Berlin Bassline Brief #14: Zoomsday, Screen (Over)Sharing, LLMs patching poorly, is it actually the cable? and Endpoint Security
Berlin Bassline Brief #14: Zoomsday takeover bug, Apple's emergency patch redux + Calif PoC, LLM patch flaws paper, cable-checking tool, and Endpoint Security concept spotlight.
"living in a powder keg and giving off sparks"
I hope you enjoyed the eclipse if you were in the geographical neighborhood to do so. This week didn't have that many remarkable security developments, which is a concerning correlation with all the security conferences in Las Vegas last week. Well, whatever the reason for a pause, we'll take it!
Security, General:
Zoomsday is a bug that allows remote takeovers of Zoom sessions: https://a.security/blog/asecurity-zoomsday
Security, Apple Platforms:
Continuing with the remote screen invasion theme, Apple released an emergency patch for an uncaught variant of a previous macOS Screen Sharing vulnerability, and it’s a pre-auth, so please patch.
Interesting Paper:
"Frontier Models’ Vulnerability Patches are Often F.L.A.W.E.D. Fix-Like Artifacts With Embedded Defects: Common failure modes of LLM-generated security patches" by Axel Mierczuk, Spencer Michaels, Keith Hoodlet https://1password.com/files/resources/frontier-models-vulnerability-patches-flawed.pdf
Interesting Tool:
Sure, security tooling is great, but have you ever just wanted to know if it isn't working because of the cable? https://github.com/darrylmorley/whatcable
Apple Platforms Security Concept of the Week:
Endpoint Security https://developer.apple.com/documentation/endpointsecurity