The Daily Index — Tuesday, August 18, 2026 · TLDR Index

GENERAL

TLDR InfoSec

TLDR InfoSec

See how to reduce your exposure with CTEM

Summary unavailable

events.horizon3.ai

TLDR InfoSec

SOGANG UNIVERSITY HIT BY PERSONAL INFORMATION BREACH OF 180,000

South Korea's Sogang University disclosed a data breach affecting 180k students, alumni, and employees. The compromised information includes student identification numbers, names, affiliations, email addresses, mobile phone numbers, and encrypted passwords for the university's integrated login system.

koreaherald.com · 2 min

TLDR InfoSec

WALLET PROVIDER SAFEPAL SAYS DATA BREACH EXPOSED PERSONAL INFO OF NEARLY 40,000 CUSTOMERS

This past weekend, crypto wallet provider SafePal announced that an authorization flaw in its order tracking system allowed unauthorized access to personal data belonging to nearly 40k customers. The breached data includes customer names, email and shipping addresses, phone numbers, and purchase details, but did not involve any wallet credentials, financial details, or government IDs.

links.tldrnewsletter.com · 2 min

TLDR InfoSec

OWASP TOP 10 CI/CD SECURITY RISKS

The OWASP Top 10 CI/CD Security Risks initiative provides a framework to help defenders identify and secure vulnerabilities within continuous integration and delivery environments. The list catalogs critical risks including dependency-chain abuse, poisoned pipeline execution, inadequate access controls, credential hygiene issues, artifact integrity gaps, insecure configurations, and insufficient logging. The project provides recommended security controls and references to help organizations mitigate identified CI/CD risks.

owasp.org · 5 min

TLDR InfoSec

ATTACKING SAM AND EXTRACTING HASHES WITH 7Z

7z is an archiving and unarchiving tool that is incredibly popular on Windows systems. Users can extract hives by typing \\.\ in the 7z address bar and then navigating to PhysicalDrive0 followed by 0.ntfs to locate the system hives which can be extracted to a separate system and then cracked. This technique requires GUI access as 7z can only parse physical disks and NTFS partitions through the File Manager GUI.

hackers-arise.com · 4 min

TLDR InfoSec

solutions in AWS Marketplace.

Summary unavailable

pages.awscloud.com

TLDR InfoSec

MOZILLA REVOKES FIREFOX SIGNING KEY AFTER UNENCRYPTED COPY LANDS IN GITHUB

Mozilla revoked and replaced a GPG private subkey after an unencrypted copy of it was pushed to a private GitHub repository. The key signed Firefox and Thunderbird Linux tarballs, RPM packages, and checksums. Mozilla found no unauthorized access in the available audit records, but manual signature verifiers must import the new key and revoke the old key.

theregister.com · 2 min

TLDR InfoSec

TRIVY, NOT LITELLM BEHIND THE 2,500 ORG COMPROMISE

SOCRadar tied 2,085 of 2,188 tracked data exposures to the earlier Trivy compromise. Data collection ran from March 19 to March 24 and showed that malicious LiteLLM packages appeared only for 40 minutes on March 24. The worm stole tokens, keys, and credentials from CI/CD systems, then used developer secrets to poison more packages. Stolen datasets are now being sold on Telegram.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

LOONGLEAK

LoongLeak affects Loongson 3A5000 and 3A6000 processors.

loongleakattack.com · 3 min

TLDR InfoSec

WINDOWS 11 IS FULLY REMOVING A LEGACY TOOL THAT MALWARE AND RANSOMWARE HAVE ABUSED FOR YEARS

Microsoft will be removing the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 systems starting in 24H2, 25H2, and 26H2.

windowslatest.com · 3 min