Javascript is disabled. Actions will not work.

digicat

digicat@infosec.pub

digital purrr… and Reddit refugee …

2.97K Posts
29 Comments

Joined 3 years ago

Cake day: June 18th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

Beyond BITTER: MENA Civil Society Targeted in Hack-For-Hire Operation Linked to BITTER APT

www.lookout.com

0

3

Beyond BITTER: MENA Civil Society Targeted in Hack-For-Hire Operation Linked to BITTER APT

www.lookout.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

From bytecode to bytes- automated magic packet generation

blog.cloudflare.com

0

1

From bytecode to bytes- automated magic packet generation

blog.cloudflare.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

ClickFix Malware Uses macOS Script Editor to Deliver Atomic Stealer

0

4

ClickFix Malware Uses macOS Script Editor to Deliver Atomic Stealer

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

GlassWorm goes native: New Zig dropper infects every IDE on your machine

0

7

GlassWorm goes native: New Zig dropper infects every IDE on your machine

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

ChainShell: MuddyWater's Russian MaaS Link

www.jumpsec.com

0

2

ChainShell: MuddyWater's Russian MaaS Link

www.jumpsec.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

Analysis of APT-C-49 (OilRig)'s Multi-Stage Phishing Attack Campaign Using Recent Hot Topics in Iranian Society as Bait

mp.weixin.qq.com

0

3

Analysis of APT-C-49 (OilRig)'s Multi-Stage Phishing Attack Campaign Using Recent Hot Topics in Iranian Society as Bait

mp.weixin.qq.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

Joint advisory on Russian GRU exploiting vulnerable routers to steal sensitive information - Canadian Centre for Cyber Security

www.cyber.gc.ca

0

2

Joint advisory on Russian GRU exploiting vulnerable routers to steal sensitive information - Canadian Centre for Cyber Security

www.cyber.gc.ca

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 4 hours ago

Add vulnerable driver ASTRA64.sys (EnTech Taiwan / Sysinfo Lab) · Issue #294 · magicsword-io/LOLDrivers

0

2

Add vulnerable driver ASTRA64.sys (EnTech Taiwan / Sysinfo Lab) · Issue #294 · magicsword-io/LOLDrivers

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 4 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations

blog.talosintelligence.com

0

2

New Lua-based malware “LucidRook” observed in targeted attacks against Taiwanese organizations

blog.talosintelligence.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

APT28 DNS Hijack Checker

apt-28.victimology.infrawatch.com

0

2

APT28 DNS Hijack Checker

apt-28.victimology.infrawatch.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Justice Department Conducts Court-Authorized Disruption of DNS Hijacking Network Controlled by a Russian Military Intelligence Unit

www.justice.gov

0

7

Justice Department Conducts Court-Authorized Disruption of DNS Hijacking Network Controlled by a Russian Military Intelligence Unit

www.justice.gov

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Masjesu Rising: The Commercial IoT Botnet Built for Stealth, DDoS, and IoT Evasion

www.trellix.com

0

3

Masjesu Rising: The Commercial IoT Botnet Built for Stealth, DDoS, and IoT Evasion

www.trellix.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

EvilTokens: an AI-augmented Phishing-as-a-Service for automating BEC fraud - Part 2

0

3

EvilTokens: an AI-augmented Phishing-as-a-Service for automating BEC fraud - Part 2

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines

blog.talosintelligence.com

0

3

The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines

blog.talosintelligence.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

Detecting CI/CD Supply Chain Attacks with Canary Credentials

0

9

Detecting CI/CD Supply Chain Attacks with Canary Credentials

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

A Closer Look at Malicious SVG Phishing

binarydefense.com

0

4

A Closer Look at Malicious SVG Phishing

binarydefense.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

mssqlbof: A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself

0

2

mssqlbof: A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

AgentMemshell: 基于MemShellParty的Agent内存马二开，使其兼容主流操作系统，适用于在无回显命令执行场景下实现打入内存马。secondary development of an Agent memory-based malware based on MemShellParty, making it compatible with mainstream operating

0

4

AgentMemshell: 基于MemShellParty的Agent内存马二开，使其兼容主流操作系统，适用于在无回显命令执行场景下实现打入内存马。secondary development of an Agent memory-based malware based on MemShellParty, making it compatible with mainstream operating

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 12 hours ago

Argus: Reorchestrating Static Analysis via a Multi-Agent Ensemble for Full-Chain Security Vulnerability Detection

0

4

Argus: Reorchestrating Static Analysis via a Multi-Agent Ensemble for Full-Chain Security Vulnerability Detection

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 12 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 12 hours ago

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

0

5

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 12 hours ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies
link
fedilink
English
arrow-up
1·
1 month ago
deleted by creator

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Predator Spyware Bypasses iOS Recording Indicators
link
fedilink
English
arrow-up
1·
2 months ago
archive - https://archive.ph/ni8Dl

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers
link
fedilink
English
arrow-up
1·
3 months ago
GitHub repo is here: https://github.com/NasirzadehMoh/CoLog

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team.
link
fedilink
English
arrow-up
1·
3 months ago
https://mp.weixin.qq.com/s/llgko171hBvEaZ2gYbQg6A

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365
link
fedilink
English
arrow-up
1·
4 months ago
https://labs.jumpsec.com/tokenflare-serverless-AiTM-phishing-in-under-60-seconds/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack
link
fedilink
English
arrow-up
1·
4 months ago
https://github.com/cyberark/Vulnhalla

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Start using Windows Autopatch
link
fedilink
English
arrow-up
1·
5 months ago
Related - https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-autopatch-—-elevate-your-update-experience-for-modern-work/4468111

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Exclusive: Full Student Database of MOIS-Affiliated Ravin Academy Leaked
link
fedilink
English
arrow-up
1·
5 months ago
https://ravin-academy.com/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer.
link
fedilink
English
arrow-up
1·
6 months ago
Related - https://conscia.com/blog/from-seo-poisoning-to-malware-deployment-malvertising-campaign-uncovered/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Domain Fronting is Dead. Long Live Domain Fronting!
link
fedilink
English
arrow-up
2·
7 months ago
The observant observer

link
fedilink

digicat@infosec.pubMtoblueteamsec@infosec.pub•Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization
link
fedilink
English
arrow-up
2·
7 months ago
Thx for the share

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov
link
fedilink
English
arrow-up
2·
8 months ago
related - https://www.anovum.nl/media/2025/08/WHY-presentation-Synology-DSM.pdf

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive
link
fedilink
English
arrow-up
2·
8 months ago
Related Troubleshooting Deception - https://gist.github.com/f-bader/5d949fad90d700feac6ed2bf43d8092f

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•HKLM\SYSTEM\Setup\sMarTdEpLoY - The (Static) Keys to Abusing PDQ SmartDeploy
link
fedilink
English
arrow-up
1·
8 months ago
https://github.com/garrettfoster13/NotSoSmartDeploy

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions
link
fedilink
English
arrow-up
1·
8 months ago
Slides https://github.com/AmberWolfCyber/presentations/tree/main/2025

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities
link
fedilink
English
arrow-up
1·
8 months ago
Related https://www.jpcert.or.jp/english/at/2025/at250016.html

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild
link
fedilink
English
arrow-up
1·
8 months ago
itw usage - https://x.com/nextronresearch/status/1952343189148360867

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities
link
fedilink
English
arrow-up
1·
8 months ago
the report - https://info.greynoise.io/hubfs/resources/GreyNoise-Early-Warning-Signals-Attacker-Behavior-Precedes-New-Vulnerabilities-Report.pdf

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Welcome to the new home of what was /r/Blueteamsec and how it works..
link
fedilink
English
arrow-up
1·
edit-2
8 months ago
I think this might need to be @jerry

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Welcome to the new home of what was /r/Blueteamsec and how it works..
link
fedilink
English
arrow-up
1·
8 months ago
V welcome…

link
fedilink

Moderates

blueteamsec@infosec.pub