Cyberespionage and developments in the cyber underworld, including an offering in the C2C market. Russian hacktivist auxiliaries stay busy (and so do their masters in the organs).

The Lazarus Group targets developers. Threat actors target the banking sector with fake LinkedIn profiles and open source supply chain attacks. Vulnerabilities reported in OpenMeetings. HTML smuggling is sold in the C2C market. Johannes Ullrich from SANS describes attacks against niche web apps. Our guest is Damir Brecic of Inversion6 discussing the privacy and security concerns of Meta's new Threads app. And Romania's SVR reports a pattern of Russian cyberattacks.

For links to all of today's stories check out our …

attacks banking banking sector c2c cyber cyberespionage developers fake hacktivist html html smuggling lazarus lazarus group linkedin market masters open source open source supply chain profiles russian sector smuggling supply supply chain supply chain attacks target threat threat actors vulnerabilities