The Daily Index — Monday, May 19, 2025

ATTACKS & VULNERABILITIES

TLDR InfoSec

PRODUCTION AT STEELMAKER NUCOR DISRUPTED BY CYBERATTACK

North American steel giant Nucor halted some production after hackers accessed its computer systems. The company is working with experts and police while restarting operations. No one has claimed responsibility for the attack, and the financial impact is still unknown.

securityweek.com · 2 min

TLDR InfoSec

HARD-CODED API KEY IN AI NOTE TAKING APP EXPOSED USERS' PRIVATE TRANSCRIPTS

A security researcher from Tenable discovered that a new release of its Mac desktop client included an AssemblyAI API key. This API key could be retrieved from the Electron app to enumerate and download any user's private meeting transcript. The researcher notified Granite, whose CEO responded by removing the offending API key and notifying the researcher that the vulnerability had only affected a smaller group of TestFlight users.

vulnu.com · 3 min

TLDR InfoSec

WHAT DOES EU'S BUG DATABASE MEAN FOR VULNERABILITY TRACKING?

The European Union's cyber agency ENISA launched the European Vulnerability Database (EUVD), a new vulnerability tracking system with a numbering format that includes CVE references. Experts debate whether this additional database will help create redundancy or further fragment the vulnerability tracking landscape.

links.tldrnewsletter.com · 6 min

TLDR InfoSec

CYBERSECURITY (ANTI)PATTERNS: BUSYWORK GENERATORS

Busywork generators are solutions that create a disproportionate amount of busywork compared to the security value they add. They can be introduced due to not fully understanding the root cause of a security issue, prioritizing the wrong solution, and lacking organization-wide mechanisms to enforce the solution. Security teams can avoid busywork generators by introducing security guardrails and adopting a reasonable threshold of acceptable alerts.

spaceraccoon.dev · 15 min

TLDR InfoSec

ANALYZING CVE-2025-31191: A MACOS SECURITY-SCOPED BOOKMARKS SANDBOX ESCAPE

Microsoft discovered a vulnerability in macOS that allowed applications to escape the App Sandbox without user interaction while researching macro exploit detection for Microsoft Office in April 2024. Security-scoped bookmarks are a macOS mechanism that bypasses the App Sandbox using explicit, persistent user choices. Microsoft researchers discovered that the Keychain entry used for security-scoped bookmarks can be overwritten to sign new bookmarks.

microsoft.com · 9 min

TLDR InfoSec

Safeguard what matters most.

Summary unavailable

fortinet.com

TLDR InfoSec

FBI WARNS OF ONGOING SCAM THAT USES DEEPFAKE AUDIO TO IMPERSONATE GOVERNMENT OFFICIALS

The FBI warns of an ongoing scam where criminals use AI-generated voice deepfakes to impersonate senior US officials. The scam has targeted government officials and their contacts since April 2025. The attackers establish rapport before sending malicious links. Officials advise verifying identities independently and watching for subtle imperfections in communications.

arstechnica.com · 3 min

TLDR InfoSec

THE KIDS ONLINE SAFETY ACT IS BACK, WITH THE POTENTIAL TO CHANGE THE INTERNET

If passed, the Kids Online Safety Act (KOSA) would hold social media platforms accountable for protecting minors from various harms. Human rights groups fear censorship implications, while companies like Apple, Microsoft, and X support the legislation. Google and Meta remain opposed.

techcrunch.com · 2 min

TLDR InfoSec

RUSSIA-LINKED SPYPRESS MALWARE EXPLOITS WEBMAILS TO SPY ON UKRAINE

A Russian hacking group called Sednit is spying on Ukraine and its allies using email bugs and fake messages. It sends phishing emails that sneaks malware into webmail systems like RoundCube, Zimbra, and Horde.

hackread.com · 3 min

TLDR InfoSec

NEW 'DEFENDNOT' TOOL TRICKS WINDOWS INTO DISABLING MICROSOFT DEFENDER

Defendnot is a tool that deceives Windows into disabling Microsoft Defender by masquerading as a legitimate antivirus using a concealed Windows feature.

bleepingcomputer.com · 2 min

TLDR InfoSec

COINBASE FLIPS $20M EXTORTION DEMAND INTO BOUNTY FOR INFO ON ATTACKERS

Hackers bribed Coinbase staff to steal personal data from some users, demanding $20 million, but Coinbase refused and instead offered the same amount for tips to arrest the criminals.

cyberscoop.com · 4 min

TLDR InfoSec

THE STATE OF DEVSECOPS IN THE DOD (3 HOUR READ)

DevSecOps is transforming software delivery in the Department of Defense by enhancing agility, security, and effectiveness through software factories, continuous integration, and cultural changes.

links.tldrnewsletter.com