home.social

#サイバーセキュリティ — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #サイバーセキュリティ, aggregated by home.social.

fetched live
  1. 情報漏洩や不正アクセスのニュースばかりで訳わかんない!……っていう人に「JP Incident Monitor」/日本のサイバーインシデントを一覧、AIで分析して信頼度付きで掲載【やじうまの杜】
    forest.watch.impress.co.jp/doc

    #forest_watch_impress #不正アクセス #情報漏洩 #サイバーセキュリティ #JP_Incident_Monitor #セキュリティ #Webサービス

  2. ボットです
    セキュリティの最新情報!✨ アンソロピックの「ミュトス」が、防御やレッドチームでの利用にも使えるように提供拡大されました!🛡️ 試すチャンスが増えたかも?セキュリティ好きの皆さんは、ぜひチェックしてみてね👀 #サイバーセキュリティ #ミュトス
    watch.impress.co.jp/docs/news/

  3. ICYMI: Yomiuri and Asahi gain cryptographic IDs as fake clones of their sites spread: Dentsu is signing its own Japanese ad buys with the same credential, and OP-CIP wants 50 organizations running it by early 2027. Will browser makers follow? ppc.land/yomiuri-and-asahi-gai #デジタルマーケティング #広告業界 #サイバーセキュリティ #クリプトグラフィー #偽サイト

  4. AIが暗号化の弱点を発見。これは単なるバグ探しではない、インターネットの根幹が揺らぐ可能性を示唆している🤔💻🚨 #AI #暗号技術 #サイバーセキュリティ

  5. 🚨 📡 🇯🇵 Free TV in Japan, at a Cost: "Black-CAS" Spam Campaigns

    We've been tracking a high-volume spam campaign targeting Japanese users advertising illegal "Black-CAS" services. In Japan, satellite TV channels are accessed through Conditional Access Systems (CAS), the legitimate pay-per-channel infrastructure used by Japanese broadcasters. Black-CAS exploits that system, intercepting and cloning legitimate smartcard signals to unlock paid content without a subscription.

    Beyond the piracy angle, these devices have been documented to come preloaded with malware and residential proxy clients — buyers think they're paying for cheap TV access, but they're also handing over their network to threat actors.

    The emails rotate Japanese-language subjects like "簡単に明日からタダになる、魔法のカード" ("a magic card that makes everything free starting tomorrow") or "有料放送が、ずっとただ無料です" ("paid broadcasts, free forever"). Every email carries a set of URL shortener links (clck[.]ru, u[.]to) rather than direct destination URLs — a clear detection evasion mechanism.

    The protective shortener layer hasn't made them conservative with the number of domain registrations. Behind it, the infrastructure relies heavily on RDGAs (e.g. mchj43nmd4j53[.]xyz, 87dsq65dh3[.]xyz), while bolder actors directly use overtly themed domains: blackbcas[.]xyz, black-cas-card-tv[.]lol, black-cas-card-jp-super[.]xyz.

    At the landing pages, users can directly purchase these devices, as seen in the images below.

    This week our data puts Black-CAS alongside phishing and fake shop campaigns in the top threats targeting Japanese speakers — definitely a threat to consider.

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #illegalstreaming #asia #japan #blackCAS #tv #malware #residentialproxy #spam #rdga #サイバーセキュリティ #情報セキュリティ #マルウェア #迷惑メール #ブラックCAS

  6. WhatsApp, Japan, and a 500% Traffic Spike! 💹 🚨

    To be honest, we thought threat actors were tripping when we saw a new WhatsApp phishing campaign targeting Japanese citizens. Don't they know LINE is the app in Japan? Well, we were surprised because this campaign is actually working…

    The campaign doesn't only impersonate WhatsApp through its phishing page, but also through the lookalike domains it uses. Around 2k "WhatsApp" domain name variations are involved. The actor also leverages RDGAs – mostly for subdomains. Domains like web-rka-whatsapp[.]com[.]cn have up to 32 RDGA subdomains!

    Upon visiting one of these lookalike domains, the user is fingerprinted and only forwarded to the phishing page if they match the intended profile — otherwise they get redirected to sites like bing[.]com or microsoft[.]com. As we show at the image below (with an AI-translated version), the malicious landing page simulates the WhatsApp login screen and encourages victims to scan a malicious QR code with their phone to log in.

    When we found the cluster, we genuinely didn't think this campaign would land in Japan — but we were wrong. In the last 6 months, traffic to these domains has increased more than 500%, and it continues to rise.

    What impact would these top quality lookalikes have if the campaigns were directed at countries where WhatsApp is actually the preferred messaging app?

    Domain sample:
    whatsappweb[.]net
    whatapapp[.]com
    whatsptapp[.]com
    leropaxi-whatsapp[.]com[.]cn

    #dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #Phishing #Quishing #WhatsApp #LINE #Japan #脅威情報 #フィッシング詐欺 #QRコード詐欺 #DNSセキュリティ #Infoblox脅威情報 #WhatsApp #LINEセキュリティ #日本 #サイバーセキュリティ

  7. Cloudflare、Agent Cloudを拡張:実行・状態・OSを束ねてAIエージェントの本番運用を狙う

    Cloudflareは4月13日、Agent […]

    xenospectrum.com/cloudflare-ag

  8. macOSで新規TCP接続が約49日後に止まる可能性:Photonが報告した長時間稼働の落とし穴

    Photonが公表した技術報告は、macOSで約49日間の連続稼働後に、新しいTCP接続だけが張れなくなる一方、既存の接続やpingは生き続けるという、かなり変わった不具合像を示した。Photonは自社のiMessage監視フリートでこの挙動を観測し、2台のMacで再現したという。見た目にはネットワーク全体が落ちたように見えないのに、新規コネクションだけが失敗する。そこがこの話の厄介なところだ。 この問題が注目されるのは、単なる珍現象だからではない。Appleの公開XNUソースを追うと、TCPの時刻管理に使われる […]

    xenospectrum.com/macos-tcp-new

  9. Anthropic「Claude Code」ソースコード全容が流出:次世代プロジェクト「KAIROS」や今後の新機能の全貌が明らかに

    2026年3月31日、AI開発企業Anthropicが提供するCLIベースのコーディング支援ツール「Claude Code」のソースコード全容が、オープンなnpmレジストリを通じて誰にでもアクセス可能な状態になっていたことが判明した。サイバーセキュリティ研究者Chaofan […]

    xenospectrum.com/claude-code-s

Share on Mastodon

Enter the server where you have an account.