Zeljka Zorz

@ClearskySec If you're comfortable sharing it with us (under embargo), please let me know.

@ZeljkaZorz Our next post will reveal the attacker using this 0d

ClearSky Cyber Security research identified a campaign named “Iranian Dream Job”, in which the Iranian threat actor TA455 targeted the defense sector by offering fake jobs. The campaign distributed the SnailResin malware, which activates the SlugResin backdoor. ClearSky attributes both malware programs to a subgroup of Charming Kitten. The similar "Dream Job" lure, attack techniques, and malware files suggest that either TA455 was impersonating Lazarus to hide its activities, or that North Korea shared attack methods and tools with Iran. Read our full post : clearskysec.com/irdreamjob24/

@AngieMcKeown explains how to secure privileged accounts in you organization without inciting a riot :) #IRISSCON

@Gi7w0rm @Ax_Sharma @1ZRR4H @fr0gger_ @_JohnHammond @aejleslie @WhichbufferArda @ProferoSec Thanks! helpnetsecurity.com/2023/07/11/cve…

Pinging the hordes in preparation as this seems actively exploited already: @Ax_Sharma @ZeljkaZorz @1ZRR4H @fr0gger_ @_JohnHammond @aejleslie @WhichbufferArda @ProferoSec

⚠️ Microsoft is investigating reports of a series of remote code execution vulnerabilities impacting Windows and Office products. Microsoft is aware of targeted attacks that attempt to exploit these vulnerabilities by using crafted Microsoft Office documents. CVE-2023-36884

@mkolsek I know exactly what you mean :D Btw, are you giving RSS feeds a chance?

@ZeljkaZorz The image of having yet another app for the same thing is... less than appealing.

Threads not available in Europe? Oh well, perhaps for the better...

@Ministraitor 😆

Paris CDG: Where dreams come to DIE

@cyberMilosz asks an audience member to pose as an attacker, at #BsidesLjubljana A fantastic talk on Android pentesting - very well paced, all concepts simply explained.

@Ministraitor @k8em0 @BSidesLjubljana Nice :) See you there!

Hey @k8em0 remember that discussion about (the lack of) pink conference shirts? This is this years' crew shirt for @BSidesLjubljana 😍 (Attendees still get a black one)

@KimZetter @sandraupson @WIRED You both did a fantastic job, I'm using this piece as a shining example for my colleagues!

Big props to @sandraupson who was my editor on this piece and who enthusiastically supported it from the start when I first pitched it and shepherded it expertly through the @wired process, even when technical details became unwieldy and new facts came to light late in the game.

@FBINewOrleans Hi! Is there an email address I can contact you through to ask some questions about this specific scam? The IC3 doesn't have one.

The FBI is warning the public of for—profit companies offering sextortion victims “assistance” services. These companies charge exorbitant fees, whereas law enforcement and non-profit agencies will assist at no charge to victims. The full story here ic3.gov/Media/Y2023/PS….

@BrianHonan Yup!

Anyone else wondering if LastPass was really the target here or if those behind this attack knew their ultimate target employed LastPass? Similar to the RSA breach many moons ago

@Gi7w0rm Good luck!

Due to the ongoing exam phase my activities will be reduced until mids of February. I' d love to do more for my Twitter now, sadly I do suffers alot of stress during these phases and i need to keep calm and focused to soon end this nightmare of a university grade. See you soon ❤️

@SecEvangelism I laughed and then began to cough :D This was also me a few weeks ago. I hope you'll feel better soon🤞

Me today after almost a month of a $hitty lung infection

@zcobb 6 days for me. Got the notification today.

Still no "your Twitter data is ready" message after Monday's archive request? Anyone else been waiting more than 48 hours for their Twitter archive to be prepped for download?

@gattaca at #irisscon : We should be fixing human security debt, through good UX design and making users personally experience the value of security and the value of caring about security. “We can ‘patch’ humans.”

@BrianHonan Your love of puns has not passed unnoticed 😄

I'd say that ruling took the biscuit :)

@_468TCM5VN7N @SMcK34639745 Hello! Was that after you implemented the updates released on Sept. 3? (qnap.com/en/security-ad…)?

@SMcK34639745 😵

Seems that #Qnap must be still vulnerable for deadbolt even with the latest updates...

@di_codes @helpnetsecurity @pypi @AdamChainz @aviadgershon @Checkmarx Thank you, I obviously had a brain fart while reading :D When will the change go into effect?

Phishing PyPI users: Attackers compromise legitimate projects to push malware - helpnetsecurity.com/2022/08/25/pyp… - @pypi @di_codes @AdamChainz @aviadgershon @Checkmarx #PyPI #Python #OpenSource #SupplyChainCompromise #SupplyChainSecurity #Phishing #AccountHijacking #CybersecurityNews