TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 10 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 7 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 11 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 13 stories
  7. Page 7: TLDR ProductTLDR Product · 11 stories
  8. Page 8: TLDR DesignTLDR Design · 12 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 11 stories
  10. Page 10: Resources & ToolsTLDR Web Dev, TLDR InfoSec, TLDR Design · 10 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto, TLDR Product · 9 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

QUALCOMM FIXES THREE ADRENO GPU ZERO-DAYS EXPLOITED IN ATTACKS

Qualcomm has patched three zero-day vulnerabilities in its Adreno GPU driver that are being actively exploited in targeted attacks. CVE-2025-21479 and CVE-2025-21480 cause memory corruption through unauthorized GPU command execution and CVE-2025-27038 is a use-after-free vulnerability in Chrome's graphics rendering. Google's Threat Analysis Group confirmed these vulnerabilities are under limited, targeted exploitation, and Qualcomm provided patches to device manufacturers in May with urgent deployment recommendations. This continues a pattern of Qualcomm chipset vulnerabilities being exploited by threat actors, including a previous zero-day used by Serbian authorities with Cellebrite software to unlock activists' and journalists' Android devices.

bleepingcomputer.com · 2 min

TLDR InfoSec

BEYOND HTTP: INTERCEPTSUITE FOR TCP/TLS TRAFFIC INTERCEPTION IN WINDOWS

InterceptSuite is a Windows network traffic analysis tool that intercepts and decrypts any TCP/TLS protocol communications, not just HTTP/HTTPS like existing tools. Built with C/OpenSSL and C#/.NET, it operates as a SOCKS5 proxy enabling real-time viewing and modification of encrypted traffic for security testing and application debugging. This blog dives into it and how it can be used.

blog.souravkalal.tech · 6 min

TLDR InfoSec

GETTING THE MOST VALUE OUT OF THE OSCP: AFTER THE EXAM

This is a guide on maximizing value from the OSCP certification journey post-exam. It focuses on three actions: reflecting on exam performance to pinpoint weaknesses for targeted study plans, networking with professionals and peers via Discord servers and cybersecurity communities, and reassessing career goals to decide next steps. The author recommends a structured retrospective approach that includes data collection (timeline reconstruction and machine breakdowns), analysis (identifying operational hurdles and technical gaps), and reconstruction (developing focused practice plans and strategies). For new professionals, it suggests taking a break, updating resumes, exploring advanced topics like web applications or Active Directory, and considering related fields such as DevSecOps, SOC analysis, or detection engineering based on personal interests.

posts.specterops.io · 15 min

TLDR InfoSec

THREAT GROUP ASSESSMENT: MUDDLED LIBRA (UPDATED MAY 16, 2025)

Muddled Libra, a threat group specializing in social engineering attacks using the 0ktapus phishing kit, targets organizations in software automation, BPO, telecommunications, and technology, particularly large outsourcing firms for high-value cryptocurrency institutions. The group shows deep knowledge of enterprise IT systems and utilizes a comprehensive toolkit, including smishing, MFA bombing, help desk social engineering, and commercial remote monitoring tools to maintain access and evade detection. Its main goal is data theft for supply chain attacks, leveraging stolen information from initial victims to infiltrate downstream customer environments.

unit42.paloaltonetworks.com · 11 min

TLDR InfoSec

‘RUSSIAN MARKET' EMERGES AS A GO-TO SHOP FOR STOLEN CREDENTIALS

The "Russian Market" cybercrime marketplace has become a leading platform for buying and selling stolen credentials, with logs available for as low as $2 and containing data from information-stealing malware, including passwords, session cookies, and credit card details. The marketplace has grown significantly following the takedown of Genesis Market, with 61% of stolen logs containing enterprise SaaS credentials from platforms like Google Workspace and Salesforce, and 77% including single sign-on credentials. Lumma stealer previously dominated 92% of the market but faces disruption from recent law enforcement actions, while a new stealer called Acreed is rapidly gaining traction with over 4,000 logs uploaded in its first week.

bleepingcomputer.com · 3 min

TLDR InfoSec

TRUMP BUDGET PROPOSAL WOULD SLASH MORE THAN 1,000 CISA JOBS

The fiscal 2026 budget proposal from President Donald Trump would cut the Cybersecurity and Infrastructure Security Agency workforce by eliminating 1,083 positions and reducing its budget by $495 million to $2.4 billion. This cut is slightly deeper than earlier forecasts. A new document from the Department of Homeland Security details the CISA personnel reductions and shows planned decreases in other federal cybersecurity programs.

cyberscoop.com · 3 min

TLDR IndexPage 5