digicat

JA4D and JA4D6: DHCP Fingerprinting (foxio.io)

ENISA Sectorial Threat Landscape - Public Administration (www.enisa.europa.eu)

Reframing Insights | Chollima Group (chollima-group.io)

WSUS 원격 코드 실행 취약점(CVE-2025-59287)을 악용한 ShadowPad 공격 사례 분석 - APT Malware Analysis of a ShadowPad attack exploiting the WSUS remote code execution vulnerability (CVE-2025-59287) (asec.ahnlab.com)

Microsoft Defender for Endpoint Internal 0x06 — Custom Collection (medium.com)

APT24's Pivot to Multi-Vector Attacks (cloud.google.com)

Custom data collection in Microsoft Defender for Endpoint - Microsoft Defender for Endpoint (learn.microsoft.com)

Autumn Dragon: China-nexus APT Group Targets South East Asia (cyberarmor.tech)

Interactive End-to-End Decompilation via Large Language Models (www.mdpi.com)

The Tsundere botnet uses the Ethereum blockchain to infect its targets (securelist.com)

SCCM Hierarchy Takeover via Entra Integration…Because of the Implication (specterops.io)

Windows: Administrator Protection RAiLaunchAdminProcess Application Name EoP (project-zero.issues.chromium.org)