digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
2
Breaking Boundaries - Kubernetes Namespaces and multi-tenancy (blog.amberwolf.com)
1
Sindoor Dropper: New Phishing Campaign (www.nextron-systems.com)
2
Three Lazarus RATs coming for your cheese (blog.fox-it.com)
4
Proposals to update the Telecommunications Security Code of Practice 2022 (www.gov.uk)
2
A Primer on Forensic Investigation of Salesforce Security Incidents (www.salesforce.com)
2
CHERI Myths: I don’t need CHERI if I have safe languages (cheriot.org)
2
CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)
3
Bypassing TLS Verification on Nintendo Switch (reversing.live)
2
Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)
1
[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)
6
Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)
2
Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)
SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/[email protected]
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/[email protected]
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/[email protected]
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/[email protected]
ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities in c/[email protected]
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild in c/[email protected]
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities in c/[email protected]
Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/[email protected]
[–] [email protected] 1 points 1 month ago* (last edited 1 month ago) (1 children)

I think this might need to be @jerry

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/[email protected]
[–] [email protected] 1 points 1 month ago

V welcome..

LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL in c/[email protected]
[–] [email protected] 1 points 1 month ago

note this PR which needs integrating for the KQL to work - https://github.com/magicsword-io/LOLRMM/pull/100

Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/[email protected]
Shutting the Door on Vishing-Driven Data Theft in Salesforce - "UNC6040’s phone-phishers lure employees into approving a fake dataloader[.]io app, hijacking Salesforce APIs to siphon customer data." in c/[email protected]
view more: next ›