The Daily Index — Wednesday, May 7, 2025

ATTACKS & VULNERABILITIES

TLDR InfoSec

SOLANA PATCHES BUG THAT COULD HAVE ALLOWED ATTACKERS TO MINT AND SWIPE TOKENS

The Solana Foundation recently patched a zero-day bug in Solana that could have allowed an attacker to mint unlimited Token-22 confidential tokens or steal them from other users. The vulnerability was due to some algebraic components of the ZK ElGamal Proof Program not being included in the hash used to generate a transcript for the Fiat-Shamir Transformation. Solana worked with several security partners to verify the fix and found no evidence of exploitation.

decrypt.co · 2 min

TLDR InfoSec

VENOM SPIDER TARGETS HIRING MANAGERS IN A PHISHING SCHEME

‘Venom Spider' is a threat actor that has been running a spear-phishing campaign targeting recruiters and hiring managers. Targets are sent an email containing a zip file supposedly containing the attacker's application materials. The zip file contains a JPG distractor and uses a .lnk file to download an obfuscated BAT file loader, which ultimately downloads a dropper called More_eggs.

links.tldrnewsletter.com · 4 min

TLDR InfoSec

UNEXPECTED BEHAVIOR IN SNOWFLAKE'S CORTEX AI

Snowflake's CORTEX Search Service may expose sensitive data despite security policies. The post navigates how this AI-driven search tool could inadvertently reveal protected information to authorized users, illustrating a broader concern with AI integration in business tools.

cyera.com · 6 min

TLDR InfoSec

HACKER CONVERSATIONS: JOHN KINDERVAG, A MAKING NOT BREAKING HACKER

In this interview with John Kindervag, creator of the Zero Trust security model in 2009, he talks about himself as a hacker and professional penetration tester in the early 2000s. Now Chief Evangelist at Illumio since 2023, he promotes Zero Trust Segmentation, challenging traditional definitions of what constitutes a "hacker.

securityweek.com · 8 min

TLDR InfoSec

CLICKFIX SCAM: HOW TO PROTECT YOUR BUSINESS AGAINST THIS EVOLVING THREAT

ClickFix is a sneaky malware that tricks users into triggering attacks through innocent-looking prompts like CAPTCHAs. It evades detection by staying dormant until a real user interacts with it, making it hard for traditional security tools to spot. To catch ClickFix, interactive sandboxes effectively reveal hidden behavior and protect businesses from potential threats.

hackread.com · 4 min

TLDR InfoSec

NETFOUNDRY (PRODUCT LAUNCH)

NetFoundry provides microsegmented overlay networks that hide assets behind closed inbound firewall ports and identity, authentication, and authorization at the application level.

links.tldrnewsletter.com

TLDR InfoSec

BIG GAME RANSOMWARE: THE MYTHS EXPERTS TELL BOARD MEMBERS

There's a common belief that paying a ransom may be effective in getting operations up and running quickly in the event of a ransomware attack. Organizations that have paid ransoms, such as Travelex, have sometimes faced broken or slow decryptors and other issues that led to recovery taking months. Additionally, paying ransoms encourages and funds further cybercrime activity.

doublepulsar.com · 6 min

TLDR InfoSec

REVERSE ENGINEERING POWERPOINT'S XML TO BUILD A SLIDE GENERATOR

An engineer at ListenLabs.AI created an AI-driven PowerPoint slide generator by reverse engineering Microsoft's detailed Office Open XML format. This project addressed technical challenges like custom solutions for image borders and colored links, enabling the automatic generation of well-structured presentation decks from user interview data. It highlights the potential of AI in simplifying document creation and the possible security implications of proprietary file formats.

listenlabs.ai · 8 min

TLDR InfoSec

NSO GROUP OWES $168M IN DAMAGES TO WHATSAPP OVER SPYWARE INFECTIONS, JURY SAYS

A federal jury awarded WhatsApp $168 million in damages from NSO Group for infecting users with spyware. The ruling is a win for WhatsApp's lawsuit against the spyware maker. NSO Group plans to explore legal options following the verdict.

cyberscoop.com · 2 min

TLDR InfoSec

TWO HACKS, ONE EMPIRE: THE CYBER ASSAULTS DISNEY DIDN'T SEE COMING

Disney experienced cyberattacks from a former employee and an external hacker in 2024 that led to the theft of 1.1TB of sensitive data and sabotage of its internal systems.

hackread.com · 2 min

TLDR InfoSec

NEW INVESTMENT SCAMS USE FACEBOOK ADS, RDGA DOMAINS, AND IP CHECKS TO FILTER VICTIMS

Cybersecurity researchers have identified two threat actors behind investment scams that used fake celebrity endorsements and deceptive web forms to collect user data on social media platforms like Facebook - Reckless Rabbit and Ruthless Rabbit.

links.tldrnewsletter.com · 6 min

TLDR InfoSec

MICROSOFT UNVEILS NEW AI AGENTS THAT CAN MODIFY WINDOWS SETTINGS

Microsoft's newly unveiled AI agents for Windows are expected to allow users to easily change computer settings using natural language prompts without much direct involvement.

bleepingcomputer.com · 2 min