digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
3
Iran‑Nexus M365 Password Spray Campaign in the Middle East (blog.checkpoint.com)
submitted 5 hours ago by digicat to c/blueteamsec
0 comments fedilink
2
Web PKI Reimagined with Merkle Tree Certificates (www.feistyduck.com)
submitted 15 hours ago by digicat to c/blueteamsec
0 comments fedilink
5
Supply Chain Attack on Axios Pulls Malicious Dependency from npm (socket.dev)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
4
Threats based on Clipboards actions (+ KQL Query) (detect.fyi)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
5
ImageMagick: From Arbitrary File Read to RCE In Every Policy (ZeroDay) (pwn.ai)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
2
CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
1
CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
1
Unwind Data Can't Sleep - Introducing InsomniacUnwinding (lorenzomeacci.com)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
5
ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime (research.checkpoint.com)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
1
Drifter: C2 traffic dressed as camera management (github.com)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
0
New widespread EvilTokens kit: device code phishing as-a-service - Part 1 (blog.sekoia.io)
submitted 1 day ago by digicat to c/blueteamsec
0 comments fedilink
4
Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2) (labs.watchtowr.com)
submitted 2 days ago by digicat to c/blueteamsec
0 comments fedilink
SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/blueteamsec
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/blueteamsec
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/blueteamsec
ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities in c/blueteamsec
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild in c/blueteamsec
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities in c/blueteamsec
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 8 months ago* (last edited 8 months ago) (1 children)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec
[–] digicat 1 points 8 months ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL in c/blueteamsec
[–] digicat 1 points 8 months ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec
view more: ‹ prev next ›