digicat

digicat@infosec.pub

digital purrr… and Reddit refugee …

2.18K Posts
29 Comments

Joined 3 years ago

Cake day: June 18th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

reko: Reko is a binary decompiler.

0

3

reko: Reko is a binary decompiler.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability

0

3

gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

Quest Desktop Authority RCE | CVE-2025-67813

0

2

Quest Desktop Authority RCE | CVE-2025-67813

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

macOS Hardening: a new series

bytearchitect.io

0

2

macOS Hardening: a new series

bytearchitect.io

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

Llama-3.1-FoundationAI-SecurityLLM-8B-Reasoning (Foundation-Sec-8B-Reasoning) is an open-weight, 8-billion parameter instruction-tuned language model specialized for cybersecurity applications

0

1

Llama-3.1-FoundationAI-SecurityLLM-8B-Reasoning (Foundation-Sec-8B-Reasoning) is an open-weight, 8-billion parameter instruction-tuned language model specialized for cybersecurity applications

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Predator Spyware Bypasses iOS Recording Indicators
link
fedilink
English
arrow-up
1·
9 hours ago
archive - https://archive.ph/ni8Dl

link
fedilink

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 9 hours ago

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

notepad-plus-plus.org

0

36

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

notepad-plus-plus.org

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 9 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 19 hours ago

ConsentFix (a.k.a. AuthCodeFix): Detecting OAuth2 Authorization Code Phishing

0

1

ConsentFix (a.k.a. AuthCodeFix): Detecting OAuth2 Authorization Code Phishing

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 19 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 19 hours ago

EventHorizon: Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

0

1

EventHorizon: Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 19 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Small Open-Source Maintainers Targeted by VS Code Tasks Malware

opensourcemalware.com

0

5

Small Open-Source Maintainers Targeted by VS Code Tasks Malware

opensourcemalware.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

37 Sysmon Events. One Complete DLL Hijacking Attack. Here’s What Happened.

systemweakness.com

0

3

37 Sysmon Events. One Complete DLL Hijacking Attack. Here’s What Happened.

systemweakness.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure

0

2

Introducing SITF: The First Threat Framework Dedicated to SDLC Infrastructure

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

ShadowHS: A Fileless Linux Post‑Exploitation Framework Built on a Weaponized hackshell

0

3

ShadowHS: A Fileless Linux Post‑Exploitation Framework Built on a Weaponized hackshell

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Predator Spyware Bypasses iOS Recording Indicators

1

7

Predator Spyware Bypasses iOS Recording Indicators

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

TAMECAT - Analysis of an Iranian PowerShell-Based Backdoor

blog.pulsedive.com

0

3

TAMECAT - Analysis of an Iranian PowerShell-Based Backdoor

blog.pulsedive.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups

www.trendmicro.com

0

3

PeckBirdy: A Versatile Script Framework for LOLBins Exploitation Used by China-aligned Threat Groups

www.trendmicro.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

MacOS malware persistence 2: shell environment hijacking. Simple C example

cocomelonc.github.io

0

2

MacOS malware persistence 2: shell environment hijacking. Simple C example

cocomelonc.github.io

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Fake Clawdbot VS Code Extension Installs ScreenConnect RAT

1

3

Fake Clawdbot VS Code Extension Installs ScreenConnect RAT

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

PureRAT: Attacker Now Using AI to Build Toolset

www.security.com

0

2

PureRAT: Attacker Now Using AI to Build Toolset

www.security.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Attributive Questions in High Profile Incidents

0

2

Attributive Questions in High Profile Incidents

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

The (!FALSE) Pattern: How SOAPHound Queries Disappear Before They Hit Your Logs

www.huntress.com

0

2

The (!FALSE) Pattern: How SOAPHound Queries Disappear Before They Hit Your Logs

www.huntress.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers
link
fedilink
English
arrow-up
1·
29 days ago
GitHub repo is here: https://github.com/NasirzadehMoh/CoLog

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team.
link
fedilink
English
arrow-up
1·
1 month ago
https://mp.weixin.qq.com/s/llgko171hBvEaZ2gYbQg6A

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365
link
fedilink
English
arrow-up
1·
1 month ago
https://labs.jumpsec.com/tokenflare-serverless-AiTM-phishing-in-under-60-seconds/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack
link
fedilink
English
arrow-up
1·
2 months ago
https://github.com/cyberark/Vulnhalla

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting,
link
fedilink
English
arrow-up
1·
2 months ago
https://fcavallarin.github.io/wirebrowser/BDHS-Origin-Trace

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Start using Windows Autopatch
link
fedilink
English
arrow-up
1·
2 months ago
Related - https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-autopatch-—-elevate-your-update-experience-for-modern-work/4468111

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Exclusive: Full Student Database of MOIS-Affiliated Ravin Academy Leaked
link
fedilink
English
arrow-up
1·
3 months ago
https://ravin-academy.com/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer.
link
fedilink
English
arrow-up
1·
4 months ago
Related - https://conscia.com/blog/from-seo-poisoning-to-malware-deployment-malvertising-campaign-uncovered/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Domain Fronting is Dead. Long Live Domain Fronting!
link
fedilink
English
arrow-up
1·
4 months ago
The observant observer

link
fedilink

digicat@infosec.pubMtoblueteamsec@infosec.pub•Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization
link
fedilink
English
arrow-up
2·
5 months ago
Thx for the share

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov
link
fedilink
English
arrow-up
2·
5 months ago
related - https://www.anovum.nl/media/2025/08/WHY-presentation-Synology-DSM.pdf

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive
link
fedilink
English
arrow-up
2·
5 months ago
Related Troubleshooting Deception - https://gist.github.com/f-bader/5d949fad90d700feac6ed2bf43d8092f

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•HKLM\SYSTEM\Setup\sMarTdEpLoY - The (Static) Keys to Abusing PDQ SmartDeploy
link
fedilink
English
arrow-up
1·
6 months ago
https://github.com/garrettfoster13/NotSoSmartDeploy

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions
link
fedilink
English
arrow-up
1·
6 months ago
Slides https://github.com/AmberWolfCyber/presentations/tree/main/2025

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities
link
fedilink
English
arrow-up
1·
6 months ago
Related https://www.jpcert.or.jp/english/at/2025/at250016.html

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild
link
fedilink
English
arrow-up
1·
6 months ago
itw usage - https://x.com/nextronresearch/status/1952343189148360867

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities
link
fedilink
English
arrow-up
1·
6 months ago
the report - https://info.greynoise.io/hubfs/resources/GreyNoise-Early-Warning-Signals-Attacker-Behavior-Precedes-New-Vulnerabilities-Report.pdf

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Welcome to the new home of what was /r/Blueteamsec and how it works..
link
fedilink
English
arrow-up
1·
edit-2
6 months ago
I think this might need to be @jerry

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Welcome to the new home of what was /r/Blueteamsec and how it works..
link
fedilink
English
arrow-up
1·
6 months ago
V welcome…

link
fedilink

Moderates

blueteamsec@infosec.pub