The Daily Index — Thursday, April 10, 2025

ATTACKS & VULNERABILITIES

TLDR InfoSec

CENTRESTACK RCE EXPLOITED AS ZERO-DAY TO BREACH FILE SHARING SERVERS

Gladinet has warned of a vulnerability in its CentreStack file-sharing software that has been under active exploitation since March. The vulnerability is a deserialization vulnerability stemming from using a hardcoded machineKey. Galdinet has recommended that customers apply patches immediately or rotate the machine keys if immediate patching is not possible.

bleepingcomputer.com · 2 min

TLDR InfoSec

INCOMPLETE NVIDIA PATCH TO CVE-2024-0132 EXPOSES AI INFRASTRUCTURE AND DATA TO CRITICAL RISKS

NVIDIA's patch for CVE-2024-0132 was incomplete, leaving AI infrastructure vulnerable to attacks. Exploiting the vulnerabilities could lead to data breaches and operational disruptions.

trendmicro.com · 5 min

TLDR InfoSec

LINUX KERNEL RUST MODULE FOR ROOTKIT DETECTION

Linux rootkits commonly share a set of capabilities such as hiding itself, hiding data, offering a reverse root shell, and establishing boot persistence. The author of this blog post discusses how to use kprobe to detect LKM rootkit registration and inline hooking. They also reflect on the process of writing an LKM in Rust during their internship, noting the lack of abstractions but also appreciating the safety guarantees of Rust as well as the typing and linting systems.

blog.thalium.re · 10 min

TLDR InfoSec

HACKING AWS LAMBDA FUNCTIONS - S3 FILE UPLOAD INJECTION

This post showcases the damage that a coding vulnerability in a Lambda function can cause using the DVSA intentionally vulnerable app as an example. The application includes a Lambda function that uploads files attached to the feedback form, which is vulnerable to OS command injection. This vulnerability can be used to extract the Lambda function's IAM credentials, which provide full access to Lambda and SES.

nordhero.com · 6 min

TLDR InfoSec

PCI DSS 4.0.1: A CYBERSECURITY BLUEPRINT BY THE INDUSTRY, FOR THE INDUSTRY

PCI DSS 4.0.1, exemplifies successful industry-led cybersecurity regulation by focusing on outcomes rather than methods. Unlike government regulations that awkwardly combine business security with user rights, PCI DSS was created by payment industry stakeholders collaboratively addressing threats. This commentary dives into how other existing and future regulations and frameworks can learn from PCI.

securityweek.com · 6 min

TLDR InfoSec

MIMIC (PRODUCT LAUNCH)

Mimic is exclusively focused on thwarting the threat from ransomware gangs. It offers features to quickly detect signs of malicious data encryption and tools to hide critical assets from attackers.

mimic.com

TLDR InfoSec

ANTHROPIC ANNOUNCES UPDATES ON SECURITY SAFEGUARDS FOR ITS AI MODELS

Anthropic has announced new updates to its Responsible Scaling Policy (RSP), which determines what level of model requires additional protections. These models include those with the capacity to potentially help a state actor develop chemical and biological weapons or if a model could be used to fully automate the role of an entry-level Anthropic researcher. Anthropic had announced in October that it would begin sweeping physical offices for hidden devices and implement other physical security measures.

cnbc.com · 2 min

TLDR InfoSec

MALAYSIA PM SAYS COUNTRY REJECTED $10 MILLION RANSOM DEMAND AFTER AIRPORT OUTAGES

A cyberattack caused computer outages at Kuala Lumpur International Airport in Malaysia back in March. Prime Minister Anwar Ibrahim refused the attackers' $10 million ransom demand. At the time, even though officials claimed airport operations continued normally, photos showed staff using whiteboards for flight information.

therecord.media · 2 min

TLDR InfoSec

NIST TO IMPLEMENT 'DEFERRED' STATUS TO DATED VULNERABILITIES

NIST announced all CVEs published before January 1, 2018, will be marked "deferred" in the National Vulnerability Database. This administrative change helps prioritize newer vulnerabilities but doesn't reduce the severity of older security flaws.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

HACKER CLAIMS WOOCOMMERCE DATA BREACH, SELLING 4M USER RECORDS

A hacker named "Satanic" has claimed a WooCommerce data breach affecting over 4.4 million users, including major organizations like NVIDIA and Texas.gov.

hackread.com · 3 min

TLDR InfoSec

GOOGLE TAKES ON CURSOR WITH FIREBASE STUDIO, ITS AI BUILDER FOR VIBE CODING

Google has launched Firebase Studio, an AI-powered integrated development environment for building full-fledged apps using prompts.

bleepingcomputer.com · 2 min

TLDR InfoSec

MICROSOFT INVESTIGATES GLOBAL EXCHANGE ADMIN CENTER OUTAGE

Microsoft is investigating a global outage affecting Exchange Admin Center access for IT admins worldwide.

bleepingcomputer.com · 1 min