Infosec.Pub

4,699 readers
114 users here now

To support infosec.pub, please consider donating through one of the following services:

Paypal: jerry@infosec.exchange

Ko-Fi: https://ko-fi.com/infosecexchange

Patreon: https://www.patreon.com/infosecexchange

founded 2 years ago
ADMINS
jerry
shellsharks
modbot
listing: all - local
1126
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1127
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1128
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1129
3
A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1130
2
APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1131
2
StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1132
2
AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1133
2
rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1134
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1135
2
Silent Harvest: Extracting Windows Secrets Under the Radar (sud0ru.ghost.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1136
2
Hunting for Malware Networks (dti.domaintools.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1137
4
Slice: SAST + LLM Interprocedural Context Extractor (noperator.dev)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1138
5
A New Rust Packaging Model in Guix (guix.gnu.org)
submitted 1 month ago by cm0002@piefed.world to c/guix
0 comments fedilink
1139
4
Interpol-Led African Cybercrime Crackdown Leads to 1209 Arrests (www.infosecurity-magazine.com)
submitted 1 month ago by lemmydev2 to c/pulse_of_truth
0 comments fedilink
 
 

Operation Serengeti 2.0 operators helped recover $97.4m stolen by cybercriminals

1140
11
What the hell is going on right now? (catskull.net)
submitted 1 month ago by lemmydev2 to c/pulse_of_truth
0 comments fedilink
 
 

Comments

1141
7
AI Systems Can Generate Working Exploits for Published CVEs in 10-15 Minutes (cybersecuritynews.com)
submitted 1 month ago by lemmydev2 to c/pulse_of_truth
0 comments fedilink
 
 

Artificial intelligence systems can automatically generate functional exploits for newly published Common Vulnerabilities and Exposures (CVEs) in just 10-15 minutes at approximately $1 per exploit.  This breakthrough significantly compresses the traditional “grace period” that defenders typically rely on to patch vulnerabilities before working exploits become available. The research, conducted by security experts Efi Weiss and […] The post AI Systems Can Generate Working Exploits for Published CVEs in 10-15 Minutes appeared first on Cyber Security News.

1142
13
Hackers access data of 850,000 Orange Belgium customers (www.euractiv.com)
submitted 1 month ago by Davriellelouna@lemmy.world to c/cybersecurity
0 comments fedilink
1143
4
phishurl-list: Phishing URL dataset from JPCERT/CC (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1144
3
Evolving Mule Tactics in the META Region (www.group-ib.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1145
4
When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) - a reminder that Docker is not a security boundary (blog.qwertysecurity.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1146
4
AppLockerInspector: Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1147
4
Detailed Analysis of Phrack’s APT Down: The North Korea Files (s2w.inc)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1148
4
Weaponizing image scaling against production AI systems (blog.trailofbits.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
1149
4
Scam Farms Marque and Reprisal Authorization Act of 2025 - authorize the President to issue letters of marque and reprisal with respect to acts of aggression against the United States (www.congress.gov)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
1150
5
"Scamlexity": When Agentic AI Browsers Get Scammed (guard.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›