Skip Navigation

digicat
digicat @ digicat @infosec.pub
Posts
245
Comments
14
Joined
2 yr. ago

blueteamsec @infosec.pub
digicat @infosec.pub

Tracking Candiru’s DevilsTongue Spyware in Multiple Countries
blueteamsec @infosec.pub
digicat @infosec.pub

elfspirit: ELF static analysis and injection framework that parse, manipulate, patch and camouflage ELF files.
blueteamsec @infosec.pub
digicat @infosec.pub

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover
blueteamsec @infosec.pub
digicat @infosec.pub

Demystifying threat intelligence in digital advertising - includes their own pyramid of pain
blueteamsec @infosec.pub
digicat @infosec.pub

Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem
blueteamsec @infosec.pub
digicat @infosec.pub

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
blueteamsec @infosec.pub
digicat @infosec.pub

Exorcism: The first open source runtime windows batch and command line deobfuscator
blueteamsec @infosec.pub
digicat @infosec.pub

IOCTL_VOLSNAP_DELETE_SNAPSHOT: Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs
blueteamsec @infosec.pub
digicat @infosec.pub

Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives
blueteamsec @infosec.pub
digicat @infosec.pub

BSides Las Vegas - live streams - Mon, Tue and Wed
blueteamsec @infosec.pub
digicat @infosec.pub

SQUID-2025:1 Buffer Overflow in URN Handling
blueteamsec @infosec.pub
digicat @infosec.pub

Quantum networking technologies - "we provide an updated analysis of QKD as a security technology, and the development of QRNGs. We also consider the future of quantum networking technologies."
blueteamsec @infosec.pub
digicat @infosec.pub

EntraGoat - A Deliberately Vulnerable Entra ID Environment
blueteamsec @infosec.pub
digicat @infosec.pub

Tracing ToneShell: Mustang Panda's Evolving Tradecraft and Campaign Infrastructure
blueteamsec @infosec.pub
digicat @infosec.pub

APT36 Targets Indian Infrastructure with Desktop Lures and Poseidon Backdoor
blueteamsec @infosec.pub
digicat @infosec.pub

Protecting the Evidence in Real-Time with KQL Queries - "monitoring for attempts to modify the corresponding registry keys can help us generate early alerts and detect potential tampering."
blueteamsec @infosec.pub
digicat @infosec.pub

DHS Launches Over $100 Million in Funding to Strengthen Communities’ Cyber Defenses | CISA
blueteamsec @infosec.pub
digicat @infosec.pub

PlayPraetor's evolving threat: How Chinese-speaking actors globally scale an Android RAT
blueteamsec @infosec.pub
digicat @infosec.pub

How to automatically disable users in AWS Managed Microsoft AD based on GuardDuty findings
blueteamsec @infosec.pub
digicat @infosec.pub

Investigating Suspicious Memory Activity: Tracing a SIEM Alert to a Cobalt Strike C2

malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild

Jump

    • Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities

    Jump

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • I think this might need to be @jerry

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • V welcome..

    • LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL

    Jump

    • Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data."

    Jump

    • Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data."

    Jump

    • Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network

    Jump

    • Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition

    Jump

    • LARVA-208 compromised the Steam game Chemia to distribute multiple malware families - Indicators of Compromise

    Jump

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • Nope, very manual and the plan is to stay here :) - I managed to keep the last community going at this rate for ~8 years.

    • Ability to share links

    Jump

  • Almost need 'Voyager link post'

    • Ability to share links

    Jump

  • I wanted to do browser to Lemmy I get this

    • Chinese hackers have seized control. How did we let this happen?

    Jump