digicat

itw usage - https://x.com/nextronresearch/status/1952343189148360867

the report - https://info.greynoise.io/hubfs/resources/GreyNoise-Early-Warning-Signals-Attacker-Behavior-Precedes-New-Vulnerabilities-Report.pdf

I think this might need to be @jerry

V welcome..

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

press reporting - https://www.bleepingcomputer.com/news/security/shinyhunters-behind-salesforce-data-theft-attacks-at-qantas-allianz-life-and-lvmh/

original technical reporting - https://cloud.google.com/blog/topics/threat-intelligence/voice-phishing-data-extortion

reporting

• https://arstechnica.com/security/2025/07/how-do-hackers-get-passwords-sometimes-they-just-ask/
• https://www.ft.com/content/1ada20fd-a1ac-42b0-b577-2991095c2bbf
• https://www.reuters.com/legal/government/clorox-accuses-it-provider-lawsuit-giving-hackers-employee-passwords-2025-07-22/

Related

• https://app.grayswan.ai/arena/blog/agent-red-teaming-the-ai-jailbreak-showdown

Reporting

• https://www.malwarebytes.com/blog/news/2025/07/steam-games-abused-to-deliver-malware-once-again
• https://www.bleepingcomputer.com/news/security/hacker-sneaks-infostealer-malware-into-early-access-steam-game/

Nope, very manual and the plan is to stay here :) - I managed to keep the last community going at this rate for ~8 years.

Almost need 'Voyager link post'