TLDR INFORMATION SECURITY 2024-10-16

Get NordPass Business with 35% off

CASIO CONFIRMS CUSTOMER DATA COMPROMISED IN RANSOMWARE ATTACK

Casio confirmed that a ransomware attack resulted in data theft of the personal information of employees, contractors, partners, and some customers. Sensitive company data was also accessed, though credit card information remained secure.

MEDICAL DATA OF ALMOST 400,000 AMERICANS STOLEN: HERE'S WHAT WE KNOW

Gryphon Healthcare has reported a supply-chain cyberattack that affected hundreds of thousands of patients. The breach, which potentially exposed sensitive personal and health information, occurred through an unnamed partner company before August 13. No evidence of data misuse has been found. The compromised data includes names, birthdates, addresses, Social Security numbers, and medical details.

MOZILLA PATCHES CRITICAL FIREFOX VULN THAT ATTACKERS ARE ALREADY EXPLOITING

Mozilla has released a patch for a new Firefox vulnerability with a CVSS of 9.8. The vulnerability arises from a use-after-free bug in the Animation timeline feature in the Page Inspector tool in Firefox. The vulnerability is actively being exploited. Mozilla encourages immediate updating.

THIS NEW SUPPLY CHAIN ATTACK TECHNIQUE CAN TROJANIZE ALL YOUR CLI COMMANDS

Open source ecosystems are vulnerable to supply chain attacks, with entry points being an often overlooked risk. Attackers can exploit this feature across multiple programming ecosystems to execute malicious code when specific commands are run using methods like command-jacking.

CISO CONVERSATIONS: JULIEN SORIANO (BOX) AND CHRIS PEAKE (SMARTSHEET)

This article profiles two CISOs by discussing their career paths, leadership development, and views on modern CISO roles. It covers team building, mentoring, and advice they've received and they would give. It also explores their perspectives on emerging threats in cybersecurity, including evolving attack methods and data protection challenges.

HOW TO BUILD A SECURE RECON NETWORK USING TAILSCALE

Securing offensive security/bug bounty infrastructure is pivotal to protecting the target's sensitive data. This post showcases how Tailscale can be utilized with a VPS and ufw to create a secure, private network. It shows how to use advanced Tailscale features to enable file sharing and keyless SSH.

VULNAPI

VulnAPI is an Open-Source DAST designed to help users scan APIs for common security vulnerabilities and weaknesses.

HALBERD

Halberd is a tool that executes a comprehensive set of attack techniques across a variety of different clouds via a web interface. It supports Entra ID, Microsoft 365, Azure, and AWS.

GATO

Gato is a tool for finding and exploiting vulnerabilities in GitHub pipelines of public and private repositories. It helps security engineers, blue teams, red teamers, and bug bounty hunters detect and prevent attacks using self-hosted runners. The tool requires a GitHub classic PAT for operation. It offers features like code search, enumeration, and automated workflow analysis.

MICROSOFT SAYS MORE RANSOMWARE STOPPED BEFORE REACHING ENCRYPTION

Microsoft reported a 2.75x increase in ransomware attacks year-over-year, but noted improved defenses. Successful encryptions have decreased threefold in two years due to better automatic detection, while unmanaged devices remain a vulnerability in 90% of cases. Akira is the top ransomware variant, followed by LockBit, Play, ALPHV/BlackCat, and Black Basta.

CLOUD LOGGING TIPS & TRICKS

This blog post contains tips for collecting cloud logs. It introduces Wiz's Cloud Logging Framework, which categorizes logs by security use case, mapping logs to either identity, data, network, compute, or control plane. The post highlights the control plane logs by providing tailored tips for AWS, Azure, GCP, and Google Workspace.

ELIMINATING MEMORY SAFETY VULNERABILITIES AT THE SOURCE

This blog post explores how focusing on writing new code in memory safe languages led to a decrease in vulnerabilities in an Android project. It posits that the next stage in security is to focus on safe coding and secure code practices. This is because vulnerabilities decay exponentially so older code will become safer over time, therefore teams should focus on writing new code in memory safe languages and only work on the legacy code when bug fixing.

LEEDS EQUITY PARTNERS ACQUIRES OFFSEC

Leeds Equity has acquired the OffSec certification company.

AMAZON SAYS 175 MILLION CUSTOMER NOW USE PASSKEYS TO LOG IN

Amazon says that over 175 million customers are using passkeys for faster and more secure logins.

AUTHORITIES SEIZE DARK WEB MARKETPLACES SIPULITIE AND TSÄTTI

Finnish and Swedish authorities, with Bitdefender's help, closed down dark web marketplaces Sipulitie and Tsätti, stopping illegal drug sales in the millions.