Conti ransomware shuts down operation, rebrands into smaller units
https://www.bleepingcomputer.com/news/security/conti-ransomware-shuts-down-operation-rebrands-into-smaller-units/
Department of Justice Announces New Policy for Charging Cases under the Computer Fraud and Abuse Act | OPA | Department of Justice
https://www.justice.gov/opa/pr/department-justice-announces-new-policy-charging-cases-under-computer-fraud-and-abuse-act
No-Fix Local Privilege Escalation Using KrbRelay With Shadow Credentials | Icyguider’s Blog
https://icyguider.github.io/2022/05/19/NoFix-LPE-Using-KrbRelay-With-Shadow-Credentials.html
4a12cb1022ba335ce087dcfe31b261355524b3bf - v8/v8 - Git at Google
https://chromium.googlesource.com/v8/v8/+/4a12cb1022ba335ce087dcfe31b261355524b3bf
[2205.07759] Software Updates Strategies: a Quantitative Evaluation against Advanced Persistent Threats
https://arxiv.org/abs/2205.07759
Release v2.3 · JPCERTCC/EmoCheck · GitHub
https://github.com/JPCERTCC/EmoCheck/releases/tag/v2.3.0
Math support in Markdown | The GitHub Blog
https://github.blog/2022-05-19-math-support-in-markdown/
Catalin Cimpanu (on vacation) on Twitter: "A recent academic paper studied data from 86 APTs and 350 campaigns carried out from 2008 to 2020 and found that APTs rarely rely on zero-days and typically use public known vulnerabilities for their attacks https://t.co/5DesuLnK0P https://t.co/4vtZE1gse8" / Twitter
https://twitter.com/campuscodi/status/1527338547081928705
Twisted Panda: Chinese APT espionage operation against Russian state-owned defense institutes - Check Point Research
https://research.checkpoint.com/2022/twisted-panda-chinese-apt-espionage-operation-against-russians-state-owned-defense-institutes/
Offensive Cyber Operations: Understanding Intangible Warfare eBook : Moore, Daniel: Amazon.co.uk: Kindle Store
https://amazon.co.uk/dp/B0B1DX7M67
Cytrox's Predator Spyware Targeted Android Users with Zero-Day Exploits
https://thehackernews.com/2022/05/cytroxs-predator-spyware-target-android.html
Researchers Uncover Rust Supply Chain Attack Targeting Cloud CI Pipelines
https://thehackernews.com/2022/05/researchers-uncover-rust-supply-chain.html
👑 Alyssa Miller 🦄 on Twitter: "PRO TIP: Tired of those KnowBe4 Phishing test emails your infosec team sends you all the time? Setup an Outlook rule to find "X-Phishtest" in the headers and put them in a separate folder. Yes I'm serious. I've got plenty more #infosec circumvention tips. 😈😈" / Twitter
https://twitter.com/AlyssaM_InfoSec/status/1527288419201581056
Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware
https://thehackernews.com/2022/05/hackers-trick-users-with-fake-windows.html
Risky Biz News: FSB-linked DDoS tool could also be used for disinformation campaigns
https://riskybiznews.substack.com/p/risky-biz-news-fsb-linked-ddos-tool
Cyber security: Global food supply chain at risk from malicious hackers - BBC News
https://www.bbc.co.uk/news/science-environment-61336659
Immunefi on Twitter: "Whitehat satya0x reported a critical vulnerability in @wormholecrypto on Feb 24 via Immunefi. The bug was quickly patched, no user funds were affected, and satya0x received a $10 million payout from Wormhole, the largest bounty payout on record. https://t.co/xKDGxfFLjA" / Twitter
https://twitter.com/immunefi/status/1527693383581552641
Wormhole Uninitialized Proxy Bugfix Review | by Immunefi | Immunefi | Medium
https://medium.com/immunefi/wormhole-uninitialized-proxy-bugfix-review-90250c41a43a