Skip Navigation

digicat
digicat @ digicat @infosec.pub
Posts
270
Comments
15
Joined
2 yr. ago

blueteamsec @infosec.pub
digicat @infosec.pub

Threat actors: “Please do not use Okta FastPass”
blueteamsec @infosec.pub
digicat @infosec.pub

From The Depths of the Shadows IRGC and Hacker Collectives Of The 12-Day War
blueteamsec @infosec.pub
digicat @infosec.pub

Cyber Assessment Framework v4.0 released in response to growing threat - UK
blueteamsec @infosec.pub
digicat @infosec.pub

ThrottleStop driver abused to terminate AV processes
blueteamsec @infosec.pub
digicat @infosec.pub

UEFI Bootkit Hunting: Deep Search for Unique Code Behaviors - Chinese
blueteamsec @infosec.pub
digicat @infosec.pub

Stored XSS in OpenVPN Dashboard widget
blueteamsec @infosec.pub
digicat @infosec.pub

yaraast: A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation
blueteamsec @infosec.pub
digicat @infosec.pub

GRITREP: Observed Malicious Driver Use Associated with Akira SonicWall Campaign
blueteamsec @infosec.pub
digicat @infosec.pub

Uncovering memory corruption in NVIDIA Triton (as a new hire)
blueteamsec @infosec.pub
digicat @infosec.pub

Project AK47: Uncovering a Link to the SharePoint Vulnerability Attacks
blueteamsec @infosec.pub
digicat @infosec.pub

Research: The Evolution of Chinese Smishing Syndicates and Digital Wallet Fraud
blueteamsec @infosec.pub
digicat @infosec.pub

Disguises Zip Past Path Traversal - "Schizophrenic ZIP is an archive file that – after unzipping by two different software – may return two different files"

ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities

Jump
    • blueteamsec @infosec.pub
    digicat @infosec.pub

    Getting Code Execution on Apache Spark SQL
    blueteamsec @infosec.pub
    digicat @infosec.pub

    "Court Summons" Phishing Lure Used in Cyberattacks on Ukrainian Government and Defence Sector
    blueteamsec @infosec.pub
    digicat @infosec.pub

    Detection Engineering & Threat Hunting SIG (Special Interest Group) from FIRST
    blueteamsec @infosec.pub
    digicat @infosec.pub

    ft3: FT3: Fraud Tools, Tactics, and Techniques Framework - Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks
    blueteamsec @infosec.pub
    digicat @infosec.pub

    Cisco Event Response: Vishing Attack Impacting Third-Party CRM System
    blueteamsec @infosec.pub
    digicat @infosec.pub

    ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities
    blueteamsec @infosec.pub
    digicat @infosec.pub

    Gen 7 SonicWall Firewalls – SSLVPN Recent Threat Activity
    blueteamsec @infosec.pub
    digicat @infosec.pub

    US offers up to $10 million for information on Iranian cyber group

    malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild

    Jump

    • Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities

    Jump

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • I think this might need to be @jerry

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • V welcome..

    • LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL

    Jump

    • Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data."

    Jump

    • Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data."

    Jump

    • Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network

    Jump

    • Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition

    Jump

    • LARVA-208 compromised the Steam game Chemia to distribute multiple malware families - Indicators of Compromise

    Jump

    • Welcome to the new home of what was /r/Blueteamsec and how it works..

    Jump

  • Nope, very manual and the plan is to stay here :) - I managed to keep the last community going at this rate for ~8 years.

    • Ability to share links

    Jump

  • Almost need 'Voyager link post'

    • Ability to share links

    Jump

  • I wanted to do browser to Lemmy I get this

    • Chinese hackers have seized control. How did we let this happen?

    Jump