The Daily Index — Friday, February 28, 2025

GENERAL

TLDR InfoSec

2025? Read the report.

Summary unavailable

obsidiansecurity.com

TLDR InfoSec

OVER 49K MISCONFIGURED BUILDING MANAGEMENT SYSTEMS EXPOSED ONLINE

Researchers from Modat discovered 49K exposed Access Management Systems that were not correctly configured for secure authentication. Anyone could view unencrypted employee data such as names, email addresses, phone numbers, biometrics, photos, work schedules, and access logs. In some cases, Modat could even edit employee records, add fake employees, change access credentials, restrict access to legitimate employees, and grant access to malicious actors.

bleepingcomputer.com · 2 min

TLDR InfoSec

SOUTHERN WATER SAYS BLACK BASTA RANSOMWARE ATTACK COST £4.5M IN EXPENSES

UK water supplier Southern Water disclosed in its financial report that a Black Basta ransomware attack from February 2024 cost the company roughly £4.5M. Leaked chat logs from the Black Basta ransomware gang show that the company offered to pay £750K after the attackers demanded $3.5M. Representatives from the company refused to clarify whether they paid the ransomware gang.

bleepingcomputer.com · 2 min

TLDR InfoSec

DOES CLAUDE 3.7 SONNET GENERATE INSECURE CODE?

Claude 3.7 Sonnet generated a CRUD application with notably secure code but still with a potential denial-of-service vulnerability in the email validation regex, which uses greedy quantifiers that could lead to exponential processing time. Despite this issue, Claude 3.7 Sonnet outperformed previous models and competitors that generated code with XSS vulnerabilities.

snyk.io · 3 min

TLDR InfoSec

HOW DOES SENDBIRD SECURE AWS?

Sendbird improved AWS security by utilizing a holistic cloud security model, transitioning to SSO with Okta, managing access requests for EC2 and databases, and setting up SIEM for cloud security. They also focused on secure container management and plan to continue enhancing security measures for their evolving infrastructure.

sendbird.com · 8 min

TLDR InfoSec

MINIMAL LLM-BASED FUZZ HARNESS GENERATOR

Researchers from AdaLogics experimented with using their Fuzz Introspector tool along with an LLM to generate fuzz testing harnesses. The fuzzing workflow that they created takes a project link and function name and uses Fuzz Inspector to extract the necessary data for the LLM. This data is then converted into a prompt that is sent to the LLM and then the LLM's output is extracted and manually verified for correctness.

adalogics.com · 5 min

TLDR InfoSec

ARCHIPELO (PRODUCT LAUNCH)

Archipelo aims to improve software security and compliance by tracking the Software Development Lifecycle (SDLC) and tracking AI usage during the process.

archipelo.com

TLDR InfoSec

SQUIDOOR: SUSPECTED CHINESE THREAT ACTOR'S BACKDOOR TARGETS GLOBAL ORGANIZATIONS

In this post, PAN's Unit42 analyzes a sophisticated backdoor named Squidoor targeting Windows and Linux systems. The suspected Chinese threat actors exploited vulnerabilities in IIS servers to deploy web shells for persistent access and lateral movement. Squidoor allows attackers to maintain access, execute commands, and communicate stealthily with their operators across different networks using the Outlook API or tunnels over ICMP or DNS.

unit42.paloaltonetworks.com · 10 min

TLDR InfoSec

CELLEBRITE BLOCKED SERBIA FROM USING ITS SOLUTION BECAUSE MISUSE OF THE EQUIPMENT FOR POLITICAL REASONS

Amnesty International discovered that Serbian authorities covertly infected phones during police interviews using Cellebrite tools and a newly found spyware called NoviSpy. The spyware allowed for extensive surveillance, leading to Cellebrite suspending its services in Serbia and calls for independent investigations and safeguards against misuse of digital technologies.

securityaffairs.com · 5 min

TLDR InfoSec

FEDS FINE WARBY PARKER $1.5M FOR FAILING TO PROTECT CUSTOMER HEALTH DATA

The Department of Health and Human Services has fined Warby Parker $1.5M for HIPAA failures. The fines are levied due to a 2018 data breach in which data of 200K customers was stolen as well as two other smaller data breaches in 2020 and 2022. According to the HHS' Office of Civil Rights as of September 2024, Warby Parker still had not conducted an assessment of potential risks and vulnerabilities or taken appropriate steps to improve their security posture.

therecord.media · 2 min

TLDR InfoSec

U.S. SOLDIER CHARGED IN AT&T HACK SEARCHED “CAN HACKING BE TREASON”

The U.S. Army soldier who admitted to leaking officials' phone records had researched countries without U.S. extradition and if hacking could be treason.

krebsonsecurity.com · 4 min

TLDR InfoSec

NORTH KOREA RESPONSIBLE FOR $1.5 BILLION BYBIT HACK

The FBI reported that North Korean hackers stole $1.5 billion from Bybit exchange on February 21 - the hackers are rapidly laundering the cryptocurrency.

ic3.gov · 2 min

TLDR InfoSec

HACKERS CAN CRACK INTO CAR CAMERAS IN MINUTES FLAT

Researchers have discovered a "drivethru hacking" vulnerability affecting over two dozen dashcam models.

links.tldrnewsletter.com · 3 min