TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 9 stories
  3. Page 3: TLDR AITLDR AI · 8 stories
  4. Page 4: TLDR AI — continuedTLDR AI · 8 stories
  5. Page 5: TLDR DevTLDR Dev · 11 stories
  6. Page 6: TLDR InfoSecTLDR InfoSec · 14 stories
  7. Page 7: TLDR CryptoTLDR Crypto · 11 stories
  8. Page 8: TLDR DesignTLDR Design · 12 stories
  9. Page 9: TLDR FoundersTLDR Founders · 9 stories
  10. Page 10: TLDR MarketingTLDR Marketing · 11 stories
  11. Page 11: Resources & ToolsTLDR AI, TLDR Dev, TLDR InfoSec, TLDR Design, TLDR Founders, TLDR Marketing · 10 stories
  12. Page 12: SponsoredTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Design, TLDR Marketing · 9 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 6

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

HACKERS STEAL MEDICAL DETAILS OF 15 MILLION IN FRANCE

France's health ministry has confirmed a data breach involving the exposure of administrative information for 15.8 million patients and sensitive doctors' notes for approximately 165,000 individuals. The breach is connected to Cegedim Sante software, which is used by around 1,500 practices. Reports indicate that data such as sexual orientation and AIDS status appeared online, prompting experts to warn of potentially irreparable damage to privacy.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

FAKE VCS TARGET CRYPTO TALENT IN A NEW CLICKFIX CAMPAIGN

A suspected DPRK-aligned campaign is targeting crypto professionals through fabricated VC firms (SolidBit Capital, MegaBit, and Lumax Capital) on LinkedIn, funneling victims to spoofed Zoom/Google Meet pages that deploy cross-platform ClickFix payloads via fake Cloudflare CAPTCHA. The attack chain uses clipboard poisoning to inject OS-specific commands, delivering fileless PowerShell loaders on Windows and multi-stage Python payloads on macOS, with fully undetectable Mach-O binaries evading all VirusTotal vendors. Crypto and Web3 professionals should treat unsolicited LinkedIn outreach with extreme caution, verify company domains via WHOIS, and never paste commands into a terminal as part of any "verification" process.

moonlock.com · 20 min

TLDR InfoSec

ANALYSIS OF AN INTEGRATED PHISHING CAMPAIGN UTILIZING GOOGLE CLOUD INFRASTRUCTURE

A coordinated phishing operation abuses Google Cloud Storage to host a redirector HTML file at storage.googleapis.com, allowing emails to sail through SPF/DKIM checks while pointing to seemingly trustworthy Google infrastructure. The operator reuses one GCS bucket but fans out across 25+ lures, ranging from “Cloud Storage Full” and fake AV expiry to retail rewards and health offers, all converging on credit-card-harvesting pages that present low “shipping” or “service” fees. Defenders should flag storage.googleapis.com links in email, scrutinize sender metadata, and report abusive buckets like “whilewait” to Google Cloud Abuse to collapse the campaign's shared infrastructure.

malwr-analysis.com · 10 min

TLDR InfoSec

ABUSING .ARPA: THE TLD THAT ISN'T SUPPOSED TO HOST ANYTHING

The Infoblox Threat Intel team detected a novel phishing campaign that abuses the .arpa domain using IPv6 reverse domains to bypass firewalls and other detections. The .arpa TLD is a special TLD that is primarily used to map IP addresses to domains and is unlikely to be blocked. The attackers were able to find DNS registrars that allowed them to create A records for these domains and used them in phishing campaigns that advertised free prizes.

infoblox.com · 8 min

TLDR InfoSec

A NEW APP ALERTS YOU IF SOMEONE NEARBY IS WEARING SMART GLASSES

Nearby Glasses is a new Android app that continuously scans for Bluetooth signals from smart glasses made by Meta and Snap, alerting users when potentially always-recording wearable devices are detected nearby. The app matches manufacturer-specific Bluetooth company identifiers and supports custom IDs for detecting a broader range of surveillance wearables, though it may produce false positives from VR headsets. The tool addresses growing privacy concerns about covert recording devices, particularly following reports that Meta Ray-Ban smart glasses were used in immigration raids and harassment.

techcrunch.com · 2 min

TLDR InfoSec

AETERNUM LOADER: INSIDE THE BINARY

Researchers reversed the Aeternum Loader malware, revealing its use of the Polygon blockchain for C2 communications via a hardcoded smart contract address, with AES-encrypted commands that can be decrypted using only the contract address as the key. The loader employs per-string XOR obfuscation, CRC32/DJB2 API hashing, NTFS ADS-based self-deletion, PPID spoofing to explorer.exe, and novel anti-VM checks including CPUID thermal/power MSR detection and SMBIOS BIOS characteristics bit counting. Notably, the blockchain C2 approach creates a permanent, immutable record of all attacker commands, giving defenders a historical audit trail once the encryption is broken.

ctrlaltintel.com · 14 min

TLDR InfoSec

SHE CAME OUT OF THE BATHROOM NAKED, EMPLOYEE SAYS

A joint investigation by Svenska Dagbladet and Göteborgs-Posten revealed that data annotators at Meta subcontractor Sama in Nairobi routinely encounter intimate footage from Meta Ray-Ban smart glasses, including nudity, bank details, and sexual content from users who appear unaware they are being recorded. Network traffic analysis confirmed the glasses require constant communication with Meta servers to function, contradicting retailer claims that data stays local, while Meta's own terms permit both automated and human review of user interactions. Privacy lawyers and Sweden's data protection authority questioned the legality of transferring such sensitive data to Kenya, where no EU adequacy decision exists, raising significant GDPR compliance concerns.

svd.se · 9 min

TLDR InfoSec

FLAW-FINDING AI ASSISTANTS FACE CRITICISM FOR SPEED, ACCURACY

Anthropic's Claude Code Security and OpenAI's Aardvark raise concerns about being slow, expensive, and noisy compared to established SAST tools, especially when the same AI both writes and reviews code. Experts argue these assistants should augment, not replace, existing pipelines, as AI-driven “vibe coding” accelerates insecure code and growing security debt. The real value lies in AI-enhanced remediation workflows and the potential revival of interactive, AI-powered code review.

links.tldrnewsletter.com · 3 min

TLDR IndexPage 6