digicat

joined 2 years ago
MODERATOR OF
blueteamsec
sorted by: new top controversial old
2
HP Aruba Privileged Escalation Dec 2025 (thecontractor.io)
3
Continuously hardening ChatGPT Atlas against prompt injection attacks - "However, prompt injection remains an open challenge for agent security, and one we expect to continue working on for years" (openai.com)
3
Ransomware cyber attack on Romanian Waters (www.dnsc.ro)
3
Mapping “Fly”, a threat actor with links to Russian Market’s infrastructure (www.intrinsec.com)
3
Annual Report to Congress: Military and Security Developments Involving the People's Republic of China 2025 - "Throughout 2024, PLA cyber actors almost certainly maintained and developed further" (media.defense.gov)
5
Reviving Discarded Vulnerabilities: Exploiting Previously Unexploitable Linux Kernel Bugs Through Control Metadata Fields (lujie.ac.cn)
2
PCIe IDE Standard Vulnerabilities - Potential security vulnerabilities were found to be affecting PCIe Base Specification Revision 5.0 and onwards in a protocol mechanism (pcisig.com)
6
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations (socket.dev)
4
TRM Traces Stolen Crypto from 2022 LastPass Breach — On-chain Indicators Suggest Russian Cybercriminal Involvement (www.trmlabs.com)
3
EmEditor 供应链事件细节披露：分发窃密特马席卷国内政企 - Details of the EmEditor supply chain incident revealed: Distribution of stolen MITBBS tokens sweeps across domestic government and enterprises. (mp.weixin.qq.com)
5
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs (github.com)
5
CPLDCOMTrigger: CPL remote trigger - A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. (github.com)
TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365 in c/blueteamsec@infosec.pub
Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack in c/blueteamsec@infosec.pub
wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting, in c/blueteamsec@infosec.pub
Start using Windows Autopatch in c/blueteamsec@infosec.pub
Exclusive: Full Student Database of MOIS-Affiliated Ravin Academy Leaked in c/blueteamsec@infosec.pub
Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer. in c/blueteamsec@infosec.pub
Domain Fronting is Dead. Long Live Domain Fronting! in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 2 points 3 months ago

The observant observer

Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization in c/blueteamsec@infosec.pub
[–] digicat@infosec.pub 2 points 3 months ago

Thx for the share

SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov in c/blueteamsec@infosec.pub
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive in c/blueteamsec@infosec.pub
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy in c/blueteamsec@infosec.pub
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions in c/blueteamsec@infosec.pub
view more: next ›