATING THE ANONYMOUS SUDAN GROUP

The US charged two Sudanese brothers with running the Anonymous Sudan cybercrime group, which is known for launching DDoS attacks worldwide.

securityaffairs.com · 2 min

TLDR InfoSec

FBI ARREST ALABAMA MAN SUSPECTED OF HACKING SEC'S X ACCOUNT

An Alabama man was arrested for hacking the SEC's account to fake approval of Bitcoin ETFs.

bleepingcomputer.com · 3 min