Infosec 2025.05.05 - 2025.05.11

News about attack on Taiwan

中國駭客MirrorFace鎖定臺灣、日本，散布惡意軟體RoamingMouse、Anel

https://www.ithome.com.tw/news/168857

SOC

BeaconHunter - C2 Beacon Detector

https://github.com/ekky19/BeaconHunter

CTF

Simulating APT Attacks for CTF Challenges

https://zachwong02.github.io/blog/recreating-an-apt-attack/

Pentest

github - sqlmap ai

https://github.com/atiilla/sqlmap-ai?utm_source=tldrsec.com&utm_medium=referral&utm_campaign=tl-dr-sec-278-north-korean-it-workers-how-sentinel-one-defends-itself-how-threat-actors-use-claude

LLM

Meta Open-Sources Security Framework for Llama

https://ai.meta.com/blog/ai-defenders-program-llama-protection-tools/

I Replaced My $700/Hour Coach with NotebookLM – Here’s What Happened

https://www.youtube.com/watch?v=Vu6sGg4xKVs&ab_channel=TiagoForte

• NotebookLM can act as a coach by leveraging a large volume of curated past data — the key lies in data scale

Anthropic shared many cases of Claude being abused.

https://www.linkedin.com/company/anthropicresearch/?utm_source=tldrsec.com&utm_medium=referral&utm_campaign=tl-dr-sec-278-north-korean-it-workers-how-sentinel-one-defends-itself-how-threat-actors-use-claude

Good - Automated Social Engineering Bot

https://github.com/mbhatt1/GhostLine?utm_source=tldrsec.com&utm_medium=referral&utm_campaign=tl-dr-sec-278-north-korean-it-workers-how-sentinel-one-defends-itself-how-threat-actors-use-claude