Tomorrow, and tomorrow, and tomorrow: Information security and the Baseball Hall of Fame

Cisco Talos weekly newsletter highlights research into UAT-5918, an active post-compromise intrusion campaign targeting critical infrastructure in Taiwan with overlaps to known APT activity (Volt Typhoon and others); it details credential harvesting (registry hives, NTDS, Mimikatz, browser credential extraction), lateral movement (RDP, WMIC/PowerShell, Impacket), common tooling (FRPC, FScan, In-Swor, Earthworm, Neo-reGeorg), provides associated IOCs and several prevalent malware SHA-256 hashes from Talos telemetry, and notes other trending security headlines.