TLDR Index
TLDR Cybersecurity

TLDR CYBERSECURITY 2023-08-30

6 sections16 entriesinline urlcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

02ATTACKS & VULNERABILITIES

HACKERS CAN SILENTLY GRAB YOUR IP THROUGH SKYPE

A security researcher has found that it’s possible to reveal a Skype app user’s IP address without the target needing to even click a link. Microsoft said the vulnerability does not need immediate attention.

404media.co4 min read

US HACKS QAKBOT, QUIETLY REMOVES BOTNET INFECTIONS

The US government coordinated a crackdown on the QakBot malware family. The international team seized control of the botnet’s infrastructure and removed the malware from tens of thousands of infected devices.

krebsonsecurity.com2 min read

03STRATEGIES & TACTICS

DARKGATE - THREAT BREAKDOWN JOURNEY

A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. It leverages hijacked email threads to trick recipients into downloading the malware. The attack uses phishing to direct users to an MSI payload subject to certain conditions. This article breaks down how this malware works and the technicalities behind it.

0xtoxin.github.io15 min read

PIVOTING CLOUDS IN AWS ORGANIZATIONS

This is part 2 of a series on pen-testing AWS organizations. The first part of the series provided an overview of AWS organizations and some of the “easy wins.” Part 2 covers newer and more advanced AWS security mechanisms.

netspi.com10 min read

04LAUNCHES & TOOLS

NOSEY PARKER

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data.

github.comGitHub repository

PROMPT INJECTION PRIMER FOR ENGINEERS

A detailed overview of Prompt Injection that seeks to explain what it is, what the potential impact of prompt injection is, and how it can be prevented. A PDF version of the primer is available in the repo.

github.comGitHub repository

05MISCELLANEOUS

STATE OF CYBER INSURANCE 2023

The survey results find that most organizations are not approaching cyber insurance with the same diligence – they are simply looking to get covered. What they’re not checking is whether the policy they had last year is what they need now, or if their policy changed at renewal. This ‘cyber insurance gap’ could put a lot of organizations in a tough place when a cybersecurity incident occurs, and they want to utilize this financial safety net.

delinea.com8 min read

THE 2023 STATE OF RISK REDUCTION: A NEED FOR SPEED

Report providing fresh insight into how security pros handle the challenging vulnerability remediation life cycle from discovery to resolution. Some interesting tidbits include the time it takes to remediate critical security risks from start to finish (4 weeks) and the fact that 49% of security professionals do not know who to contact to fix or verify fixes.

22415572.fs1.hubspotusercontent-na1.net60 min read

AN AI THREAT MODELING FRAMEWORK FOR POLICYMAKERS

A thought piece from Daniel Miessler in which he proposes a framework for thinking about AI risks through the lens of threat modeling. His proposed model focuses on Actors, Technique, Harm, and Impact (ATHI). A GitHub repo is linked with community-sourced examples of ATHIs.

danielmiessler.com5 min read