TLDR Index
TLDR InfoSec

TLDR INFORMATION SECURITY 2024-05-13

6 sections16 entrieslinks blockcomplete parse

Parse notes

  • Subscription/account footer truncated before parsefooter_truncated

01GENERAL

Sponsored

FEATURES, AND MORE

> Orca is leading the way in AI security with the addition of AI Security [4] to its cloud security platform.

orca.securitySponsor

02ATTACKS & VULNERABILITIES

OHIO LOTTERY DATA BREACH IMPACTED OVER 538,000 INDIVIDUALS

The Ohio Lottery cyberattack conducted by the DragonForce ransomware group in late 2023 impacted over 500,000 individuals. The hackers claim to have obtained over 1.5 million records of employee and player information, including sensitive data like social security numbers, addresses, winnings, and dates of birth, and have leaked over 90GB of stolen files as backups.

securityaffairs.com2 min read

GOOGLE FIXES FIFTH CHROME 0-DAY EXPLOITED IN ATTACKS THIS YEAR

Google has released a security update to fix a use-after-free vulnerability in the component that handles rendering of content in the Chrome browser. Google has stated that exploit code is available. Google Chrome updates automatically for security fixes but users can verify that they are on the latest version in Settings.

bleepingcomputer.com2 min read

MALICIOUS GO BINARY DELIVERED VIA STEGANOGRAPHY IN PYPI

A malicious Go binary was hidden in a PyPI package named requests-darwin-lite. The binary was concealed within a large PNG image file, allowing the attacker to target specific macOS systems. Versions of the package containing the malicious binary were removed from PyPI after being detected.

blog.phylum.io5 min read

03STRATEGIES & TACTICS

HACKING MORE THAN 130,000 CARS WORLDWIDE IN 5 MINUTES

This post goes into how curiosity led a pentester to discover a vulnerability that allowed him to track 130,000 cars worldwide. It reminds readers to not download just any random app that uses IoT or GPS as they are wildly insecure.

links.tldrnewsletter.com4 min read

ANDROID GREYBOX FUZZING WITH AFL++ FRIDA MODE

This blog post walks through the process of fuzzing an Android application using AFL++ in Frida mode. It details the process of building the application and writing a test harness. The post then provides a primer on JNI linking and details the process of building a harness for weak JNI linking and strong JNI linking.

blog.quarkslab.com8 min read

AWS CLOUDQUARRY: DIGGING FOR SECRETS IN PUBLIC AMIS

Researchers from KPMG Romania have published this in-depth article about how public AMIs are exposing sensitive data. They collected AMIs from all AWS regions, identified owners with many public AMIs, and accessed the contents to discover secrets like access keys and confidential data. The researchers emphasized responsible disclosure and highlighted the need for companies to secure their public AMIs.

packetstormsecurity.com35 min read

04LAUNCHES & TOOLS

TOKEN SECURITY (PRODUCT LAUNCH)

Token Security is a "machine-first" identity security platform that provides visibility and continuous threat exposure management to manage identities. It starts with a list of machines and identifies who can access each machine by integrating into existing infrastructure. It then triages data to extract context, evaluate, and prioritize threat detection

token.security

OKTA TERRIFY

Okta Terrify is a tool to abuse Okta Verify and FastPass. The tool allows an attacker to backdoor an Okta account via a compromised machine.

github.comGitHub repository

MS DEVBLOGS SEARCH

MS Devblogs Search is a Python script that downloads Microsoft Devblogs articles and searches them. The tool is helpful for learning about Windows development from the perspective of Microsoft developers.

github.comGitHub repository

05MISCELLANEOUS

HOW THE FEDS WILL TACKLE THE SOFTWARE BUG BACKLOG

The CISA has announced a new vulnrichment program to enrich vulnerabilities from the CVE database with additional details from testing. The goal of this project is to alleviate some of the load that has plagued databases like the NVD and led to slowdowns in cataloging new CVEs

links.tldrnewsletter.com2 min read

GHOSTSTRIPE ATTACK HAUNTS SELF-DRIVING CARS BY MAKING THEM IGNORE ROAD SIGNS

Six researchers have demonstrated a technique called GhostStripe that can interfere with autonomous vehicles' ability to recognize road signs by exploiting the camera-based computer vision systems and rolling shutters of CMOS sensors used by brands like Tesla and Baidu Apollo.

theregister.com5 min read