digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
1
FBI Atlanta, Indonesian Authorities Take Down Global Phishing Network Behind Millions in Fraud Attempts | Federal Bureau of Investigation (www.fbi.gov)
1
Phantom-Evasion-Loader: a standalone, pure x64 Assembly injection engine engineered to minimize the detection surface of modern EDR/XDR solutions and Kernel-level monitors like Falco (eBPF). (github.com)
1
Abusing Overly Permissive Role in Azure File Sync (xybytes.com)
1
Signed to Kill: Reverse Engineering a 0-Day Used to Disable CrowdStrike EDR (core-jmp.org)
1
KSLDBYOVDARK: Abusing Some Defects in KSLD Ark driver (github.com)
1
One Megabyte to Root: How a Size Check Broke Docker’s Last Line of Defense - "We discovered an authorization bypass in Docker Engine (CVE-2026-34040, CVSS 8.8 High)." (www.cyera.com)
1
Kitten Had the Map all Along : RAISING GCC TENSIONS & THE PRE-POSITIONING MAP (www.cloudsek.com)
1
Inside an AI‑enabled device code phishing campaign (www.microsoft.com)
1
Bringing Rust to the Pixel Baseband (security.googleblog.com)
1
We Dumped a Live Kimsuky C2 and Recovered Every Stage of the Kill Chain: CHM Dropper, VBScript Stager, PowerShell Keylogger (intel.breakglass.tech)
1
Slithering Through the Noise - Deep Dive into the VIPERTUNNEL Python Backdoor (labs.infoguard.ch)
1
Tracking Adversaries: EvilCorp, the RansomHub affiliate (blog.bushidotoken.net)
MAD Bugs: Feeding Claude Phrack Articles for Fun and Profit in c/blueteamsec@infosec.pub
Domain Fronting is Dead. Long Live Domain Fronting! in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 0 points 6 months ago

The observant observer

Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 0 points 7 months ago

Thx for the share

SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/blueteamsec@infosec.pub
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec@infosec.pub
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 0 points 8 months ago* (last edited 8 months ago) (1 children)

I think this might need to be @jerry

Clorox versus Cognizant Complaint - Cognizant’sconduct on August 11, 2023, demonstrated spectacularly that it was failing to do so. Cognizantrepeatedly gave a cybercriminal access to Clorox’s network in c/blueteamsec@infosec.pub
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 0 points 8 months ago (1 children)

Nope, very manual and the plan is to stay here :) - I managed to keep the last community going at this rate for ~8 years.

Chinese hackers have seized control. How did we let this happen? in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 0 points 8 months ago

thanks - this will get you there - https://archive.ph/nebyw

view more: next ›