05/29

Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

https://www.bleepingcomputer.com/news/security/clever-file-archiver-in-the-browser-phishing-trick-uses-zip-domains/
Clever ‘File Archiver In The Browser’ phishing trick uses ZIP domains

Hextree

http://hextree.io
Hextree

Lazarus hackers target Windows IIS web servers for initial access

https://www.bleepingcomputer.com/news/security/lazarus-hackers-target-windows-iis-web-servers-for-initial-access/
Lazarus hackers target Windows IIS web servers for initial access

PyPI announces mandatory use of 2FA for all software publishers

https://www.bleepingcomputer.com/news/security/pypi-announces-mandatory-use-of-2fa-for-all-software-publishers/
PyPI announces mandatory use of 2FA for all software publishers

AceCryptor: Cybercriminals' Powerful Weapon, Detected in 240K+ Attacks

https://thehackernews.com/2023/05/acecryptor-cybercriminals-powerful.html
AceCryptor: Cybercriminals' Powerful Weapon, Detected in 240K+ Attacks

Attackers use encrypted RPMSG messages in Microsoft 365 phishing attacksSecurity Affairs

https://securityaffairs.com/146768/cyber-crime/rpmsg-messages-microsoft-365-phishing.html
Attackers use encrypted RPMSG messages in Microsoft 365 phishing attacksSecurity Affairs

Red vs. Blue: Kerberos Ticket Times, Checksums, and You! - TrustedSec

https://www.trustedsec.com/blog/red-vs-blue-kerberos-ticket-times-checksums-and-you/
Red vs. Blue: Kerberos Ticket Times, Checksums, and You! - TrustedSec

Pwn the ESP32 Secure Boot - LimitedResults

https://limitedresults.com/2019/09/pwn-the-esp32-secure-boot/
Pwn the ESP32 Secure Boot - LimitedResults

adhoc_CSR_20230529.pdf

https://jp.security.ntt/resources/cyber_security_report/adhoc_CSR_20230529.pdf
adhoc_CSR_20230529.pdf