digicat

digicat@infosec.pub

digital purrr… and Reddit refugee …

3.05K Posts
30 Comments

Joined 3 years ago

Cake day: June 18th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

“Tell Them They Are a Responsible Entity, Not a Customer”: Understanding Practitioner Challenges in Sector CSIRTs

0

1

“Tell Them They Are a Responsible Entity, Not a Customer”: Understanding Practitioner Challenges in Sector CSIRTs

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise | Microsoft Security Blog

www.microsoft.com

0

1

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise | Microsoft Security Blog

www.microsoft.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

QEMU abused to evade detection and enable ransomware delivery

0

1

QEMU abused to evade detection and enable ransomware delivery

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

Smoking out an affiliate: SmokedHam, Qilin, a few Google ads and some bossware

www.orangecyberdefense.com

0

1

Smoking out an affiliate: SmokedHam, Qilin, a few Google ads and some bossware

www.orangecyberdefense.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 7 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

Understanding security warnings when opening Remote Desktop (RDP) files

learn.microsoft.com

0

2

Understanding security warnings when opening Remote Desktop (RDP) files

learn.microsoft.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

Minister: Swedish heating plant targeted by pro-Russian cyberattack

energywatch.com

0

1

Minister: Swedish heating plant targeted by pro-Russian cyberattack

energywatch.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 8 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

magika: Fast and accurate AI powered file content types detection

0

0

magika: Fast and accurate AI powered file content types detection

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Post-Sanction Persistence: Triad Nexus' Operations Infrastructure Reborn as Threat Actor Distances Activity from FUNNULL CDN

www.silentpush.com

0

1

Post-Sanction Persistence: Triad Nexus' Operations Infrastructure Reborn as Threat Actor Distances Activity from FUNNULL CDN

www.silentpush.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Chasing an Angry Spark - "A VM-obfuscated backdoor observed on a single machine in the UK, operated for one year, and vanished without a trace."

www.gendigital.com

1

11

Chasing an Angry Spark - "A VM-obfuscated backdoor observed on a single machine in the UK, operated for one year, and vanished without a trace."

www.gendigital.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk | Huntress

www.huntress.com

0

3

When PUPs Grow Fangs: Dragon Boss Solutions' $10 Supply Chain Risk | Huntress

www.huntress.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Multi-Stage Cyber Campaign Targeting Middle Eastern Critical Sectors with Tradecraft Consistent with MuddyWater

oasis-security.io

0

1

Multi-Stage Cyber Campaign Targeting Middle Eastern Critical Sectors with Tradecraft Consistent with MuddyWater

oasis-security.io

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic’s MCP - Anthropic design choice Exposes 150M+ Downloads and up to 200K Servers to complete takeover

www.ox.security

1

7

The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic’s MCP - Anthropic design choice Exposes 150M+ Downloads and up to 200K Servers to complete takeover

www.ox.security

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

MCP Supply Chain Advisory: RCE Vulnerabilities Across the AI Ecosystem

www.ox.security

0

2

MCP Supply Chain Advisory: RCE Vulnerabilities Across the AI Ecosystem

www.ox.security

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

nano-analyzer: A minimal LLM-powered zero-day vulnerability scanner

0

2

nano-analyzer: A minimal LLM-powered zero-day vulnerability scanner

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere

www.malwarebytes.com

0

7

From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere

www.malwarebytes.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise | Microsoft Security Blog

www.microsoft.com

0

2

Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise | Microsoft Security Blog

www.microsoft.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

BlueSAM: A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.

0

2

BlueSAM: A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

NIST Updates NVD Operations to Address Record CVE Growth

0

5

NIST Updates NVD Operations to Address Record CVE Growth

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 10 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

wcfproxy: A proxy for net.tcp-based WCF traffic.

0

2

wcfproxy: A proxy for net.tcp-based WCF traffic.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

BSIM explained once and for all! - Ghidra's Behavioral Similarity (BSIM)

blog.quarkslab.com

0

2

BSIM explained once and for all! - Ghidra's Behavioral Similarity (BSIM)

blog.quarkslab.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 11 hours ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•MAD Bugs: Feeding Claude Phrack Articles for Fun and Profit
link
fedilink
English
arrow-up
1·
7 days ago
https://blog.calif.io/p/mad-bugs-feeding-claude-phrack-articles

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies
link
fedilink
English
arrow-up
1·
1 month ago
deleted by creator

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Predator Spyware Bypasses iOS Recording Indicators
link
fedilink
English
arrow-up
1·
2 months ago
archive - https://archive.ph/ni8Dl

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers
link
fedilink
English
arrow-up
1·
3 months ago
GitHub repo is here: https://github.com/NasirzadehMoh/CoLog

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team.
link
fedilink
English
arrow-up
1·
4 months ago
https://mp.weixin.qq.com/s/llgko171hBvEaZ2gYbQg6A

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365
link
fedilink
English
arrow-up
1·
4 months ago
https://labs.jumpsec.com/tokenflare-serverless-AiTM-phishing-in-under-60-seconds/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack
link
fedilink
English
arrow-up
1·
4 months ago
https://github.com/cyberark/Vulnhalla

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting,
link
fedilink
English
arrow-up
1·
4 months ago
https://fcavallarin.github.io/wirebrowser/BDHS-Origin-Trace

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Start using Windows Autopatch
link
fedilink
English
arrow-up
1·
5 months ago
Related - https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-autopatch-—-elevate-your-update-experience-for-modern-work/4468111

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Exclusive: Full Student Database of MOIS-Affiliated Ravin Academy Leaked
link
fedilink
English
arrow-up
1·
6 months ago
https://ravin-academy.com/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer.
link
fedilink
English
arrow-up
1·
7 months ago
Related - https://conscia.com/blog/from-seo-poisoning-to-malware-deployment-malvertising-campaign-uncovered/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Domain Fronting is Dead. Long Live Domain Fronting!
link
fedilink
English
arrow-up
1·
7 months ago
The observant observer

link
fedilink

digicat@infosec.pubMtoblueteamsec@infosec.pub•Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization
link
fedilink
English
arrow-up
2·
7 months ago
Thx for the share

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov
link
fedilink
English
arrow-up
2·
8 months ago
related - https://www.anovum.nl/media/2025/08/WHY-presentation-Synology-DSM.pdf

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive
link
fedilink
English
arrow-up
2·
8 months ago
Related Troubleshooting Deception - https://gist.github.com/f-bader/5d949fad90d700feac6ed2bf43d8092f

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•HKLM\SYSTEM\Setup\sMarTdEpLoY - The (Static) Keys to Abusing PDQ SmartDeploy
link
fedilink
English
arrow-up
1·
8 months ago
https://github.com/garrettfoster13/NotSoSmartDeploy

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions
link
fedilink
English
arrow-up
1·
8 months ago
Slides https://github.com/AmberWolfCyber/presentations/tree/main/2025

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities
link
fedilink
English
arrow-up
1·
8 months ago
Related https://www.jpcert.or.jp/english/at/2025/at250016.html

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild
link
fedilink
English
arrow-up
1·
9 months ago
itw usage - https://x.com/nextronresearch/status/1952343189148360867

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities
link
fedilink
English
arrow-up
1·
9 months ago
the report - https://info.greynoise.io/hubfs/resources/GreyNoise-Early-Warning-Signals-Attacker-Behavior-Precedes-New-Vulnerabilities-Report.pdf

link
fedilink

Moderates

blueteamsec@infosec.pub