Weekly: Snake malware takedown, Kubernetes hunts, and Caffeine Phishing-as-a-Service

Summary: In this episode of ShadowTalk, host Stefano, along with Caroline and Colin, discuss the latest news in cyber security and threat research. Topics this week include:

• Five Eyes agencies takedown FSB-linked Snake malware
• Hunting Kubernetes for privilege escalation techniques
• Investigation offers insights into Caffeine PhaaS platform

Resources:

• https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-129a
• https://www.paloaltonetworks.com/apps/pan/public/downloadResource?pagePath=/content/pan/en_US/resources/whitepapers/kubernetes-privilege-escalation-excessive-permissions-in-popular-platforms
• https://www.bleepingcomputer.com/news/security/caffeine-service-lets-anyone-launch-microsoft-365-phishing-attacks/