TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 8 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 12 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 12 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 13 stories
  7. Page 7: TLDR DesignTLDR Design · 13 stories
  8. Page 8: TLDR FoundersTLDR Founders · 12 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 12 stories
  10. Page 10: Resources & ToolsTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders · 9 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto, TLDR Marketing · 6 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

RANSOMWARE GANGS EXPLOIT PARAGON PARTITION MANAGER BUG IN BYOVD ATTACKS

Microsoft discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, one of which was actively used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows. The drivers are signed by Microsoft, so they can also be used in Bring Your Own Vulnerable Driver (BYOVD) attacks. Microsoft recommends enabling the Microsoft Vulnerable Driver Blocklist to prevent BYOVD attacks.

bleepingcomputer.com · 2 min

TLDR InfoSec

SOAPY: STEALTHY ENUMERATION OF ACTIVE DIRECTORY ENVIRONMENTS THROUGH ADWS

Active Directory Web Services (ADWS) is a default-enabled service on Active Directory domain controllers that allows clients to interact with the local LDAP service using SOAP messages without requiring user authentication. A group of interns from X-Force Red implemented the protocol stack in a tool and Python library named SoaPy. Before this, interactions with ADWS were limited to Microsoft or .NET tools, restricting protocol usage to Windows hosts.

securityintelligence.com · 10 min

TLDR InfoSec

HOW WE ESTIMATE THE RISK FROM PROMPT INJECTION ATTACKS ON AI SYSTEMS

Google DeepMind's AI security Team has developed an evaluation framework to test an AI system's susceptibility to indirect prompt injection attacks. The framework employs a hypothetical scenario where an AI agent receives a fictitious email conversation. It uses three prompt injection methods: actor-critic, where a model generates and refines injections based on success probability; beam search; and Tree of Attacks with Pruning, which aims to make the AI violate safety protocols.

security.googleblog.com · 5 min

TLDR IndexPage 5