digicat

digicat@infosec.pub

digital purrr… and Reddit refugee …

2.4K Posts
12 Comments

Joined 3 years ago

Cake day: June 18th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 58 minutes ago

Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

0

1

Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 58 minutes ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 9 hours ago

Tailscale: Tailscale SSH previously accepted usernames that contained a leading - character. On Linux platforms these usernames were passed as arguments to getent(1) leading to ACL bypass

0

10

Tailscale: Tailscale SSH previously accepted usernames that contained a leading - character. On Linux platforms these usernames were passed as arguments to getent(1) leading to ACL bypass

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 9 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

Update on Attacks by Threat Group APT-C-60 in 2026

blogs.jpcert.or.jp

0

2

Update on Attacks by Threat Group APT-C-60 in 2026

blogs.jpcert.or.jp

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

CERT-UA Handled 3,309 Cyber Incidents in the First Half of 2026

0

2

CERT-UA Handled 3,309 Cyber Incidents in the First Half of 2026

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

Malicious GitHub Campaign: Fake "Arctic Wolf" and 290+ Brand-Impersonation Repositories Deliver BoryptGrab-Lineage Infostealer

0

2

Malicious GitHub Campaign: Fake "Arctic Wolf" and 290+ Brand-Impersonation Repositories Deliver BoryptGrab-Lineage Infostealer

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

Forgotten UEFI shims undermining Secure Boot

www.welivesecurity.com

0

4

Forgotten UEFI shims undermining Secure Boot

www.welivesecurity.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

0

8

Suspected Chinese Operators Use Claude Code and DeepSeek to Breach Government Systems Across Four Countries

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

Three Russian Nationals Indicted for International Cybercrimes Resulting in More Than $62M in Losses to Victims

www.justice.gov

0

3

Three Russian Nationals Indicted for International Cybercrimes Resulting in More Than $62M in Losses to Victims

www.justice.gov

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 21 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 22 hours ago

OAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration

www.proofpoint.com

0

2

OAuth Client ID Spoofing: Why Fake Client IDs Are Gaining Traction for Stealthy Enumeration

www.proofpoint.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 22 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability

0

5

LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Lucide Proxy: Turning Student Web Proxies into DDoS Bots

research.jfrog.com

0

2

Lucide Proxy: Turning Student Web Proxies into DDoS Bots

research.jfrog.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Miasma Worm Returns to npm

research.jfrog.com

0

4

Miasma Worm Returns to npm

research.jfrog.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

SonicWall PSIRT has investigated multiple cases indicating the active exploitation of the vulnerabilities described in this advisory. Customers are strongly urged to upgrade

psirt.global.sonicwall.com

0

3

SonicWall PSIRT has investigated multiple cases indicating the active exploitation of the vulnerabilities described in this advisory. Customers are strongly urged to upgrade

psirt.global.sonicwall.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Threat Intelligence Report: The Pro-Iran Hacktivist Ecosystem 2026

dti.domaintools.com

0

2

Threat Intelligence Report: The Pro-Iran Hacktivist Ecosystem 2026

dti.domaintools.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Burnt by Burgers: Highlighting Void Blizzard’s Russian State Links

ctrlaltintel.com

0

2

Burnt by Burgers: Highlighting Void Blizzard’s Russian State Links

ctrlaltintel.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Public to be told how to prepare for cyber-attack and weather emergencies

0

5

Public to be told how to prepare for cyber-attack and weather emergencies

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

Pandora’s Container Part 1: Unpacking Azure Container Security

0

2

Pandora’s Container Part 1: Unpacking Azure Container Security

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 23 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

Lessons from CISA’s Cyber Incident

0

6

Lessons from CISA’s Cyber Incident

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

jscrambler npm Package Compromised in Supply Chain Attack

0

2

jscrambler npm Package Compromised in Supply Chain Attack

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

chimera: Sandbox untrusted code with safe access to the host.

0

2

chimera: Sandbox untrusted code with safe access to the host.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•CTO at NCSC Summary: week ending June 28th
link
fedilink
English
arrow-up
1·
17 days ago
No idea - the link is - https://ctoatncsc.substack.com/p/cto-at-ncsc-summary-week-ending-june-9ec

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•VSMEx: A Collection Tool and a Dataset of Malicious VS Code Extensions: Data/Toolset Paper
link
fedilink
English
arrow-up
1·
28 days ago
https://github.com/kalachkar/vsmex

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•ssh-keysign-pwn: Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.
link
fedilink
English
arrow-up
1·
2 months ago
mitigations discussion: https://www.openwall.com/lists/oss-security/2026/05/15/3

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic Malware Analysis: From Task Automation to Deep Analysis
link
fedilink
English
arrow-up
1·
2 months ago
Recording: https://www.youtube.com/watch?v=azej1P17w9E

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•SSH honeypot for 54daya saw 28 human operators
link
fedilink
English
arrow-up
1·
3 months ago
yep, still working

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•toastfix-demo: Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with ClickFix-style lure
link
fedilink
English
arrow-up
1·
3 months ago
https://0xh4lpy.medium.com/toastfix-chaining-a-clickfix-attack-with-toast-notifications-72082694fef9

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•smokedmeat: A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
link
fedilink
English
arrow-up
1·
3 months ago
https://labs.boostsecurity.io/articles/introducing-smokedmeat/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•MAD Bugs: Feeding Claude Phrack Articles for Fun and Profit
link
fedilink
English
arrow-up
2·
3 months ago
https://blog.calif.io/p/mad-bugs-feeding-claude-phrack-articles

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•jailer: Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies
link
fedilink
English
arrow-up
1·
4 months ago
deleted by creator

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Predator Spyware Bypasses iOS Recording Indicators
link
fedilink
English
arrow-up
1·
5 months ago
archive - https://archive.ph/ni8Dl

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers
link
fedilink
English
arrow-up
1·
6 months ago
GitHub repo is here: https://github.com/NasirzadehMoh/CoLog

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team.
link
fedilink
English
arrow-up
1·
7 months ago
https://mp.weixin.qq.com/s/llgko171hBvEaZ2gYbQg6A

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365
link
fedilink
English
arrow-up
1·
7 months ago
https://labs.jumpsec.com/tokenflare-serverless-AiTM-phishing-in-under-60-seconds/

link
fedilink

Moderates

blueteamsec@infosec.pub