TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 9 stories
  3. Page 3: TLDR AITLDR AI · 9 stories
  4. Page 4: TLDR AI — continuedTLDR AI · 9 stories
  5. Page 5: TLDR DevTLDR Dev · 9 stories
  6. Page 6: TLDR InfoSecTLDR InfoSec · 12 stories
  7. Page 7: TLDR CryptoTLDR Crypto · 11 stories
  8. Page 8: TLDR ProductTLDR Product · 10 stories
  9. Page 9: TLDR DesignTLDR Design · 12 stories
  10. Page 10: TLDR FoundersTLDR Founders · 7 stories
  11. Page 11: TLDR MarketingTLDR Marketing · 9 stories
  12. Page 12: Resources & ToolsTLDR Dev, TLDR InfoSec, TLDR Design, TLDR Founders, TLDR Marketing · 11 stories
  13. Page 13: SponsoredTLDR, TLDR AI, TLDR InfoSec, TLDR Product, TLDR Marketing · 6 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 6

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

FORTINET CONFIRMS NEW ZERO-DAY BEHIND MALICIOUS SSO LOGINS

CVE-2026-24858 is a critical authentication-bypass vulnerability (CVSS 9.8) that affects FortiOS, FortiManager, FortiAnalyzer, FortiProxy, and FortiWeb. It allows attackers to log in to devices via FortiCloud SSO. The zero-day, added to CISA's KEV catalog, emerged after reports that the December CVE-2025-59718 patch was being bypassed, prompting Fortinet to temporarily disable FortiCloud SSO globally on January 26. Organizations should immediately upgrade affected products. FortiCloud SSO now blocks login attempts from vulnerable device versions.

links.tldrnewsletter.com · 4 min

TLDR InfoSec

MATCH GROUP BREACH EXPOSES DATA FROM HINGE, TINDER, OKCUPID, AND MATCH

Match Group has confirmed that a “limited amount of user data” was stolen after ShinyHunters claimed a breach of 1.7GB of stolen files allegedly containing 10M records. The attackers stole data after compromising an Okta SSO account, which gave them access to the company's AppsFlyer marketing analytics platform and to Google Drive and Dropbox accounts. The hackers stated that while the data contains some PII, it's mostly tracking data.

bleepingcomputer.com · 2 min

TLDR InfoSec

CORRUPTING THE HIVE MIND: PERSISTENCE THROUGH FORGOTTEN WINDOWS INTERNALS

Swarmer is a low‑privilege tool that quietly edits Windows user registry hives without triggering common EDR hooks on standard registry APIs. Swarmer builds offline registry hives with Offreg.dll by abusing legacy mandatory user profiles and the NTUSER.MAN mechanism, enabling per‑user persistence that survives reboots while largely evading traditional monitoring. This post walks through the workflow, implementation quirks, operational caveats, and both defensive detection opportunities and attacker takeaways around this forgotten Windows feature set.

praetorian.com · 5 min

TLDR InfoSec

HOW REP+ HELPED ME IDENTIFY A CRITICAL SUPABASE JWT EXPOSURE

A security researcher discovered a critical Supabase misconfiguration in which an anonymous JWT embedded in client-side JavaScript granted read access to password_reset_tokens and 34 other tables due to missing Row Level Security (RLS) policies. The exposure of 272 password reset tokens and plaintext passwords enabled a full account takeover, demonstrating how publicly intended anonymous keys become dangerous when RLS is improperly configured. Security teams should audit Supabase deployments by enumerating REST endpoints with anon tokens and validating RLS enforcement across all exposed tables.

bour.ch · 8 min

TLDR InfoSec

BUILDING CRYPTOGRAPHIC AGILITY INTO SIGSTORE

Trail of Bits collaborated with the Sigstore community to implement controlled cryptographic flexibility through predefined algorithm suites, avoiding the in-band signaling vulnerabilities that plagued systems like JWT while enabling organizations to select signing algorithms beyond the original hard-coded ECDSA P-256. The implementation includes a centralized algorithm registry in Protobuf specifications, configurable algorithm restrictions via --client-signing-algorithms flags in Rekor and Fulcio, and a new --signing-algorithm option in Cosign for ephemeral key generation. Go implementations of post-quantum algorithms, LMS, and ML-DSA were developed to validate that the architecture can accommodate future cryptographic standards.

blog.trailofbits.com · 8 min

TLDR InfoSec

US SENTENCES CHINESE NATIONAL FOR ROLE IN $36.9 MILLION CRYPTO SCAM

Jingliang Su, a Chinese national, was sentenced to 46 months in prison for his role in a Cambodia-based cryptocurrency investment scam that defrauded 174 Americans of $36.9 million through fake trading platforms and romance-based social engineering. The operation laundered stolen funds through US shell companies and offshore accounts before converting them to Tether cryptocurrency via Deltec Bank in the Bahamas. Su is one of nine defendants who pleaded guilty, and he was ordered to pay $26.8 million in restitution.

hackread.com · 2 min

TLDR InfoSec

FINTECH FIRM MARQUIS BLAMES HACK AT FIREWALL PROVIDER SONICWALL FOR ITS DATA BREACH

Fintech data broker Marquis has pinned a major 2025 ransomware breach on firewall supplier SonicWall, claiming a SonicWall cloud backup hack exposed its firewall configurations and credentials. Hackers allegedly used this data to bypass defenses and steal sensitive US banking customer information, including Social Security numbers. Marquis is weighing legal and financial recoupment options, while SonicWall publicly disputes any proven link to broader ransomware campaigns.

techcrunch.com · 4 min

TLDR IndexPage 6