This week, we cover a password compromise that lead to a mobile telco in Spain losing control of their IP address space. We also give a quick update on the Lapsus$ ringleader's court case before discussing a recently discovered macOS backdoor malware that evades most endpoint protection. We end the episode by covering Microsoft's research into a malware installation method that bypasses many security protections.
The submitted value {{65120*65120}} in the Browse By Category element is not allowed.
The submitted value echo kacjkq$()\ uylaha\nz^xyu||a #' &echo kacjkq$()\ uylaha\nz^xyu||a #|" &echo kacjkq$()\ uylaha\nz^xyu||a # in the Browse By Category element is not allowed.
The submitted value Ibjm4U9x in the Browse By Category element is not allowed.
The submitted value r3ed7zEy: Zvohpou3 in the Browse By Category element is not allowed.
The submitted value ../All in the Browse By Category element is not allowed.
The submitted value All<esi:include src="http://bxss.me/rpb.png"/> in the Browse By Category element is not allowed.
The submitted value http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg in the Browse By Category element is not allowed.
The submitted value 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg in the Browse By Category element is not allowed.
The submitted value 1 in the Browse By Category element is not allowed.
The submitted value !(()&&!|*|*| in the Browse By Category element is not allowed.
The submitted value ^(#$!@#$)(()))****** in the Browse By Category element is not allowed.
The submitted value /etc/shells in the Browse By Category element is not allowed.
The submitted value ../../../../../../../../../../../../../../etc/shells in the Browse By Category element is not allowed.
The submitted value bxss.me in the Browse By Category element is not allowed.
The submitted value bxss.me/t/xss.html?%00 in the Browse By Category element is not allowed.
The submitted value xfs.bxss.me in the Browse By Category element is not allowed.
The submitted value All9710684 in the Browse By Category element is not allowed.
The submitted value blog/. in the Browse By Category element is not allowed.
The submitted value All9710684< in the Browse By Category element is not allowed.
The submitted value bfg4933<s1﹥s2ʺs3ʹhjl4933 in the Browse By Category element is not allowed.
The submitted value bfgx10594��z1��z2a�bcxhjl10594 in the Browse By Category element is not allowed.
The submitted value <%={{={@{#{${dfb}}%> in the Browse By Category element is not allowed.
The submitted value <th:t="${dfb}#foreach in the Browse By Category element is not allowed.
The submitted value 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> in the Browse By Category element is not allowed.
The submitted value dfb{{98991*97996}}xca in the Browse By Category element is not allowed.
The submitted value dfb[[${98991*97996}]]xca in the Browse By Category element is not allowed.
The submitted value dfb__${98991*97996}__::.x in the Browse By Category element is not allowed.
The submitted value "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") in the Browse By Category element is not allowed.
The submitted value All9425"();}]9597 in the Browse By Category element is not allowed.
The submitted value %41%6C%6C%39%34%33%35%22%28%29%3B%7D%5D%39%39%32%37 in the Browse By Category element is not allowed.
The submitted value echo kacjkq$()\ uylaha\nz^xyu||a #' &echo kacjkq$()\ uylaha\nz^xyu||a #|" &echo kacjkq$()\ uylaha\nz^xyu||a # in the Browse By Category element is not allowed.
The submitted value Ibjm4U9x in the Browse By Category element is not allowed.
The submitted value r3ed7zEy: Zvohpou3 in the Browse By Category element is not allowed.
The submitted value ../All in the Browse By Category element is not allowed.
The submitted value All<esi:include src="http://bxss.me/rpb.png"/> in the Browse By Category element is not allowed.
The submitted value http://dicrpdbjmemujemfyopp.zzz/yrphmgdpgulaszriylqiipemefmacafkxycjaxjs?.jpg in the Browse By Category element is not allowed.
The submitted value 1yrphmgdpgulaszriylqiipemefmacafkxycjaxjs .jpg in the Browse By Category element is not allowed.
The submitted value 1 in the Browse By Category element is not allowed.
The submitted value !(()&&!|*|*| in the Browse By Category element is not allowed.
The submitted value ^(#$!@#$)(()))****** in the Browse By Category element is not allowed.
The submitted value /etc/shells in the Browse By Category element is not allowed.
The submitted value ../../../../../../../../../../../../../../etc/shells in the Browse By Category element is not allowed.
The submitted value bxss.me in the Browse By Category element is not allowed.
The submitted value bxss.me/t/xss.html?%00 in the Browse By Category element is not allowed.
The submitted value xfs.bxss.me in the Browse By Category element is not allowed.
The submitted value All9710684 in the Browse By Category element is not allowed.
The submitted value blog/. in the Browse By Category element is not allowed.
The submitted value All9710684< in the Browse By Category element is not allowed.
The submitted value bfg4933<s1﹥s2ʺs3ʹhjl4933 in the Browse By Category element is not allowed.
The submitted value bfgx10594��z1��z2a�bcxhjl10594 in the Browse By Category element is not allowed.
The submitted value <%={{={@{#{${dfb}}%> in the Browse By Category element is not allowed.
The submitted value <th:t="${dfb}#foreach in the Browse By Category element is not allowed.
The submitted value 1}}"}}'}}1%>"%>'%><%={{={@{#{${dfb}}%> in the Browse By Category element is not allowed.
The submitted value dfb{{98991*97996}}xca in the Browse By Category element is not allowed.
The submitted value dfb[[${98991*97996}]]xca in the Browse By Category element is not allowed.
The submitted value dfb__${98991*97996}__::.x in the Browse By Category element is not allowed.
The submitted value "dfbzzzzzzzzbbbccccdddeeexca".replace("z","o") in the Browse By Category element is not allowed.
The submitted value All9425"();}]9597 in the Browse By Category element is not allowed.
The submitted value %41%6C%6C%39%34%33%35%22%28%29%3B%7D%5D%39%39%32%37 in the Browse By Category element is not allowed.
RIPE for the Taking
Episode 274 –
Go to
Listen on Your Favorite Platform
Looking For More?
Secplicity - Security Simplified
Secplicity is a leading source of information about IT and business security. Our editorial team simplifies complex cybersecurity concepts, solutions and tools into easily understood and actionable information.
Ransomware Tracker
The Ransomware Tracker is a dynamic, all-in-one hub for IT professionals, researchers, and cybersecurity-minded folks to learn about the entire ransomware landscape. This information-laden resource brings together WatchGuard Threat Labs' research with evidence from all over the Internet into one single convenient location.