digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
5
Canary tokens: Learn all about the unsung heroes of security at Grafana Labs (grafana.com)
3
Uncovering Compromised Hosts using SSH Public Keys (www.usenix.org)
3
Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) (blog.amberwolf.com)
7
Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 (doublepulsar.com)
3
CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)
0
PoolFlip: A Multi-Agent Reinforcement Learning Security Environment for Cyber Defense (arxiv.org)
1
Chasing the Silver Fox: Cat & Mouse in Kernel Shadows (research.checkpoint.com)
2
Methodology for Characterizing Network Behavior of Internet of Things Devices (www.nist.gov)
8
WhatsApp - "could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability .. may have been exploited" (www.whatsapp.com)
5
Iran-Nexus Spear phishing Campaign Masquerades as Omani MFA to Target Global Governments (dreamgroup.com)
2
Cache Me If You Can (Sitecore Experience Platform Cache Poisoning to RCE) (labs.watchtowr.com)
2
Amazon disrupts watering hole campaign by Russia’s APT29 | Amazon Web Services (aws.amazon.com)
submitted 14 hours ago* (last edited 14 hours ago) by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/blueteamsec@infosec.pub
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec@infosec.pub
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/blueteamsec@infosec.pub
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/blueteamsec@infosec.pub
ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities in c/blueteamsec@infosec.pub
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild in c/blueteamsec@infosec.pub
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities in c/blueteamsec@infosec.pub
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 1 points 4 weeks ago* (last edited 4 weeks ago) (1 children)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 1 points 4 weeks ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 1 points 1 month ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec@infosec.pub
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/blueteamsec@infosec.pub
view more: next ›