digicat@infosec.pubMEnglish · 4 days agoCTO at NCSC Summary: week ending July 12thplus-squarepinctoatncsc.substack.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkCTO at NCSC Summary: week ending July 12thplus-squarepinctoatncsc.substack.comdigicat@infosec.pubMEnglish · 4 days agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 4 months agoDaily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of postsplus-squarepinbriefing.workshop1.netexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down11
arrow-up11arrow-down1external-linkDaily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of postsplus-squarepinbriefing.workshop1.netdigicat@infosec.pubMEnglish · 4 months agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 10 hours agoTailscale: Tailscale SSH previously accepted usernames that contained a leading - character. On Linux platforms these usernames were passed as arguments to getent(1) leading to ACL bypassplus-squaretailscale.comexternal-linkmessage-square0linkfedilinkarrow-up110arrow-down10
arrow-up110arrow-down1external-linkTailscale: Tailscale SSH previously accepted usernames that contained a leading - character. On Linux platforms these usernames were passed as arguments to getent(1) leading to ACL bypassplus-squaretailscale.comdigicat@infosec.pubMEnglish · 10 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 21 hours agoSuspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countriesplus-squarehunt.ioexternal-linkmessage-square0linkfedilinkarrow-up19arrow-down11cross-posted to: blueteamsec@infosec.pub
arrow-up18arrow-down1external-linkSuspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countriesplus-squarehunt.iodigicat@infosec.pubMEnglish · 21 hours agomessage-square0linkfedilinkcross-posted to: blueteamsec@infosec.pub
digicat@infosec.pubMEnglish · 21 hours agoForgotten UEFI shims undermining Secure Bootplus-squarewww.welivesecurity.comexternal-linkmessage-square0linkfedilinkarrow-up14arrow-down10
arrow-up14arrow-down1external-linkForgotten UEFI shims undermining Secure Bootplus-squarewww.welivesecurity.comdigicat@infosec.pubMEnglish · 21 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoLegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerabilityplus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up15arrow-down10
arrow-up15arrow-down1external-linkLegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerabilityplus-squaregithub.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoPublic to be told how to prepare for cyber-attack and weather emergenciesplus-squarewww.bbc.co.ukexternal-linkmessage-square0linkfedilinkarrow-up15arrow-down10
arrow-up15arrow-down1external-linkPublic to be told how to prepare for cyber-attack and weather emergenciesplus-squarewww.bbc.co.ukdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoMiasma Worm Returns to npmplus-squareresearch.jfrog.comexternal-linkmessage-square0linkfedilinkarrow-up14arrow-down10
arrow-up14arrow-down1external-linkMiasma Worm Returns to npmplus-squareresearch.jfrog.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 22 hours agoThree Russian Nationals Indicted for International Cybercrimes Resulting in More Than $62M in Losses to Victimswww.justice.govexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkThree Russian Nationals Indicted for International Cybercrimes Resulting in More Than $62M in Losses to Victimswww.justice.govdigicat@infosec.pubMEnglish · 22 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 21 hours agoUpdate on Attacks by Threat Group APT-C-60 in 2026plus-squareblogs.jpcert.or.jpexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkUpdate on Attacks by Threat Group APT-C-60 in 2026plus-squareblogs.jpcert.or.jpdigicat@infosec.pubMEnglish · 21 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoSonicWall PSIRT has investigated multiple cases indicating the active exploitation of the vulnerabilities described in this advisory. Customers are strongly urged to upgradeplus-squarepsirt.global.sonicwall.comexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkSonicWall PSIRT has investigated multiple cases indicating the active exploitation of the vulnerabilities described in this advisory. Customers are strongly urged to upgradeplus-squarepsirt.global.sonicwall.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 21 hours agoCERT-UA Handled 3,309 Cyber Incidents in the First Half of 2026plus-squarecip.gov.uaexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkCERT-UA Handled 3,309 Cyber Incidents in the First Half of 2026plus-squarecip.gov.uadigicat@infosec.pubMEnglish · 21 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 21 hours agoMalicious GitHub Campaign: Fake "Arctic Wolf" and 290+ Brand-Impersonation Repositories Deliver BoryptGrab-Lineage Infostealerplus-squarearcticwolf.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkMalicious GitHub Campaign: Fake "Arctic Wolf" and 290+ Brand-Impersonation Repositories Deliver BoryptGrab-Lineage Infostealerplus-squarearcticwolf.comdigicat@infosec.pubMEnglish · 21 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoOAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumerationplus-squarewww.proofpoint.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkOAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumerationplus-squarewww.proofpoint.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoLucide Proxy: Turning Student Web Proxies into DDoS Botsplus-squareresearch.jfrog.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkLucide Proxy: Turning Student Web Proxies into DDoS Botsplus-squareresearch.jfrog.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoThreat Intelligence Report: The Pro-Iran Hacktivist Ecosystem 2026plus-squaredti.domaintools.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkThreat Intelligence Report: The Pro-Iran Hacktivist Ecosystem 2026plus-squaredti.domaintools.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoBurnt by Burgers: Highlighting Void Blizzard’s Russian State Linksplus-squarectrlaltintel.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkBurnt by Burgers: Highlighting Void Blizzard’s Russian State Linksplus-squarectrlaltintel.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 23 hours agoPandora’s Container Part 1: Unpacking Azure Container Securityplus-squaretrustedsec.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkPandora’s Container Part 1: Unpacking Azure Container Securityplus-squaretrustedsec.comdigicat@infosec.pubMEnglish · 23 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 2 days agoLessons from CISA’s Cyber Incidentplus-squarewww.cisa.govexternal-linkmessage-square0linkfedilinkarrow-up16arrow-down10
arrow-up16arrow-down1external-linkLessons from CISA’s Cyber Incidentplus-squarewww.cisa.govdigicat@infosec.pubMEnglish · 2 days agomessage-square0linkfedilink
