TLDR INFORMATION SECURITY 2025-05-01

It doesn't have to be this way. ThreatLocker Patch Management

identifies outdated applications and handles everything for you.

quick demo

UK RETAIL GIANT CO-OP WARNS OF DISRUPTION AS IT BATTLES CYBERATTACK

The Co-operative Group, a major UK retailer, shut down some IT systems following attempted cyberattacks. While stores remain operational, back office and call center functions face disruption. The company has engaged the National Cyber Security Centre but hasn't disclosed if hackers successfully accessed systems or if customer data was compromised.

OVER 290K CITIZENS AT RISK: CLOUDSEK UNCOVERS MAJOR DATA BREACH AT BANGALORE WATER SUPPLY AND SEWAGE BOARD

CloudSek's digital risk monitoring platform found a forum post selling root access to the Bangalore Water Supply and Sewage Board's database. This was traced to a publicly accessible .env file with plaintext MySQL credentials and an exposed Adminer interface. The database holds over 290,000 user records, including full name, phone number, address, Aadhaar number, and email address.

SONICWALL SMA100 VPN VULNERABILITIES NOW EXPLOITED IN ATTACKS

SonicWall has warned customers that several vulnerabilities which impact its Secure Mobile Access (SMA) appliances are being actively exploited. The vulnerabilities being exploited include various remote code injection and session hijacking attacks. SonicWall recommends that customers review their SMA devices to ensure no unauthorized logins and apply any available patches.

SECURING THE MODEL CONTEXT PROTOCOL

This post identifies four security components to address in MCP servers: agent to MCP communication, MCP to tool/server connectivity, the underlying supply chain, and securing the identity of the user and agent when talking to servers. For securing the agent to MCP communications, the post suggests an allowlist of LLM providers that an MCP can be integrated with. It also suggests utilizing existing security practices to secure MCP-to-tool communication and the supply chain, as well as using OAuth to ensure the identities of both the user and the agent.

DETECTING AND COUNTERING MALICIOUS USES OF CLAUDE: MARCH 2025

Anthropic's March 2025 report details misuse of Claude, including an "influence-as-a-service" operation that orchestrates social media bot activities, credential stuffing targeting security cameras, recruitment fraud, and novice actors creating sophisticated malware. In response, Anthropic implemented advanced detection methods like Clio and hierarchical summarization to analyze conversation data and classifiers to screen user inputs and Claude's responses for harmful content, leading to the banning of accounts linked to violative activities.

LLAMAFIREWALL

LlamaFirewall is a framework designed to detect and mitigate AI-centric security risks. It consists of a set of scanners designed to detect various security risks. LlamaFirewall supports multiple layers of inputs and outputs, such as typical LLM chat and more advanced multi-step agentic operations.

CY4DATA LABS (PRODUCT LAUNCH)

Cy4Data secures both structured and unstructured data fields, records, and tables at rest, in transit, and when processed. The company also provides a key management system and real-time threat detection.

EVERCOOKIE

Evercookie is a JavaScript API that creates extremely persistent cookies in a browser to track a client's activity after they have removed cookies.

TECH GIANTS PROPOSE STANDARD FOR END-OF-LIFE SECURITY DISCLOSURES

Tech giants including Microsoft, Cisco, and IBM have drafted the "OpenEoX" framework through OASIS to standardize end-of-life security notifications for products. The proposal creates a machine-readable format defining four key lifecycle points: General Availability, End of Sales, End of Security Support, and End of Life.

INTRODUCING ADVANCED CHAT PRIVACY: ENHANCED PROTECTIONS FOR YOUR MOST SENSITIVE CONVERSATIONS

WhatsApp has launched a new feature called Advanced Chat Privacy. This setting can be enabled on chats to add an additional layer of privacy by preventing users from exporting chats, auto-downloading media to their phone, and using messages for AI features. This feature comes in the wake of privacy concerns caused by the always-on Meta AI features.

DARPA BELIEVES AI CYBER CHALLENGE COULD UPEND PATCHING AS THE INDUSTRY KNOWS IT

DARPA Director Rob McHenry believes that a combination of LLMs and formal methods for software development could virtually eliminate software vulnerabilities. Formal methods are a laborious process that uses mathematical models to prove the correctness of software. McHenry believes that given the success of the DARPA AI Cyber Challenge, LLMs could be used with formal methods to generate and validate the correctness of proofs automatically.

EX-DISNEY EMPLOYEE GETS 3 YEARS IN THE CLINK FOR GOOFY ATTACKS ON MOUSEY MENUS

Michael Scheuer, a former Disney Menu Production Manager, received a three-year prison sentence and a $688,000 fine for hacking Disney's restaurant menu application and altering critical information to include offensive content, thus creating safety risks.

A NEW KALI LINUX ARCHIVE SIGNING KEY

Kali Linux users must manually install a new signing key for the repository due to a key change, which prevents system updates until the new key is added.

NORTH KOREAN OPERATIVES HAVE INFILTRATED HUNDREDS OF FORTUNE 500 COMPANIES

Mandiant has noted that North Korean operatives have infiltrated many Fortune 500 companies, posing a significant threat to IT infrastructure and data security.