June 3, 2022
The Folina 0day was used to attack Russia and Belarus, based on the location where the ITW samples were uploaded. It is interesting that a clearly Western(-aligned) APT was detected (the file was uploaded to VT).
There is the question of what the original users were targeting, and why did their 0day get uploaded? I’m curious, but I doubt there are any threat Intel companies with the telemetry to inform us. Kaspersky? GroupIB? Positive Technology? Might be interesting if they made a report about cyber campaigns that were detected and thwarted.
The infosec community reacted rapidly and dealt with the vulnerability quickly. I think this shows how the infosec community is dedicated to securing the internet for everyone, even if the targets were Russians and the attacker was a (probably) Western government.
-
-
Fake article, but the technology exists and can totally do this already.
-
Red Mercury, an invented substance much sought after by terrorists and other idiots, gets a back story.
-
-
-
-
I’d watch this.
-
Too true.
-
Everyone has a cyber!
https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/-
-
0day whiplash, there’s another one being exploited ITW.
-
-
This is a good read.
http://hugoclub.blogspot.com/2022/06/dethrone-stars.html-
-
What does this say about defensive progress?
-
