digicat

joined 2 years ago

MODERATOR OF

1

Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure (research.checkpoint.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody (krebsonsecurity.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

SilentButDeadly: SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform (WFP). (github.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

1

Identity Management for Agentic AI by OpenID (openid.net)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

You are worker #41: Lophiid Honeypot Caught an Automated AI Attack Swarm (medium.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

1

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates (expel.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

1

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

1

Tracking Lateral Movement: PowerShell Remoting, WMIC, Explicit Credentials, NTLM Relay Attacks, Credential Theft and Reuse (Event IDs) (medium.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

1

Tracking Lateral Movement — Named Pipes, Scheduler, Services, Registry, and DCOM (Event IDs) (medium.com)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

0

Evading Elastic Security: Linux Rootkit Detection Bypass (matheuzsecurity.github.io)

submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink