The Daily Index — Tuesday, March 17, 2026 · TLDR Index

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

CRACKARMOR: MULTIPLE VULNERABILITIES IN APPARMOR

Summary unavailable

cdn2.qualys.com · 10 min

TLDR InfoSec

UK COMPANIES HOUSE WEB GLITCH EXPOSES CORPORATE DETAILS TO FRAUDSTERS

The UK's Companies House, the agency responsible for incorporating and dissolving the nation's listed companies, has taken its WebFiling dashboard down due to a vulnerability. The vulnerability allowed a user to access other companies' dashboards by selecting “file for another company” and repeatedly pressing the “back” key when prompted for an authentication code, which would redirect them to the other company's dashboard. Attackers could exploit this to view and edit information belonging to other companies.

infosecurity-magazine.com · 2 min

TLDR InfoSec

DECRYPTING AND ABUSING PREDEFINED BIOCS IN PALO ALTO CORTEX XDR

InfoGuard Labs researchers decrypted the AES-256-CBC-encrypted CLIPS rule files shipped with Palo Alto Cortex XDR agents 8.7 and 8.8 (content version 1790-16658), exposing hardcoded global whitelists that exempted any process with `:\Windows\ccmcache` in its command line from roughly half of all BIOC detections, including LSASS dump prevention rules mapped to MITRE ATT&CK T1003/TA0006. The global whitelist has been removed in Cortex XDR Agent 9.1 with content version 2160, though individual rule exceptions remain exploitable by attackers with knowledge of the plaintext rules. Defenders running agents below 9.1 should prioritize upgrading immediately. Those on patched versions should audit process command-line telemetry for ccmcache path injection and treat any closed-box EDR as a single layer rather than a complete control.

labs.infoguard.ch · 10 min

TLDR InfoSec

[NEW THREAT INTELLIGENCE] EUROPEAN SECURITY VENDOR TARGETED BY HACKERS FRONTING AS CISCO DOMAIN

Outpost24's threat intel team uncovered a multi-stage phishing campaign that starts with DKIM-validated JP Morgan–themed emails and abused Cisco Secure Email Gateway links, then chains through Nylas tracking, a compromised Indian development company's infrastructure, and a re-registered legacy domain before landing on Cloudflare-protected infrastructure. An anti-bot “human validation” step filters out automated analysis and ultimately delivers a highly convincing Microsoft 365 credential-harvesting page, likely powered by the Kratos Phishing-as-a-Service kit.

links.tldrnewsletter.com · 6 min

TLDR InfoSec

THE RISE OF MALICIOUS REPOSITORIES ON GITHUB

GitHub is seeing a surge of malicious repositories that impersonate legitimate projects and offer only infected Windows binaries, often removing build instructions and technical detail while using LLM‑generated text to appear authentic. Some repos target macOS/Linux ecosystems like Homebrew but still ship only Windows executables, suggesting a low‑effort or automated campaign. Attackers abuse README updates and recognizable zip naming patterns to climb search rankings, sometimes using long‑standing or hijacked accounts. While many downloads are now blocked by browser and AV protections, developers still need to verify repos and binaries carefully to avoid compromise.

rushter.com · 4 min

TLDR InfoSec

HACKED DATA SHINES LIGHT ON HOMELAND SECURITY'S AI SURVEILLANCE AMBITIONS

Hacked records from DHS's Office of Industry Partnership, obtained by transparency nonprofit Distributed Denial of Secrets, expose over 1,400 funded contracts worth $845M spanning 2004 to late 2025, including May 2025 awards for mobile biometric harvesting devices, AI-powered airport CCTV passenger profiling systems, and a nationwide 911 call data lake with predictive policing capabilities. The leak also reveals 6,000+ companies that bid with the agency, showing the full breadth of private-sector appetite for DHS surveillance work and technologies considered but never funded. The disclosures arrive amid DHS's $165B funding boost and ongoing controversy over agents collecting visual and biometric data on protesters, reigniting civil liberties debates around AI-assisted behavioral screening programs that have repeatedly failed independent review.

theguardian.com · 6 min

TLDR InfoSec

META IS KILLING END-TO-END ENCRYPTION IN INSTAGRAM DMS

Meta announced it is discontinuing end-to-end encryption in Instagram DMs due to low adoption. The feature had only been rolled out to a subset of users and required opting in for each chat individually. While Meta does support end-to-end encryption in WhatsApp, it has been unclear about the progress made towards it in Messenger and other apps.

engadget.com · 2 min

TLDR InfoSec

FBI SEEKS VICTIMS OF STEAM GAMES USED TO SPREAD MALWARE

The FBI's Seattle division is requesting that gamers who installed Steam titles containing malware complete a form to provide additional information. Based on the questions in the form, the FBI appears to be investigating the apps for cryptocurrency theft and account takeover. Victims are also requested to include any screenshots of communications with individuals promoting the games.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

BYTEDANCE REPORTEDLY PAUSES GLOBAL LAUNCH OF ITS SEEDANCE 2.0 VIDEO GENERATOR

ByteDance has delayed the global rollout of Seedance 2.0, its viral AI video model, after Hollywood studios, including Disney, issued cease-and-desist letters over unauthorized use of copyrighted IP.

techcrunch.com · 1 min

TLDR InfoSec

LOBLAW CONFIRMS DATA BREACH - CANADIAN RETAIL GIANT SAYS 'BASIC CUSTOMER INFORMATION' AFFECTED

Attackers accessed a non-critical Loblaw network segment and stole customer contact data, including names, phone numbers, and email addresses.

techradar.com · 2 min

TLDR InfoSec

HACKING ATTEMPT REPORTED AT POLAND'S NUCLEAR RESEARCH CENTER

Hackers recently tried to breach IT systems at Poland's National Centre for Nuclear Research, which operates the MARIA research reactor and backs the country's civilian nuclear program.

links.tldrnewsletter.com · 2 min