The Daily Index — Thursday, July 3, 2025 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

FORMINATOR PLUGIN FLAW EXPOSES WORDPRESS SITES TO TAKEOVER ATTACKS

The WordPress Forminator plugin (versions up to 1.44.2) contains a critical vulnerability (CVE-2025-6463, CVSS 8.8) that affects 600,000+ sites. Attackers can exploit insufficient input validation to delete critical files like wp-config.php, forcing sites into setup mode for complete takeover. Version 1.44.3 patches this flaw—immediate updates are essential.

bleepingcomputer.com · 2 min

TLDR InfoSec

CYBERATTACK TARGETS INTERNATIONAL CRIMINAL COURT

The International Criminal Court (ICC) was hit by a "sophisticated and targeted cyber security incident" last week, marking the second major attack in two years. The intrusion was quickly detected and contained. The timing coincides with NATO leaders meeting in The Hague and ongoing high-profile cases involving arrest warrants for Putin, Netanyahu, and Hamas leaders.

securityweek.com · 2 min

TLDR InfoSec

WHY EVERY COMPANY NEEDS A TRAVEL SECURITY PROGRAM

Summary unavailable

csoonline.com · 4 min

TLDR InfoSec

ESCAPEROUTE: BREAKING THE SCOPE OF ANTHROPIC'S FILESYSTEM MCP SERVER (CVE-2025-53109 & CVE-2025-53110)

Cymulate Research Labs discovered critical vulnerabilities in Anthropic's Model Context Protocol (MCP) Filesystem Server. Two high-severity flaws (CVE-2025-53110 and CVE-2025-53109) allow attackers to escape sandboxes, access any host files, and execute arbitrary code through directory containment bypass and symlink exploitation.

cymulate.com · 15 min

TLDR InfoSec

AUTHENTICATION METHODS: CHOOSING THE RIGHT TYPE

Password-based authentication is vulnerable to various common attacks, including password reuse, weak passwords, and phishing. To combat these threats, this guide from the NCSC guides on “going beyond passwords” with MFA, federated Single Sign-On (SSO), FIDO 2 security keys, or magic links and one-time passwords (OTPs). Each section includes an introduction to the method, its pros and cons, and a chart to help determine when you may want to use it and when you may want to consider a different method.

ncsc.gov.uk · 5 min

TLDR InfoSec

TOP FBI CYBER OFFICIAL: SALT TYPHOON ‘LARGELY CONTAINED' IN TELECOM NETWORKS

According to the FBI's top cyber official, Brett Leatherman, the Chinese hacking group Salt Typhoon is "largely contained" and "dormant" in telecommunications networks, with nine U.S. telecom companies having been victimized. However, the hackers still pose a threat, as they could pivot from espionage to destructive action. Leatherman noted that Salt Typhoon and Volt Typhoon are more similar than some think, as both have access to critical infrastructure that could support destructive operations.

cyberscoop.com · 2 min

TLDR InfoSec

U.S. SANCTIONS RUSSIA'S AEZA GROUP FOR AIDING CROOKS WITH BULLETPROOF HOSTING

The U.S. sanctioned Russia-based Aeza Group and its leaders for providing "bulletproof" hosting services that enable cybercriminals to operate illegal websites and evade law enforcement. The sanctions target multiple companies and individuals associated with the Aeza Group. This effort was coordinated with the UK.

securityaffairs.com · 2 min

TLDR InfoSec

VERCEL'S V0 AI TOOL WEAPONIZED BY CYBERCRIMINALS TO RAPIDLY CREATE FAKE LOGIN PAGES AT SCALE

Threat actors are weaponizing Vercel's v0 AI tool to create convincing phishing sites through simple text prompts, targeting multiple brands, including Okta customers. This represents a significant evolution in AI-powered cybercrime, enabling low-skilled attackers to rapidly generate high-quality fake login pages at scale without coding knowledge.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

MICROSOFT FIXES ‘PRINT TO PDF' FEATURE BROKEN BY WINDOWS UPDATE

Microsoft fixed a bug that broke the "Print to PDF" feature in Windows 11 after a recent update.

bleepingcomputer.com · 2 min

TLDR InfoSec

BLIND EAGLE LINKED TO RUSSIAN HOST PROTON66 IN LATIN AMERICA ATTACKS

Blind Eagle, a cybercrime group, is using Proton66's Russian hosting services to launch malware attacks on Latin American banks via fake banking websites.

hackread.com · 2 min

TLDR InfoSec

UBUNTU DISABLES INTEL GPU SECURITY MITIGATIONS, PROMISES 20% PERFORMANCE BOOST

Ubuntu plans to disable certain Intel GPU security features to boost performance by about 20%, a change deemed low-risk for most users given the rarity and difficulty of potential attacks.

arstechnica.com · 2 min