Operation Triangulation: iOS devices targeted with previously unknown malware | Securelist
https://securelist.com/operation-triangulation/109842/
YouTubeで拡散される不正ソフトウェアの罠 - Mal-Eats
https://mal-eats.net/2023/06/01/the_deceptive_software_trap_spreading_on_youtube/
MalwareBazaar | Browse Checking your browser
https://bazaar.abuse.ch/browse/tag/www-dld-ae/
Microsoft Exchange Powershell Remoting Deserialization leading to RCE (CVE-2023-21707) | STAR Labs
https://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707/
The domain name freeze.rs is for sale
http://Freeze.rs
Rooting the FiiO M6 - Part 1 - Using the "World's Worst Fuzzer" To Find A Kernel Bug | Stigward's Security Journal
https://stigward.github.io/posts/fiio-m6-kernel-bug/
Special Offer for Asia Pacific Students | SANS Online Training
https://www.sans.org/u/1qVX
N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT
https://thehackernews.com/2023/06/n-korean-scarcruft-hackers-exploit.html
Diablo 4 Dorks · GitHub
https://gist.github.com/jhaddix/be0786cc1d0648d7941021ce371ca5eb
GitHub - YYHYlh/Apache-Dubbo-CVE-2023-23638-exp: Apache Dubbo (CVE-2023-23638)漏洞利用的工程化实践
https://github.com/YYHYlh/Apache-Dubbo-CVE-2023-23638-exp
When byte code bites: Who checks the contents of compiled Python files?
https://stpmvt.com/3IRDQMz
VirusTotal - Search - name:App_web_*.dll
https://www.virustotal.com/gui/search/name%253AApp_web_*.dll/files
Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks
https://thehackernews.com/2023/06/evasive-qbot-malware-leverages-short.html
New MOVEit Transfer zero-day mass-exploited in data theft attacks
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/
Malware Development II: Process Injection - YouTube
https://youtu.be/A6EKDAKBXPs
HackerOne | Report #1918362 - Any one can view collaborater email address via path /reports/<id>/participants | HackerOne
https://hackerone.com/reports/1918362
The Oddest Place You Will Ever Find PAC | RET2 Systems Blog
https://blog.ret2.io/2021/06/16/intro-to-pac-arm64/
MOVEit Transfer Critical Vulnerability (May 2023) - Progress Community
https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023
DEATHCon 0x0 2022
https://deathcon.io
Ask Fitis, the Bear: Real Crooks Sign Their Malware – Krebs on Security
https://krebsonsecurity.com/2023/06/ask-fitis-the-bear-real-crooks-sign-their-malware/?utm_source=dlvr.it&utm_medium=twitter
Experts warn of backdoor-like behavior within Gigabyte systemsSecurity Affairs
https://securityaffairs.com/146892/hacking/backdoor-like-behavior-gigabyte-systems.html
Exploit released for RCE flaw in popular ReportLab PDF library
https://www.bleepingcomputer.com/news/security/exploit-released-for-rce-flaw-in-popular-reportlab-pdf-library/
Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites
https://thehackernews.com/2023/06/urgent-wordpress-update-fixes-critical.html
Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics
https://thehackernews.com/2023/06/improved-blackcat-ransomware-strikes.html