digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
4
Founder of One of World’s Largest Hacker Forums Resentenced to Three Years in Prison (www.justice.gov)
submitted 2 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Europol lists Spanish head of Russian cyber terrorism network among its most wanted | Sur in English (www.surinenglish.com)
submitted 2 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes (gitlab-com.gitlab.io)
submitted 2 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware (blogs.infoblox.com)
submitted 2 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm | IBM (www.ibm.com)
submitted 3 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
The Dangers of Storing Unencrypted Passwords (www.huntress.com)
submitted 11 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Autonomous Timeline Analysis and Threat Hunting | Black Hat USA talk (elie.net)
submitted 11 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Windows local privilege escalation through the bitpixie vulnerability (blog.syss.com)
submitted 13 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization – Computer Security Group (comsec.ethz.ch)
submitted 14 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
hermes-dec: A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode (github.com)
submitted 14 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
APT28 Operation Phantom Net Voxel (blog.sekoia.io)
submitted 15 hours ago by digicat to c/blueteamsec
0 comments fedilink
1
Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels (www.proofpoint.com)
submitted 15 hours ago by digicat to c/blueteamsec
0 comments fedilink
Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization in c/blueteamsec
[–] digicat 2 points 3 days ago

Thx for the share

SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/blueteamsec
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/blueteamsec
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/blueteamsec
ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities in c/blueteamsec
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild in c/blueteamsec
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities in c/blueteamsec
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 1 month ago* (last edited 1 month ago) (1 children)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 1 month ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL in c/blueteamsec
[–] digicat 1 points 1 month ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec
view more: next ›