TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR InfoSec, TLDR IT, TLDR, TLDR AI, TLDR Marketing, TLDR Hardware · 9 stories
  2. Page 2: TLDR InfoSecTLDR InfoSec · 10 stories
  3. Page 3: TLDRTLDR · 13 stories
  4. Page 4: TLDR ITTLDR IT · 9 stories
  5. Page 5: TLDR AITLDR AI · 9 stories
  6. Page 6: TLDR AI — continuedTLDR AI · 9 stories
  7. Page 7: TLDR MarketingTLDR Marketing · 12 stories
  8. Page 8: TLDR HardwareTLDR Hardware · 10 stories
  9. Page 9: TLDR DevTLDR Dev · 10 stories
  10. Page 10: TLDR CryptoTLDR Crypto · 12 stories
  11. Page 11: TLDR ProductTLDR Product · 11 stories
  12. Page 12: TLDR DesignTLDR Design · 11 stories
  13. Page 13: TLDR FoundersTLDR Founders · 9 stories
  14. Page 14: TLDR DevOpsTLDR DevOps · 11 stories
  15. Page 15: Resources & ToolsTLDR Dev, TLDR InfoSec, TLDR Design, TLDR DevOps · 11 stories
  16. Page 16: SponsoredTLDR, TLDR AI, TLDR Dev, TLDR InfoSec, TLDR Product, TLDR Founders, TLDR Marketing, TLDR DevOps, TLDR Hardware, TLDR IT · 16 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 2

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

'NOVACOOKIES' KIT STEALS MICROSOFT 365 SESSIONS FOR $320 A MONTH

NovaCookies rents AitM phishing infrastructure for $320 monthly. It relays Microsoft 365 logins and steals authenticated session cookies, bypassing MFA. Island found at least 755 supporting domains targeting hundreds of organizations and uses fake DocuSign document shares and trusted redirect hops. Defenders should deploy phishing-resistant MFA, correlate browser and token activity, and revoke active sessions and refresh tokens after suspected compromise.

links.tldrnewsletter.com · 3 min

TLDR InfoSec

EDGE INFRASTRUCTURE UNDER SIEGE: WHAT TWO INDEPENDENT DATASETS REVEAL ABOUT WHO'S EXPLOITING YOUR PERIMETER

A joint analysis by Tenable and SentinelOne revealed that state-sponsored groups and ransomware operators are independently exploiting the same edge device vulnerabilities. Researchers identified 12 flaws with confirmed multi-nexus exploitation by evaluating 93 CVE attribution pairs, including critical bugs in PAN-OS GlobalProtect (CVE-2024-3400) and Check Point Quantum (CVE-2024-24919). The underlying exposure data highlights severe remediation bottlenecks across major enterprise vendors. F5 appliances led exposure rates with 54 percent of customer environments carrying an actively exploited CVE, while Citrix deployments suffered a median patch time of 461 days. Additionally, Ivanti edge products demonstrated a predictable pattern of serial exploitation refreshing every 8.5 to 13 months. Security teams must prioritize patching F5 and Citrix appliances immediately while deploying feature set minimization and strict endpoint protections to block lateral movement following a perimeter breach.

sentinelone.com · 9 min

TLDR InfoSec

COULD OPENCLAW HAVE ACTUALLY HACKED THAT AUSTRALIAN GYM? WE DECIDED TO TEST IT

Aikido recreated an Australian gym-booking incident using OpenClaw and Claude Opus 4.6. The test app exposed two flaws: client-side-only booking limits and an IDOR cancellation endpoint. Across ten runs, the model bypassed the booking window nine times. It cancelled another user's reservation in two runs, including one response to a generic waitlist request. Replay tests covered 16 decision points and found dominant responses averaged 96.38 percent with the model's actions shifting with small prompt and context changes.

aikido.dev · 6 min

TLDR InfoSec

CISA RED TEAM COMPROMISED TWO CRITICAL INFRASTRUCTURE ORGS, ONE DETECTED NOTHING

CISA's red team gained domain-level access at two critical-infrastructure organizations. One organization missed the intrusion amid false positives, disconnected SOC tooling, default credentials, AD CS flaws, cleartext secrets, and permanent AWS keys. The other organization isolated phishing-hit workstations within 2–20 minutes, yet assessors later obtained domain-controller secrets through an SCCM-stored service credential.

thehackernews.com · 3 min

TLDR IndexPage 2