Link on Github --> https://github.com/Nieuport/news-and-links/blob/gh-pages/docs/2022.11.16.md
Phishing and Social Engineering - https://drew-sec.github.io/
Stealing passwords from infosec Mastodon - without bypassing CSP - https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp
It’s all in the details: The curious case of an lsass dumper gone undetected - https://dec0ne.github.io/research/2022-11-14-Undetected-Lsass-Dump-Workflow/
Finding malicious PyPI packages through static code analysis: Meet GuardDog - https://securitylabs.datadoghq.com/articles/guarddog-identify-malicious-pypi-packages/
Lazarus Group Uses the DLL Side-Loading Technique (mi.dll) - https://asec.ahnlab.com/en/39828/