The Daily Index — Monday, December 9, 2024

ATTACKS & VULNERABILITIES

TLDR InfoSec

ATRIUM HEALTH DATA BREACH IMPACTS 585,000 PEOPLE

Atrium Health reported a data breach affecting 585,000 individuals due to online tracking technologies on its patient portal between 2015 and 2019. Potential personal information may have been shared with third parties like Google and Facebook, though no financial data was compromised.

securityweek.com · 3 min

TLDR InfoSec

ULTRALYTICS AI LIBRARY COMPROMISED: CRYPTOCURRENCY MINER FOUND IN PYPI VERSIONS

Two versions of the Ultralytics AI library were compromised to deliver a cryptocurrency miner, leading to a spike in CPU usage for users. The malicious code injection occurred in the PyPI deployment workflow, allowing unauthorized modifications to be inserted after the code review step. Users are advised to update to the latest version of the library to avoid potential security risks.

thehackernews.com · 2 min

TLDR InfoSec

ANDROID'S CVE-2020-0401 (PACKAGEMANAGERSERVICE)

This blog post dives into CVE-2020-0401 after an old OnePlus phone sparked curiosity about the vulnerability. The vulnerability allows malicious apps to register as installers without proper permissions so the author tried to exploit it.

Source unavailable · 6 min

TLDR InfoSec

PAVED ROADS? SECURE-BY-DESIGN? MORE BUZZWORDS???

Paved roads is a common security buzzword that refers to the process of creating a standardized path for common security pitfalls. Security reviews should look to identify common pain points across different reviews as candidates for paved roads and then work with teams that will pioneer the paved path. Following this methodology, full classes of vulnerabilities can be fixed at scale as opposed to individually as they appear in individual reviews.

srajangupta.substack.com · 5 min

TLDR InfoSec

PISHI: COVERAGE GUIDED MACOS KEXT FUZZING

This author provides a deep dive on macOS internals and their process in building a KEXT fuzzer. The post begins by detailing the difficulties of kernel-level binary instrumentation in macOS. The author then describes how they came to decide on an architecture that uses a custom-built trampoline to instrument basic blocks that were identified in the Boot Kext Collection and then feed the coverage results into the next iteration of the fuzzer.

r00tkitsmm.github.io · 15 min

TLDR InfoSec

of the modern data landscape. Join live on January 30

Summary unavailable

bit.ly

TLDR InfoSec

ETHYCA (PRODUCT LAUNCH)

Ethyca's platform helps organizations inventory data through automated system mapping to remain compliant with consent management across their entire data workflows.

ethyca.com

TLDR InfoSec

EUROCOPS TAKE DOWN 'SECURE' CRIMINAL CHAT SYSTEM KNOWN AS MATRIX

French and Dutch police dismantled the Matrix encrypted chat app used by criminals, seizing 2.3 million messages about illegal activities across 40 servers. The operation led to three arrests and exposed the app's supposed security.

theregister.com · 3 min

TLDR InfoSec

LET'S TALK DENIAL OF WALLET

Denial of Wallet attacks occur when an attacker makes use of cloud services which charge based on usage to generate large bills for victims. They can be caused by scaling traditional DDoS attacks or other vectors such as cryptojacking or LLM hijacking. This is the first post in a series on Denial of Wallet attacks and mitigations to protect against them.

cloudsecurity.club · 5 min

TLDR InfoSec

NEW WINDOWS ZERO-DAY EXPOSES NTLM CREDENTIALS, GETS UNOFFICIAL PATCH

A new zero-day vulnerability in Windows lets attackers steal NTLM credentials by tricking users into viewing a malicious file in Windows Explorer. The issue affects various Windows versions, from Windows 7 to Windows 11. An unofficial patch is available from the 0patch team until Microsoft releases an official fix.

bleepingcomputer.com · 3 min

TLDR InfoSec

THE HIDDEN CHALLENGES OF AUTOMATING SECRETS ROTATION: WHY AUTOMATIC CREDENTIAL ROTATION ISN'T A ONE-CLICK SOLUTION

While automatic secrets rotation is a desirable goal, it requires significant organizational maturity in secrets management, proper infrastructure, and careful planning rather than being a simple one-click solution, as credential rotation involves complex processes that can impact production systems if not handled correctly.

blog.gitguardian.com · 7 min

TLDR InfoSec

9 THOUGHTS ON “U.S. OFFERED $10M FOR HACKER JUST ARRESTED BY RUSSIA”

The U.S. offered $10 million for information leading to the arrest of a Russian hacker known as "Wazawaka," who was involved in ransomware attacks.

krebsonsecurity.com · 3 min

TLDR InfoSec

APPLE SUED OVER ABANDONING CSAM DETECTION FOR ICLOUD

Apple is being sued for not implementing a system to scan iCloud photos for child sexual abuse material.

techcrunch.com · 2 min