TLDR INFORMATION SECURITY 2024-08-30

2️⃣ AI Audits and Gap Analysis: human-level audits in minutes

instead of weeks. Trustero continually evaluates your controls for operating effectiveness, spotting gaps, giving tailored remediation guidance, and ultimately unlocking Agile GRC.

SPECIAL OFFER FOR TLDR READERS: Start free with 2x the AI credits.

DOWNLOAD THE WHITE PAPER: AI for Control Operating Effectiveness.

PARK'N FLY NOTIFIES CUSTOMERS OF DATA BREACH

Park'N Fly, which provides off-airport parking for several Canadian Airports, is notifying 1 million customers about a data breach that exposed their information. The exposed information includes full names, email addresses, physical addresses, airplane numbers, and CAA numbers. Park'N Fly reports that the attackers breached its systems via compromised VPN credentials.

DICK'S SPORTING GOODS SAYS SENSITIVE DATA EXPOSED IN CYBERATTACK

Dick's Sporting Goods reported a cyberattack on August 21 that potentially exposed confidential information. The company activated its cyber response plan, engaged security experts, and notified law enforcement, but it believes the incident hasn't disrupted operations or had a material impact.

DUREX INDIA SPILLED CUSTOMERS' PRIVATE ORDER DATA

PHISHING IN STYLE: MICROSOFT SWAY ABUSED TO DELIVER QUISHING ATTACKS

This post dives into how a research team saw a massive surge in Microsoft Sway-based phishing, primarily using QR codes ("Quishing"). These campaigns targeted MS Office credentials, focusing on Asia and North America across various industries through mobile devices' weaker security.

THE ESSENTIAL GUIDE TO AI BILLS OF MATERIALS (AIBOMS)

An AIBOM is a comprehensive inventory of AI system components that enhances transparency and governance. AIBOMs are crucial for responsible AI adoption. They provide a "map" of system elements including architecture, inputs/outputs, intended uses, risks, and ethical implications.

HARNESSING LLMS FOR AUTOMATING BOLA DETECTIONS

Broken Object Level Authorization (BOLA) vulnerabilities are notoriously difficult to automatically detect as they do not follow set patterns and often require an understanding of the application logic and interdependencies. To address this problem, Unit 42 developed BOLABuster, which leverages LLMs for detecting BOLAs. BOLABuster takes an OpenAPI specification and then identifies all potentially vulnerable endpoints. It then establishes which endpoints are producers and which are consumers to map dependencies. The LLM determines the execution path to the potential BOLA and generates a test script. Unit 42 was able to find new vulnerabilities in Grafana, Harbor, and Easy!Appointments using BOLABuster.

MATRIX

My Privacy DNS' "Matrix" project is a handcrafted and completely self-managed DNS Firewall through Response Policy Zones.

CHALK

Chalk captures metadata at build time. It can add a small 'chalk mark' (metadata) to any artifact so it can be identified in production. Chalk can also extract chalk marks and collect additional metadata about the operating environment when it does this.

SECTEMPLATES

SecTemplates is an open-source collection of templates for running various security programs.

AN AWS IAM SECURITY TOOLING REFERENCE

This post presents a list of different tools for simplifying AWS IAM security. PMapper and Cloudsplaining can be used to identify privilege escalation vectors and least privilege violations. Parliament and aws-lint-iam-policies provide linters. IAMSpy provides an SMT solver to formally prove whether a given IAM identity has access to a given resource. Apeman can be used to visualize IAM relationships.

STATE-BACKED ATTACKERS AND COMMERCIAL SURVEILLANCE VENDORS REPEATEDLY USE THE SAME EXPLOITS

Google's Threat Analysis Group discovered exploit campaigns targeting Mongolian government websites using iOS and Chrome vulnerabilities previously seen in commercial surveillance vendor exploits. The attackers utilized watering hole attacks to deploy sophisticated exploits and steal browser data, prompting notifications to Apple and Android partners to address the vulnerabilities. The reuse of exploits highlights the risk of dangerous threat actors acquiring tools developed by the commercial surveillance industry, emphasizing the ongoing threat of watering hole attacks on mobile devices.

DEEP-TEMPEST: IMAGE HIJACKING VIA HDMI

Researchers in Uruguay have developed a side-channel attack method called Deep-TEMPEST that reconstructs images from radio noise emitted by HDMI connections. Using machine-learning algorithms, they successfully extracted text displayed on an external monitor from intercepted signals. This attack highlights the potential security risks associated with monitoring and intercepting digital data transmissions.

TL;DR: EVERY AI TALK FROM BSIDESLV, BLACK HAT, AND DEF CON 2024

This post has summaries for all 60+ AI talks from Hacker Summer Camp.

GOOGLE INCREASES CHROME BUG BOUNTY REWARDS UP TO $250,000

Google has raised bug bounty rewards for Chrome security flaws, with the maximum payout now over $250,000.

SEATTLE-TACOMA INTL AIRPORT CYBERATTACK TRIGGERS HANDWRITTEN BOARDING PASSES

Handwritten boarding passes are being used at Seattle-Tacoma International Airport after a cyberattack caused system outages.