LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)

SANS Internet Storm Center diary feed containing reports on LausivLoader malware delivery and multi-stage data transfer, scanning against hospitality applications, macOS 27 boot traffic, Apple security updates, and theft and aggregation of LLM inference capacity. The most directly security-relevant item describes malspam impersonating a legitimate company and delivering a fiber-optic-system quotation lure, while other entries cover opportunistic scanning, large-scale Apple vulnerability patching, and abuse of insecure LLM resale gateways.