Stealing passwords from infosec Mastodon - without bypassing CSP | PortSwigger Research
https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp
It’s all in the details: The curious case of an lsass dumper gone undetected
https://dec0ne.github.io/research/2022-11-14-Undetected-Lsass-Dump-Workflow/
Top Zeus Botnet Suspect “Tank” Arrested in Geneva – Krebs on Security
https://krebsonsecurity.com/2022/11/top-zeus-botnet-suspect-tank-arrested-in-geneva/
PortSwigger Research on Twitter: "Stealing passwords from infosec Mastodon - without bypassing CSP https://t.co/kXIqj3tpAU https://t.co/wFfyCViULT" / Twitter
https://twitter.com/PortSwiggerRes/status/1592517844851228672
Researchers Say China State-backed Hackers Breached a Digital Certificate Authority
https://thehackernews.com/2022/11/researchers-say-china-state-backed.html
Varonis Threat Labs Discovers SQLi and Access Flaws in Zendesk
https://www.varonis.com/blog/zendesk-sql-injection-and-access-flaws
Indestructible G0thm0g - CrackMapExec ~ CME WIKI
https://wiki.porchetta.industries/news-2022/indestructible-g0thm0g
Hyperpom: An Apple Silicon Fuzzer for 64-bit ARM Binaries - Impalabs Blog
https://blog.impalabs.com/2211_hyperpom.html
Typhon Reborn With New Capabilities
https://unit42.paloaltonetworks.com/typhon-reborn-stealer/
Billbug: State-sponsored Actor Targets Cert Authority, Government Agencies in Multiple Asian Countries | Symantec Enterprise Blogs
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/espionage-asia-governments-cert-authority
MalwareBazaar | Browse Checking your browser
https://bazaar.abuse.ch/sample/2cb8f04d41fe34706ff61cba06788faaaca87494721fcf8e86d20b897890a3b1/
Chinese hackers target government agencies and defense orgs
https://www.bleepingcomputer.com/news/security/chinese-hackers-target-government-agencies-and-defense-orgs/
Qakbot/Qakbot_BB05_15.11.2022.txt at main · pr0xylife/Qakbot · GitHub
https://github.com/pr0xylife/Qakbot/blob/main/Qakbot_BB05_15.11.2022.txt
MalwareBazaar | Browse Checking your browser
https://bazaar.abuse.ch/sample/440d84b5d539d7724898e4127df3d5f0d68cefb5bc14f09b13b2e657a3dc7a08/
Internet disruptions registered as Russia moves in on Ukraine - NetBlocks
https://netblocks.org/reports/internet-disruptions-registered-as-russia-moves-in-on-ukraine-W80p4k8K
Google to Pay $391 Million Privacy Fine for Secretly Tracking Users' Location
https://thehackernews.com/2022/11/google-to-pays-391-million-privacy-fine.html
Operation(Đường chín đoạn) typhoon：觊觎南海九段线的赛博海莲
https://mp.weixin.qq.com/s/pd6fUs5TLdBtwUHauclDOQ
GitHub - Impalabs/hyperpom: AArch64 fuzzer based on the Apple Silicon hypervisor
https://github.com/impalabs/hyperpom
Hacking Salesforce-backed WebApps - Hypn.za.net
https://www.hypn.za.net/blog/2022/11/12/Hacking-Salesforce-backed-WebApps/