The Daily Index — Tuesday, January 28, 2025

ATTACKS & VULNERABILITIES

TLDR InfoSec

BANK OF AMERICA'S SENSITIVE CUSTOMER DATA COMPROMISED IN THIRD-PARTY HACK

Bank of America confirmed that a breach of a third-party software provider led to the exposure of at least 414 customers' personal data. The compromised data includes names, SSNs, addresses, phone numbers, passport numbers, and loan numbers. Bank of America has stated that its systems are not impacted and that it has found no evidence of breach.

benzinga.com · 1 min

TLDR InfoSec

HUNDREDS OF FAKE REDDIT SITES PUSH LUMMA STEALER MALWARE

Researchers are warning of threat campaigns that are utilizing fake Reddit pages to social engineer users to download files via a fake WeTransfer site. The campaign involves fake Reddit threads where a user asks for help downloading a tool, another user provides a fake WeTransfer link, and then the first user thanks them. The link redirects to a fake WeTransfer page which redirects the user to a page that downloads the Lumma Infostealer malware.

bleepingcomputer.com · 2 min

TLDR InfoSec

CLONE2LEAK: YOUR GIT CREDENTIALS BELONG TO US

A security engineer investigating GitHub Desktop discovered a vulnerability in Git's Credential Protocol that could leak user credentials. Further research revealed similar bugs across multiple Git-related projects, stemming from improper message handling in credential helper implementations.

flatt.tech · 11 min

TLDR InfoSec

GETTING STARTED WITH AWS SECURITY: ATTACKING AND AUDITING

A blog post with resources and a lab environment for beginners to get started with AWS security. The post begins with an overview and demonstration of 4 common attacks against EC2 and S3. The post then provides an overview of CLI and GUI based auditing.

cc-connected.com · 5 min

TLDR InfoSec

VMWARE ESXI LOGGING AND DETECTION OPPORTUNITIES

Summary unavailable

detect.fyi · 22 min

TLDR InfoSec

AXOFLOW (PRODUCT LAUNCH)

Axoflow automatically discovers security data sources (such as syslog, OpenTelemetry, Windows, and more) and then classifies, normalizes, and enriches the data, reduces data volume by more than 50%, and eliminates the need for manual data wrangling.

axoflow.com

TLDR InfoSec

BRITISH MUSEUM SAYS EX-CONTRACTOR 'SHUT DOWN' IT SYSTEMS, WREAKED HAVOC

A fired IT contractor broke into the British Museum on January 23 and sabotaged several IT systems, forcing the closure of temporary exhibitions through the weekend. The individual was arrested at the scene while the museum was working to restore normal operations.

theregister.com · 3 min

TLDR InfoSec

NEW GHOSTGPT CHATBOT FACILITATES MALWARE CREATION AND PHISHING

Researchers from Abnormal Security have reported on a new malicious chatbot that is being sold via Telegram. They believe that GhostGPT is a wrapper around a jailbroken version of ChatGPT or other open-source LLM. This post highlights the risk that these tools bring by giving low-skilled hackers more powerful tools.

infosecurity-magazine.com · 2 min

TLDR InfoSec

PUBLIC GOOGLE DRIVE LINK EXPOSES MILITARY ORDERS CONTAINING PII AND OPERATIONAL DETAILS

A report was submitted to the U.S. Dept of Defense regarding a security issue found in a Google Drive link. The link contained PDFs disclosing sensitive personal information, posing a risk of privacy violation and identity theft. The suggested action is to either remove the folder or adjust its privacy settings.

hackerone.com · 1 min

TLDR InfoSec

WHAT DEVELOPERS THINK ABOUT SECURITY IN 2025 – AND WHY IT MATTERS

This survey investigates how developers approach code security, examining their challenges, priorities, and organizational support needs.

25440394.fs1.hubspotusercontent-eu1.net · 15 min

TLDR InfoSec

HACKERS STEAL $85 MILLION WORTH OF CRYPTOCURRENCY FROM PHEMEX

Hackers stole $85 million in cryptocurrency from Phemex and the exchange suspended transactions, identified vulnerabilities, and reported the incident to authorities.

bleepingcomputer.com · 2 min

TLDR InfoSec

A TUMULTUOUS WEEK FOR FEDERAL CYBERSECURITY EFFORTS

Brian Krebs reports on major cybersecurity concerns as Trump dismantles key federal security infrastructure, including firing all Cyber Safety Review Board advisors, scraps AI safety measures, and appoints officials who aim to weaken CISA's role in combating misinformation and cyber threats.

krebsonsecurity.com · 8 min