TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 9 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 7 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 12 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR DesignTLDR Design · 12 stories
  8. Page 8: TLDR MarketingTLDR Marketing · 10 stories
  9. Page 9: Resources & ToolsTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Marketing · 13 stories
  10. Page 10: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto, TLDR Marketing · 11 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

DON'T WANT DRIVE-BY OLLAMA ATTACKERS SNOOPING ON YOUR LOCAL CHATS? PATCH NOW

A vulnerability in Ollama Desktop v0.10.0 allowed drive-by attacks where malicious websites could bypass CORS controls to reconfigure victims' local AI settings remotely, intercept all chat messages, and even serve poisoned models. GitLab's Chris Moberly discovered the flaw by exploiting incomplete cross-origin controls—removing the Content-Type header to trick the app into treating malicious requests as "simple" and bypassing preflight checks. The vulnerability was patched within hours in v0.10.1 after Moberly disclosed it on July 31. Users are urged to update immediately as exploitation would be "trivial," according to the researcher.

go.theregister.com · 3 min

TLDR InfoSec

HACKERS STEAL MICROSOFT LOGINS USING LEGITIMATE ADFS REDIRECTS

Push Security researchers found a new phishing attack using legit office.com links combined with ADFS to redirect users to a phishing page that steals Microsoft 365 logins. The attack starts when users click on malicious sponsored links in Google search results for Office 265 (likely typosquatting), which leads to Microsoft's office.com, then to a harmless-looking page that redirects to the phishing site. The attackers are using a custom Microsoft tenant with ADFS to receive authorization requests for the fake domain.

bleepingcomputer.com · 2 min

TLDR InfoSec

CRYPTOAGILITY: THE STRATEGIC PILLAR FOR DIGITAL RESILIENCE

Cryptoagility, defined as the ability to replace cryptographic algorithms, keys, and certificates quickly, has become vital for organizations managing critical infrastructure, as shown by Google's Chromecast failure that affected millions when a certificate expired. Organizations must shift from reactive to proactive certificate management, using modular infrastructure, centralized PKI/HSM, and automated rotation aligned with PCI DSS v4.0 and DORA. This forward-looking approach makes cryptographic flexibility a strategic advantage, ensuring operational continuity and compliance before vulnerabilities or expirations cause system failures.

csoonline.com · 3 min

TLDR InfoSec

HOW I HACKED MCDONALD'S (THEIR SECURITY CONTACT WAS HARDER TO FIND THAN THEIR SECRET SAUCE RECIPE)

The author of this post uncovered several vulnerabilities at McDonald's, like weak app and portal security, exposed API keys, and user data leaks. Despite attempts to report the issues, finding someone to listen was nearly impossible—the process required calling HQ and guessing employee names. Most bugs were fixed once reported, but communication and security practices at McDonald's were deeply flawed.

bobdahacker.com · 7 min

TLDR InfoSec

MICROSOFT ENTRA PRIVATE ACCESS BRINGS CONDITIONAL ACCESS TO ON-PREM ACTIVE DIRECTORY

Microsoft's Entra Private Access now allows organizations to apply cloud-based conditional access and MFA to on-premises Active Directory domain controllers, replacing legacy VPNs with Zero Trust Network Access. It requires networks to be NTLM-free and Kerberos-only, Windows 10+ devices that are Entra or hybrid joined, opening TCP port 1337 on domain controllers, and extensive NTLM auditing and removal. Organizations must audit NTLM usage via Group Policy, transition to NTLMv2 or Kerberos, and possibly retire legacy apps before implementing this security framework.

csoonline.com · 5 min

TLDR InfoSec

SINGAPORE ISSUES CRITICAL ALERT ON DIRE WOLF RANSOMWARE TARGETING GLOBAL TECH AND MANUFACTURING FIRMS

The Dire Wolf ransomware has affected 16 organizations across 11 countries since it emerged in May, using double-extortion tactics, such as encrypting data while threatening leaks. The Golang-based ransomware uses anti-forensics techniques and multi-stage attack chains to evade detection, mainly targeting manufacturing and technology sectors through phishing and credential stuffing attacks.

csoonline.com · 3 min

TLDR InfoSec

PYPI NOW BLOCKS DOMAIN RESURRECTION ATTACKS USED FOR HIJACKING ACCOUNTS

Accounts of project maintainers publishing software on PyPI are linked to email addresses, which in some cases may be tied to a custom domain name. Historically, attackers have been able to take over some projects by resurrecting an expired domain that was attached to a maintainer's email and resetting the account. PyPI has added new checks that will mark an email as unverified if a domain is expired or is about to expire.

bleepingcomputer.com · 2 min

TLDR IndexPage 5