The LAPSUS$ hacking group has claimed to have hacked both Microsoft and Okta, details about a novel phishing technique called a browser-in-the-browser (BitB) attack, and how a popular software package that has 1.1 million weekly downloads released a new tampered version to condemn Russia's invasion of Ukraine by wiping arbitrary file contents.

Show notes: https://sharedsecurity.net/2022/03/28/lapsus-hacks-okta-browser-in-the-browser-phishing-attack-popular-software-package-updated-to-wipe-russian-systems/