The Daily Index — Wednesday, July 30, 2025 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

LOVENSE SEX TOY APP FLAW LEAKS PRIVATE USER EMAIL ADDRESSES

A group of security researchers discovered two vulnerabilities in the Lovense sex toy app that could allow an attacker to retrieve a user's private email address with just their username and perform an account takeover with just an email address. To exploit the flaw, an attacker sends a POST request to the `/api/wear/genGtoken` API endpoint, then forwards the encrypted payload to another endpoint, which returns a fake ID that the user can add to their contact list to reveal the real email address. Lovense claims that both flaws were fixed. However, researchers report that only the account takeover flaw was fixed.

bleepingcomputer.com · 3 min

TLDR InfoSec

TELECOM GIANT ORANGE WARNS OF DISRUPTION AMID ONGOING CYBERATTACK

French telecom giant Orange reported a cyberattack on July 25 that disrupted services for business clients and some public sector services in France. The company isolated affected systems and expects full restoration by Wednesday. Orange claims no customer or internal data was compromised and has notified the relevant authorities about the incident.

techcrunch.com · 2 min

TLDR InfoSec

WIZ RESEARCH UNCOVERS CRITICAL VULNERABILITY IN AI VIBE CODING PLATFORM BASE44 ALLOWING UNAUTHORIZED ACCESS TO PRIVATE APPLICATIONS

Wiz Research discovered a critical vulnerability in Base44, a popular "vibe coding" platform that allows users to build apps through natural language prompts. The flaw allowed attackers to bypass authentication using only non-secret app IDs, potentially granting access to private enterprise applications and sensitive data.

wiz.io · 8 min

TLDR InfoSec

FAKE CAPTCHA LED TO LUMMA

Attackers used a fake CAPTCHA page that employed the ClickFix social engineering technique to trick users into pressing Windows+R and pasting a PowerShell command that downloaded LUMMA stealer malware. The malware targeted browser credential stores (Login Data and Web Data) from Microsoft Edge and Google Chrome, establishing C2 communication within minutes of initial execution. The attack chain leveraged multiple evasion techniques, including heavily obfuscated PowerShell, AutoIt scripts, and mshta.exe proxy execution to bypass security controls.

nccgroup.com · 4 min

TLDR InfoSec

BUILDING A CLOUD SECURITY ROADMAP: TOOLS BY LAYER AND WHEN YOU NEED THEM

This post provides an overview of the layers in cloud environments, the threats that target each layer, and the tools that are best suited to address them. The cloud infrastructure/control plane layer handles tasks such as resource provisioning, configuration management, and user permissions. The orchestration layer hosts platforms such as Kubernetes and related services live, whereas the platform layer runs more generalized workloads. Finally, the application layer includes software that end-users rely on, such as custom web applications, APIs, and SaaS apps.

groundedcloudsecurity.substack.com · 8 min

TLDR InfoSec

SEAL SECURITY (PRODUCT LAUNCH)

Seal is a supply chain security tool that differentiates itself by providing patches for vulnerable packages instead of pushing for version upgrades.

seal.security

TLDR InfoSec

SECURITY PROS ARE DROWNING IN THREAT-INTEL DATA AND IT'S MAKING EVERYTHING MORE DANGEROUS

A Google Cloud and Forrester study of 1,541 tech leaders found that 61% of security professionals are overwhelmed by threat intelligence data, while 60% lack skilled analysts. Top concerns include phishing (46%), ransomware (44%), and AI prompt injection attacks (34%).

theregister.com · 4 min

TLDR InfoSec

PYPI USERS EMAIL PHISHING ATTACK

PyPI users are being targeted by phishing emails from "pypj[.]org" (note the "j"), which request email verification. The fake site mimics PyPI to steal credentials. Users should delete these emails, avoid clicking any links, and change their passwords if compromised.

blog.pypi.org · 2 min

TLDR InfoSec

NEW CHOICEJACKING ATTACK STEALS DATA FROM PHONES VIA PUBLIC CHARGERS

Choicejacking is a new attack that bypasses smartphone security prompts by spoofing USB or Bluetooth input devices to simulate user actions in under 133 milliseconds. The attack tricks phones into enabling data transfer mode without consent, allowing attackers to access photos, messages, and install malware through compromised public charging stations. Unlike traditional juice jacking attacks, Choicejacking exploits device communication protocols to simulate keyboard input and overflow input buffers, affecting both Android and iOS devices.

hackread.com · 3 min

TLDR InfoSec

RTÉ INVESTIGATING POTENTIAL CYBER SECURITY INCIDENT

The UK's National Cyber Security Centre (NCSC) contacted the Irish broadcaster RTÉ regarding a potential cybersecurity threat, based on information that it had received.

irishtimes.com · 2 min

TLDR InfoSec

MINNESOTA ACTIVATES NATIONAL GUARD AFTER ST. PAUL CYBERATTACK

Minnesota Governor Tim Walz activated the National Guard to provide cyber protection after a cyberattack on Friday crippled the City of Saint Paul's digital services and critical systems.

bleepingcomputer.com · 2 min