The Daily Index — Thursday, July 31, 2025 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

HACKERS ACTIVELY EXPLOIT CRITICAL RCE IN WORDPRESS ALONE THEME

WordPress security firm Wordfence has reported an actively exploited, critical unauthenticated arbitrary file upload vulnerability in the premium WordPress theme ‘Alone.' The vulnerability stems from the theme's `alone_import_pack_install_plugin()` function, which lacks nonce checks, is exposed via a `wp_ajax_nopriv_hook`, and permits plugin installation via AJAX. Attackers exploit the flaw by sending a POST request with a remote source URL pointing to an attacker-controlled file with webshells or other payloads.

bleepingcomputer.com · 2 min

TLDR InfoSec

RANSOMWARE GANG SETS DEADLINE TO LEAK 3.5 TB OF INGRAM MICRO DATA

The SafePay ransomware group is threatening to leak 3.5TB of Ingram Micro data on August 1, nearly a month after the attack. Although Ingram Micro claimed containment and restored operations by July 9, the company's appearance on SafePay's leak site suggests that no ransom was paid.

theregister.com · 2 min

TLDR InfoSec

COST OF A DATA BREACH REPORT 2025

IBM's 2025 breach report shows that global breach costs fell to $4.44 million while US breach costs reached a record high of $10.22 million. AI is emerging as both an attack vector and a defense mechanism, with 13% of breaches involving AI models due to inadequate access controls. Phishing has overtaken stolen credentials as the most common initial attack vector.

ibm.com · 20 min

TLDR InfoSec

DREAMWALKERS

Reflectively loading modules is a technique to hide malware payloads injected via shellcode. Traditionally, the call stack cannot be convincingly spoofed due to missing unwind information. This post introduces a technique called DreamWalkers, which parses the PE structure to register unwind information via `RtlAddFunctionTable`, creating clean and convincing call stacks.

maxdcb.github.io · 8 min

TLDR InfoSec

PROPHET AI (PRODUCT LAUNCH)

Prophet AI for Security Operations filters incoming alerts and, for each one, gathers, correlates, and analyzes data from multiple sources to provide a decision and a detailed investigation summary.

prophetsecurity.ai

TLDR InfoSec

GOOGLE PROJECT ZERO TO PUBLICLY ANNOUNCE BUGS WITHIN A WEEK OF REPORTING THEM

Google's Project Zero vulnerability research team has announced that they will publicly disclose when they have discovered a vulnerability within a week of notifying vendors. This breaks from the longstanding norm of waiting 90 days for a fix and an additional 30 days post-patch before publishing technical details. Project Zero emphasized that it won't release technical details early, only broad information to help downstream dependents prepare for patching.

therecord.media · 2 min

TLDR InfoSec

CYBERARK ACQUIRED BY PALO ALTO NETWORKS FOR $25 BILLION: MORE DETAILS ON THE DEAL, EXPANDED OFFERING

Palo Alto Networks has acquired identity security firm CyberArk for $25 billion to build a next-generation AI-driven security platform. Despite CyberArk's strong 43% revenue growth, Palo Alto's stock dropped 5% as analysts questioned the defensive timing of the large-scale acquisition.

ibtimes.co.uk · 5 min

TLDR InfoSec

TURNING INCIDENT RESPONSE CHALLENGES INTO SCALABLE SOLUTIONS

Hunt & Hackett uses a cloud-based incident response lab to handle large-scale investigations.

huntandhackett.com · 7 min

TLDR InfoSec

SECURING AGENTIC APPLICATIONS GUIDE (PDF)

OWASP has released comprehensive guidance offering concrete technical recommendations for builders and developers of agentic AI systems.

genai.owasp.org