The Daily Index — Tuesday, July 15, 2025 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

VULNERABILITY IN END-OF-TRAIN AND HEAD-OF-TRAIN REMOTE LINKING PROTOCOL

CISA revealed a critical vulnerability (CVE-2025-1727) in railroad End-of-Train and Head-of-Train protocols that allows attackers to send unauthorized brake commands via software-defined radio. Affecting all U.S. rail industry versions, the vulnerability stems from weak BCH checksum authentication that can disrupt operations or cause sudden stops. The American Railroads are developing new systems, while manufacturers like Hitachi Rail, Wabtec, and Siemens should adopt network isolation and secure remote access controls.

cisa.gov · 2 min

TLDR InfoSec

PATCH IMMEDIATELY: CVE-2025-25257 POC ENABLES REMOTE CODE EXECUTION ON FORTINET FORTIWEB

A serious SQL injection vulnerability (CVE-2025-25257) has been identified in Fortinet FortiWeb. The flaw allows unauthenticated attackers to execute remote code by writing malicious files to the server's filesystem, potentially leading to full remote code execution. Fortinet has issued patches for versions 7.6.4, 7.4.8, 7.2.11, and 7.0.11. Immediate application of these updates is strongly recommended due to publicly available exploits.

securityaffairs.com · 5 min

TLDR InfoSec

FOOLING THE SANDBOX: A CHROME-ATIC ESCAPE

The security researcher in this blog analyzes CVE-2024-30088, a Windows kernel vulnerability that allows privilege escalation. They successfully chained it to escape Chrome's renderer sandbox by bypassing integrity level checks and job object restrictions. The exploit overwrites security descriptors to gain system privileges, then spawns a privileged shell with full control.

starlabs.sg · 11 min

TLDR InfoSec

SCANNING FOR POST-QUANTUM CRYPTOGRAPHIC SUPPORT

Anvil Secure's PQCscan is a free scanner that identifies SSH and TLS servers supporting Post-Quantum Cryptographic (PQC) algorithms. The tool scans for standardized PQC algorithms, such as X25519MLKEM768, and generates HTML reports to help organizations prepare for mandatory PQC compliance deadlines between 2030 and 2035. Available on GitHub under a BSD license, it currently performs capability detection without full handshake testing.

anvilsecure.com · 7 min

TLDR InfoSec

CYBERSECURITY (ANTI)PATTERNS: FRICTIONWARE

Frictionware is security tooling that forces security teams to spend more time onboarding the tool than focusing on generating results. Some anti-patterns that lead to frictionware are: complex onboarding, weak value proposition, and a lack of integration with existing tools. Frictionware can be avoided by avoiding onboarding altogether, focusing on build-in instead of opt-in, using forcing functions to compel onboarding when required, and working within existing centers of data and attention.

spaceraccoon.dev · 17 min

TLDR InfoSec

AWS CIRT ANNOUNCES THE LAUNCH OF THE THREAT TECHNIQUES CATALOG FOR AWS

AWS' Cyber Incident Response Team (CIRT) has launched a new catalog of tactics, techniques, and procedures that it has observed attackers using in AWS environments.

aws.amazon.com · 2 min

TLDR InfoSec

ELMO'S X ACCOUNT HACKED TO PUBLISH RACIST AND ANTISEMITIC POSTS

Elmo's official X account was hacked on Sunday. It posted racist and antisemitic content before being removed. The compromised account also demanded that Trump release Jeffrey Epstein files and was linked to a crypto scam.

techcrunch.com · 2 min

TLDR InfoSec

CBI SHUTS DOWN £390K U.K. TECH SUPPORT SCAM, ARRESTS KEY OPERATIVES IN NOIDA CALL CENTER

India's CBI dismantled a transnational tech support scam syndicate that targeted UK and Australian citizens and resulted in losses exceeding £390,000. Operation Chakra V raided three locations in Noida, arresting two suspects from a fraudulent call center, FirstIdea. The scammers impersonated Microsoft support staff, claiming devices were compromised to scam unaware people.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

LIBRARIES ARE UNDER-USED, LLMS MAKE THIS PROBLEM WORSE

Libraries are underutilized in favor of custom code. This is due to engineers preferring to write code rather than read documentation, underestimating the problem, and organizations that reward complex internal projects over using libraries. LLMs can further this issue by rapidly generating code that is not as well-tested or understood as the more well-known libraries.

makefizz.buzz · 2 min

TLDR InfoSec

CHINESE HACKERS SUSPECTED IN BREACH OF POWERFUL DC LAW FIRM

Wiley Reid, a DC law firm, informed clients of a suspected data breach potentially linked to Chinese hackers that involved compromised Microsoft 365 accounts of staff, although the full extent of the breach was not disclosed.

cnn.com · 3 min

TLDR InfoSec

RUSSIAN BASKETBALL STAR DANIIL KASATKIN ARRESTED IN RANSOMWARE PROBE

Russian basketball player Daniil Kasatkin was arrested in Paris on June 21 on U.S. charges of computer fraud conspiracy, accused of negotiating for an unnamed ransomware group that attacked about 900 organizations between 2020 and 2022.

hackread.com · 2 min

TLDR InfoSec

MAN GETS SUSPENDED SENTENCE FOR HATE-FUELED UK TRAIN STATIONS WIFI HACK

A man in the UK hacked a train station's WiFi to display hateful messages about Islam - he was caught and arrested, and received a suspended prison sentence, community service, and rehab.

hackread.com · 2 min