TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 7 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 11 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 12 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR ProductTLDR Product · 12 stories
  8. Page 8: TLDR DesignTLDR Design · 12 stories
  9. Page 9: TLDR FoundersTLDR Founders · 12 stories
  10. Page 10: TLDR MarketingTLDR Marketing · 13 stories
  11. Page 11: Resources & ToolsTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders · 15 stories
  12. Page 12: SponsoredTLDR, TLDR Web Dev, TLDR InfoSec, TLDR Product · 8 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

CYBERATTACK AT A FRENCH HOSPITAL EXPOSES HEALTH DATA OF OVER 750K PATIENTS

A threat actor has allegedly breached Mediboard, a software by Software Medical Records for managing Electronic Patient Records. Software Medical Records stated that upon investigation it determined that the breach affected one client's privileged Mediboard account which they used according to its standard function and that the attacks had not compromised any of Software Medical Records' infrastructure. The breached data may include full names, dates of birth, gender information, home addresses, phone numbers, email addresses, physician history, prescription information, and health card history.

bleepingcomputer.com · 2 min

TLDR InfoSec

APPLYING TEST-DRIVEN DEVELOPMENT TO DETECTION ENGINEERING

Test-Driven Development is a software engineering philosophy that often uses an Arrange-Act-Assert design pattern where a state is set up, an action is taken, and then it is determined whether the results were what was expected. In detection engineering, the Arrange step can be modeled by deploying detection logic and setting up a test system. The Act step would then involve executing a test/tool/malware sample. The Assert step would evaluate what response was taken. Depending on the maturity and precision of the alert, the Assert step may make sure that the logs which observe the action are collected, a detection is fired off, or preventative action is taken.

links.tldrnewsletter.com · 12 min

TLDR InfoSec

INTRODUCING RESOURCE CONTROL POLICIES (RCPS) TO CENTRALLY RESTRICT ACCOUNT ACCESS

Resource Control Policies is a new AWS feature that allows users to define a data perimeter in AWS Organizations by centrally restricting external access to AWS resources. RCPs complement SCPs, which offer central control over the maximum permissions of IAM users and roles by offering central control over the maximum resources on AWS resources. At launch, RCPs can apply to resources of the following AWS services: S3, STS, KMS, SQS, and Secrets Manager.

aws.amazon.com · 3 min

TLDR InfoSec

MITRE SHARES 2024'S TOP 25 MOST DANGEROUS SOFTWARE WEAKNESSES

MITRE released a list of the top 25 vulnerabilities of the year after analyzing over 31K CVE records with a stronger focus on those in CISA's KEV. Cross Site Scripting, Out-of-bounds write, and SQL Injection lead the group while Uncontrolled Resource Consumption and Code Injections all had large increases this year. MITRE encourages users to review the list and update security practices and priorities accordingly.

bleepingcomputer.com · 2 min

TLDR IndexPage 5