The Daily Index — Monday, September 15, 2025

GENERAL

TLDR InfoSec

→ [5]Explore the security trends

Summary unavailable

exclaimer.com

TLDR InfoSec

WHITECOBRA FLOODS VSCODE MARKET WITH CRYPTO-STEALING EXTENSIONS

A threat actor named WhiteCobra has been flooding the VSCode marketplace and OpenVSX registry with malicious extensions targeting VSCode, Cursor, and Windsurf users. The extensions contain an extension.js file that is nearly identical to the Hello World example but loads a prompt.js file, which downloads and executes a platform-specific infostealer payload from Cloudflare Pages. An Ethereum core developer reported on X that their wallet was drained after downloading a seemingly legitimate extension with a professional logo, detailed description, and 54K downloads.

bleepingcomputer.com · 2 min

TLDR InfoSec

SAMSUNG PATCHES ACTIVELY EXPLOITED ZERO-DAY REPORTED BY WHATSAPP DEVS

Samsung patched a remote code execution vulnerability that impacted Samsung devices running Android 13 or later. The vulnerability arose from an out-of-bounds write in the libimagecodec.quram.so library, which is used for image parsing. Apple patched the relevant vulnerability in its devices last month after it was reported to it by WhatsApp and Meta researchers as well.

bleepingcomputer.com · 2 min

TLDR InfoSec

THE CURIOUS TALE OF A FAKE CARRIER.APP

Google Project Zero found a fake carrier app exploiting a heap overflow in Apple's DCP firmware on iPhone 12/13. The exploit bypassed kernel protections by targeting the DCP's weaker security, using a fake Vodafone app distributed via enterprise certificates to sideload malware. The vulnerability (CVE-2021-30983) caused memory corruption through an unbounded loop in display code, allowing attackers to gain kernel access by corrupting C++ objects and manipulating memory between the DCP and main system.

googleprojectzero.blogspot.com · 17 min

TLDR InfoSec

UNMASKING THE GENTLEMEN RANSOMWARE: TACTICS, TECHNIQUES, AND PROCEDURES REVEALED

The Gentlemen ransomware group has executed sophisticated attacks across 17 countries, focusing on sectors like manufacturing and healthcare. Their operations use custom tools to bypass security measures, exploit privileged accounts, and deploy ransomware with double extortion tactics. The campaign demonstrates a shift to highly tailored, evasive strategies, raising the bar for enterprise defense and incident response recommendations.

trendmicro.com · 12 min

TLDR InfoSec

SUPABASE SECURITY BEST PRACTICES (2025 GUIDE)

This comprehensive guide addresses frequent security pitfalls seen in Supabase deployments, offering precise and practical solutions grounded in recent audits. It covers how components like authentication, database schemas, Edge Functions, storage, and CORS interact from a security perspective and how to secure them with simple, effective policies—such as “read-only by default”, automate audits, and revisit configurations as the platform evolves.

links.tldrnewsletter.com · 20 min

TLDR InfoSec

REDACCESS (PRODUCT LAUNCH)

Red Access provides an agentless security platform that protects web sessions and assets across browsers and apps, enabling secure access, data loss prevention, and visibility for remote and hybrid enterprise environments.

redaccess.io

TLDR InfoSec

600 GB OF ALLEGED GREAT FIREWALL OF CHINA DATA PUBLISHED IN LARGEST LEAK YET

Hacktivists from Enlace Hacktivista leaked nearly 600 GB of data supposedly from China's Great Firewall, exposing source code, communications, and documents from Geedge Networks and MESA Lab, key to the censorship system. The leak reveals that the Great Firewall operates as a commercial platform called "Tiangou," which has been exported to Myanmar, Pakistan, Ethiopia, Kazakhstan, and other Belt and Road countries for surveillance purposes. The 500 GB archive includes source code, project records, and internal documents revealing how China's censorship functions and spreads globally through public-private partnerships.

hackread.com · 3 min

TLDR InfoSec

MODDER INJECTS AI DIALOGUE INTO 2002'S ANIMAL CROSSING USING MEMORY HACK

A modder connected AI chatbots to the 2002 game Animal Crossing, enabling villagers to discuss their indebtedness and organize against Tom Nook. Using memory hacking and two Python scripts, the mod injects dynamic, AI-generated dialogue into the game, with a writer creating the dialogue and a director adding technical elements.

arstechnica.com · 4 min

TLDR InfoSec

WHAT I LEARNED FROM GETTING REJECTED BY AMAZON: A SECURITY ENGINEER'S INTERVIEW EXPERIENCE

A security engineer shares their experience preparing for and interviewing for an AppSec role at Amazon. The author walks through their screening interview and three days of onsite interviews, which included scripting and automation questions, a coding challenge, a threat modeling exercise, and other questions. The article wraps up with lessons learned after a rejection and the resources the author used to prepare.

medium.com · 6 min

TLDR InfoSec

Register for free

Summary unavailable

n-able.com

TLDR InfoSec

QRATOR LABS MITIGATED RECORD L7 DDOS ATTACK FROM 5.76M-DEVICE BOTNET

Qrator Labs thwarted a record Layer 7 DDoS from a botnet of 5.76M compromised IoT devices targeting government infrastructure, a 333% increase since March 2025, mainly from Brazil (1.41M), Vietnam (661K), and the US (647K).

hackread.com · 2 min

TLDR InfoSec

POPULAR AI CHATBOTS LEAKING DATA: MILLIONS OF USERS COULD BE AFFECTED

Researchers revealed that Vyro AI's server leaked 116GB of data, exposing user prompts, authentication tokens, and putting over 150 million users' privacy and accounts at risk.

links.tldrnewsletter.com · 3 min