ISC StormCast for Wednesday, October 5th, 2022

Credential Harvesting with Telegram

https://isc.sans.edu/forums/diary/Credential%20Harvesting%20with%20Telegram%20API/29112/

Updated Microsoft Exchange Fix

https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/

Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization

https://www.cisa.gov/uscert/ncas/alerts/aa22-277a

A New Supply Chain Attack on PHP

https://blog.sonarsource.com/securing-developer-tools-a-new-supply-chain-attack-on-php/

business computer cyber cybersecurity daily exchange hacking infosec internet isc microsoft network october packagist phishing php security supply chain telegram