24/10/2022–30/10/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox!

10/10/2022–16/10/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox!

Infosec News for 03/10/2022 — 09/10/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items Insights into the evolution of BumbleBee Loader’s capabilities, used by the FIN12 ransomware threat group for initial access; IcedID & Qakbot…

Infosec News for 26/09/2022–02/10/2022 — This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items Royal ransomware shows shades of Conti; the infamous Brute Ratel C4 framework gets cracked and distributed on cybercrime forums, and a China-based actor uses vSphere Installation Bundles…

Infosec News for 19/09/2022–25/09/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items A rootkit used by DPRK’s Lazarus Group abuses vulnerable kernel drivers to disable security monitoring features throughout the system, blinding AV and EDR…

Infosec News for 05/09/2022–11/09/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items The Uber hack is indicative of a growing trend involving stolen credentials, socially-engineered MFA bypasses, and a lack of internal controls to detect…

Infosec News for 05/09/2022 – 11/09/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items The “cyber war” we’ve all been waiting for has been unfolding in the Middle East, highlighted this week through Iran’s politically-motivated…

Infosec News for 29/08/2022–04/09/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items China’s APT40 continue to conduct espionage operations, targeting countries and organisations involved in the South China Sea with the ScanBox browser exploit framework…

Infosec News for 22/08/2022–28/08/2022 This is a cross-post from the main Opalsec Substack. Check it out and subscribe to receive the latest newsletters straight to your inbox! Headline Items The true scope of impact of the SMS Phishing campaign targeting Twilio continues to grow, highlighting supply chain risks and the fragility of…