#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
2026-08-15 RDP #Honeypot IOCs - 3450 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
172.104.62.156 - 1509
155.117.13.211 - 1236
178.128.32.226 - 408Top ASNs:
AS63949 - 1515
AS16276 - 1236
AS14061 - 423Top Accounts:
hello - 3348
Domain - 21
yuobms5c - 12Top ISPs:
Akamai Technologies - 1509
OVH SAS - 1236
DigitalOcean, LLC - 423Top Clients:
Unknown - 3450Top Software:
Unknown - 3450Top Keyboards:
Unknown - 3450Top IP Classification:
hosting - 1686
Unknown - 1248
hosting & proxy - 510Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-15 RDP #Honeypot IOCs - 2300 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
172.104.62.156 - 1006
155.117.13.211 - 824
178.128.32.226 - 272Top ASNs:
AS63949 - 1010
AS16276 - 824
AS14061 - 282Top Accounts:
hello - 2232
Domain - 14
yuobms5c - 8Top ISPs:
Akamai Technologies - 1006
OVH SAS - 824
DigitalOcean, LLC - 282Top Clients:
Unknown - 2300Top Software:
Unknown - 2300Top Keyboards:
Unknown - 2300Top IP Classification:
hosting - 1124
Unknown - 832
hosting & proxy - 340Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-15 RDP #Honeypot IOCs - 1150 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
172.104.62.156 - 503
155.117.13.211 - 412
178.128.32.226 - 136Top ASNs:
AS63949 - 505
AS16276 - 412
AS14061 - 141Top Accounts:
hello - 1116
Domain - 7
yuobms5c - 4Top ISPs:
Akamai Technologies - 503
OVH SAS - 412
DigitalOcean, LLC - 141Top Clients:
Unknown - 1150Top Software:
Unknown - 1150Top Keyboards:
Unknown - 1150Top IP Classification:
hosting - 562
Unknown - 416
hosting & proxy - 170Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-14 RDP #Honeypot IOCs - 2343 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
178.128.32.226 - 1161
45.137.17.18 - 480
155.117.13.211 - 336Top ASNs:
AS14061 - 1161
AS214570 - 480
AS16276 - 336Top Accounts:
hello - 2253
Administr - 33
Test - 18Top ISPs:
DigitalOcean, LLC - 1161
PISHGAM1 - 480
OVH SAS - 336Top Clients:
Unknown - 2343Top Software:
Unknown - 2343Top Keyboards:
Unknown - 2343Top IP Classification:
hosting & proxy - 1290
Unknown - 828
hosting - 213Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-14 RDP #Honeypot IOCs - 1562 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
178.128.32.226 - 774
45.137.17.18 - 320
155.117.13.211 - 224Top ASNs:
AS14061 - 774
AS214570 - 320
AS16276 - 224Top Accounts:
hello - 1502
Administr - 22
Test - 12Top ISPs:
DigitalOcean, LLC - 774
PISHGAM1 - 320
OVH SAS - 224Top Clients:
Unknown - 1562Top Software:
Unknown - 1562Top Keyboards:
Unknown - 1562Top IP Classification:
hosting & proxy - 860
Unknown - 552
hosting - 142Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-14 RDP #Honeypot IOCs - 781 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
178.128.32.226 - 387
45.137.17.18 - 160
155.117.13.211 - 112Top ASNs:
AS14061 - 387
AS214570 - 160
AS16276 - 112Top Accounts:
hello - 751
Administr - 11
Test - 6Top ISPs:
DigitalOcean, LLC - 387
PISHGAM1 - 160
OVH SAS - 112Top Clients:
Unknown - 781Top Software:
Unknown - 781Top Keyboards:
Unknown - 781Top IP Classification:
hosting & proxy - 430
Unknown - 276
hosting - 71Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 10335 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 7467
178.128.32.226 - 1044
155.117.13.211 - 888Top ASNs:
AS24940 - 7467
AS14061 - 1044
AS16276 - 888Top Accounts:
hello - 10242
Test - 24
Administr - 12Top ISPs:
Hetzner Online GmbH - 7467
DigitalOcean, LLC - 1044
OVH SAS - 888Top Clients:
Unknown - 10335Top Software:
Unknown - 10335Top Keyboards:
Unknown - 10335Top IP Classification:
hosting - 8307
hosting & proxy - 1110
Unknown - 903Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 6890 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4978
178.128.32.226 - 696
155.117.13.211 - 592Top ASNs:
AS24940 - 4978
AS14061 - 696
AS16276 - 592Top Accounts:
hello - 6828
Test - 16
Administr - 8Top ISPs:
Hetzner Online GmbH - 4978
DigitalOcean, LLC - 696
OVH SAS - 592Top Clients:
Unknown - 6890Top Software:
Unknown - 6890Top Keyboards:
Unknown - 6890Top IP Classification:
hosting - 5538
hosting & proxy - 740
Unknown - 602Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-13 RDP #Honeypot IOCs - 3445 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2489
178.128.32.226 - 348
155.117.13.211 - 296Top ASNs:
AS24940 - 2489
AS14061 - 348
AS16276 - 296Top Accounts:
hello - 3414
Test - 8
Administr - 4Top ISPs:
Hetzner Online GmbH - 2489
DigitalOcean, LLC - 348
OVH SAS - 296Top Clients:
Unknown - 3445Top Software:
Unknown - 3445Top Keyboards:
Unknown - 3445Top IP Classification:
hosting - 2769
hosting & proxy - 370
Unknown - 301Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 3636 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2847
155.117.13.211 - 390
103.178.235.50 - 150Top ASNs:
AS24940 - 2847
AS16276 - 390
AS140810 - 150Top Accounts:
hello - 3516
Domain - 27
Test - 18Top ISPs:
Hetzner Online GmbH - 2847
OVH SAS - 390
VPSTTT - 150Top Clients:
Unknown - 3636Top Software:
Unknown - 3636Top Keyboards:
Unknown - 3636Top IP Classification:
hosting - 3072
Unknown - 393
hosting & proxy - 153Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 2424 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1898
155.117.13.211 - 260
103.178.235.50 - 100Top ASNs:
AS24940 - 1898
AS16276 - 260
AS140810 - 100Top Accounts:
hello - 2344
Domain - 18
Test - 12Top ISPs:
Hetzner Online GmbH - 1898
OVH SAS - 260
VPSTTT - 100Top Clients:
Unknown - 2424Top Software:
Unknown - 2424Top Keyboards:
Unknown - 2424Top IP Classification:
hosting - 2048
Unknown - 262
hosting & proxy - 102Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-12 RDP #Honeypot IOCs - 1212 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 949
155.117.13.211 - 130
103.178.235.50 - 50Top ASNs:
AS24940 - 949
AS16276 - 130
AS140810 - 50Top Accounts:
hello - 1172
Domain - 9
Test - 6Top ISPs:
Hetzner Online GmbH - 949
OVH SAS - 130
VPSTTT - 50Top Clients:
Unknown - 1212Top Software:
Unknown - 1212Top Keyboards:
Unknown - 1212Top IP Classification:
hosting - 1024
Unknown - 131
hosting & proxy - 51Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
We have updated https://www.valtersit.com/methodology/ with the actual information #CVE #Dokploy #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
-
We have updated https://www.valtersit.com/methodology/ with the actual information #CVE #Dokploy #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
-
Three attacks this week didn't break the network trust signals a SOC leans on. They just hid inside them.
A 633-server proxy network (CanOworms) so a state actor and a card fraudster leave through the same clean IP. Midnight Blizzard on hotel Wi-Fi captive portals serving a fake M365 login. And a PoC running code on Cloudflare's own edge.
The address tells you where traffic sits, not who's driving it.
-
Three attacks this week didn't break the network trust signals a SOC leans on. They just hid inside them.
A 633-server proxy network (CanOworms) so a state actor and a card fraudster leave through the same clean IP. Midnight Blizzard on hotel Wi-Fi captive portals serving a fake M365 login. And a PoC running code on Cloudflare's own edge.
The address tells you where traffic sits, not who's driving it.
-
RE: https://infosec.exchange/@BleepingComputer/117079181932676633
Assuming you don’t need access to the Polygon blockchain from your business network, protect your systems by block the named public RPC endpoints using DNS, NGFW or web security proxy:
polygon-bor-rpc.publicnode[.]com
polygon.drpc[.]org
polygon-pokt.nodies[.]app
polygon-rpc[.]com
1rpc[.]io
polygon.meowrpc[.]com -
RE: https://infosec.exchange/@BleepingComputer/117079181932676633
Assuming you don’t need access to the Polygon blockchain from your business network, protect your systems by block the named public RPC endpoints using DNS, NGFW or web security proxy:
polygon-bor-rpc.publicnode[.]com
polygon.drpc[.]org
polygon-pokt.nodies[.]app
polygon-rpc[.]com
1rpc[.]io
polygon.meowrpc[.]com -
2026-08-11 RDP #Honeypot IOCs - 1338 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 822
178.128.32.226 - 330
157.66.48.32 - 60Top ASNs:
AS16276 - 822
AS14061 - 360
AS150895 - 60Top Accounts:
hello - 1260
Test - 18
Administr - 9Top ISPs:
OVH SAS - 822
DigitalOcean, LLC - 360
VPSPA - 60Top Clients:
Unknown - 1338Top Software:
Unknown - 1338Top Keyboards:
Unknown - 1338Top IP Classification:
Unknown - 834
hosting & proxy - 336
hosting - 156Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-11 RDP #Honeypot IOCs - 892 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 548
178.128.32.226 - 220
157.66.48.32 - 40Top ASNs:
AS16276 - 548
AS14061 - 240
AS150895 - 40Top Accounts:
hello - 840
Test - 12
Administr - 6Top ISPs:
OVH SAS - 548
DigitalOcean, LLC - 240
VPSPA - 40Top Clients:
Unknown - 892Top Software:
Unknown - 892Top Keyboards:
Unknown - 892Top IP Classification:
Unknown - 556
hosting & proxy - 224
hosting - 104Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-11 RDP #Honeypot IOCs - 446 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 274
178.128.32.226 - 110
157.66.48.32 - 20Top ASNs:
AS16276 - 274
AS14061 - 120
AS150895 - 20Top Accounts:
hello - 420
Test - 6
Administr - 3Top ISPs:
OVH SAS - 274
DigitalOcean, LLC - 120
VPSPA - 20Top Clients:
Unknown - 446Top Software:
Unknown - 446Top Keyboards:
Unknown - 446Top IP Classification:
Unknown - 278
hosting & proxy - 112
hosting - 52Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
🛡️ HAVOC C2 — DEFENDER CHEAT SHEET
Havoc is a powerful Command & Control framework used in authorized red-team operations. 🔴⚡ Understanding how C2 infrastructure, agents and communications behave can also help defenders recognize suspicious activity and improve detection. 🔍
Learn the framework. Hunt the signals. Strengthen your defenses. 🔐
💬 Comment “HAVOC” if you want more cybersecurity cheat sheets.
-
🛡️ HAVOC C2 — DEFENDER CHEAT SHEET
Havoc is a powerful Command & Control framework used in authorized red-team operations. 🔴⚡ Understanding how C2 infrastructure, agents and communications behave can also help defenders recognize suspicious activity and improve detection. 🔍
Learn the framework. Hunt the signals. Strengthen your defenses. 🔐
💬 Comment “HAVOC” if you want more cybersecurity cheat sheets.
-
2026-08-10 RDP #Honeypot IOCs - 3084 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 1098
206.189.58.63 - 825
134.199.148.184 - 591Top ASNs:
AS14061 - 1908
AS16276 - 1098
AS396982 - 36Top Accounts:
hello - 3015
Test - 12
Domain - 9Top ISPs:
DigitalOcean, LLC - 1908
OVH SAS - 1098
Google LLC - 36Top Clients:
Unknown - 3084Top Software:
Unknown - 3084Top Keyboards:
Unknown - 3084Top IP Classification:
hosting - 1533
Unknown - 1101
hosting & proxy - 444Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-10 RDP #Honeypot IOCs - 2056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 732
206.189.58.63 - 550
134.199.148.184 - 394Top ASNs:
AS14061 - 1272
AS16276 - 732
AS396982 - 24Top Accounts:
hello - 2010
Test - 8
Domain - 6Top ISPs:
DigitalOcean, LLC - 1272
OVH SAS - 732
Google LLC - 24Top Clients:
Unknown - 2056Top Software:
Unknown - 2056Top Keyboards:
Unknown - 2056Top IP Classification:
hosting - 1022
Unknown - 734
hosting & proxy - 296Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-10 RDP #Honeypot IOCs - 1028 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 366
206.189.58.63 - 275
134.199.148.184 - 197Top ASNs:
AS14061 - 636
AS16276 - 366
AS396982 - 12Top Accounts:
hello - 1005
Test - 4
Domain - 3Top ISPs:
DigitalOcean, LLC - 636
OVH SAS - 366
Google LLC - 12Top Clients:
Unknown - 1028Top Software:
Unknown - 1028Top Keyboards:
Unknown - 1028Top IP Classification:
hosting - 511
Unknown - 367
hosting & proxy - 148Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
-
-
2026-08-09 RDP #Honeypot IOCs - 4638 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
206.189.58.63 - 2286
134.199.148.184 - 1020
155.117.13.211 - 621Top ASNs:
AS14061 - 3381
AS16276 - 621
AS8075 - 510Top Accounts:
hello - 4530
Administr - 15
eltons - 15Top ISPs:
DigitalOcean, LLC - 3381
OVH SAS - 621
Microsoft Corporation - 510Top Clients:
Unknown - 4638Top Software:
Unknown - 4638Top Keyboards:
Unknown - 4638Top IP Classification:
hosting - 3939
Unknown - 684
hosting & proxy - 15Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-09 RDP #Honeypot IOCs - 3092 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
206.189.58.63 - 1524
134.199.148.184 - 680
155.117.13.211 - 414Top ASNs:
AS14061 - 2254
AS16276 - 414
AS8075 - 340Top Accounts:
hello - 3020
Administr - 10
eltons - 10Top ISPs:
DigitalOcean, LLC - 2254
OVH SAS - 414
Microsoft Corporation - 340Top Clients:
Unknown - 3092Top Software:
Unknown - 3092Top Keyboards:
Unknown - 3092Top IP Classification:
hosting - 2626
Unknown - 456
hosting & proxy - 10Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-09 RDP #Honeypot IOCs - 1546 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
206.189.58.63 - 762
134.199.148.184 - 340
155.117.13.211 - 207Top ASNs:
AS14061 - 1127
AS16276 - 207
AS8075 - 170Top Accounts:
hello - 1510
Administr - 5
eltons - 5Top ISPs:
DigitalOcean, LLC - 1127
OVH SAS - 207
Microsoft Corporation - 170Top Clients:
Unknown - 1546Top Software:
Unknown - 1546Top Keyboards:
Unknown - 1546Top IP Classification:
hosting - 1313
Unknown - 228
hosting & proxy - 5Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
CVE-2026-15038 (CRITICAL): InfiniteWP Client <1.13.6 has improper authentication in WordPress Multisite. Allows unauthenticated takeover & potential RCE. Restrict endpoint, monitor activity, upgrade ASAP. https://radar.offseq.com/threat/cve-2026-15038-cwe-287-improper-authentication-in-infinitewp-client-58f162c29ea9006c #OffSeq #WordPress #Vuln #BlueTeam
-
2026-08-08 RDP #Honeypot IOCs - 2091 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 726
170.64.227.228 - 642
206.189.58.63 - 564Top ASNs:
AS14061 - 1236
AS16276 - 726
AS396982 - 30Top Accounts:
hello - 2007
Domain - 18
zgrab - 6Top ISPs:
DigitalOcean, LLC - 1236
OVH SAS - 726
Google LLC - 30Top Clients:
Unknown - 2091Top Software:
Unknown - 2091Top Keyboards:
Unknown - 2091Top IP Classification:
hosting - 1320
Unknown - 765
proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-08 RDP #Honeypot IOCs - 1394 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 484
170.64.227.228 - 428
206.189.58.63 - 376Top ASNs:
AS14061 - 824
AS16276 - 484
AS396982 - 20Top Accounts:
hello - 1338
Domain - 12
zgrab - 4Top ISPs:
DigitalOcean, LLC - 824
OVH SAS - 484
Google LLC - 20Top Clients:
Unknown - 1394Top Software:
Unknown - 1394Top Keyboards:
Unknown - 1394Top IP Classification:
hosting - 880
Unknown - 510
proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Sweet little investigation to a malicious infrastructure, that was initiated with two web that turns out to be a Powershell, and digging deeper into the infrastructure.
https://malwr-analysis.com/2026/08/08/investigating-a-multi-stage-powershell-loader/
-
AI is not your biggest cyber threat.
Your shitty patching process probably is.
A slightly sarcastic take on AI hype, CISOs, security theatre, broken processes, legacy IT, SOC reality and why automation changes the speed of attacks more than the nature of the problem.
https://0ut3r.space/2026/08/08/ai-is-not-your-biggest-cyber-threat/
#cybersecurity #infosec #AI #CISO #BlueTeam #RedTeam #SOC #SecurityEngineering
-
🚨 CVE-2026-48282: una semplice Path Traversal può trasformarsi in una Remote Code Execution su Adobe ColdFusion.
Nel video spiego:
🔴 cos'è RDS
🔴 perché il CVSS è 10.0
🔴 come avviene la catena di attacco
🔴 cosa controllare dopo aver applicato la patch🎥 Guarda il video:
👉 https://youtu.be/SHYU1ag3NsQ#CyberSecurity #ColdFusion #CVE202648282 #InfoSec #BlueTeam
@sicurezza -
In #cybersecurity there's always two problem sources; a perceived source, and an actual source. The two are seldom the same but the perceived source is always the easiest to blame.
-
2026-08-05 RDP #Honeypot IOCs - 29778 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
27.71.229.97 - 29670
134.199.168.195 - 30
45.142.193.18 - 12Top ASNs:
AS38731 - 29670
AS14061 - 30
AS396982 - 27Top Accounts:
hello - 29712
Test - 18
Domain - 9Top ISPs:
VIETTEL - 29670
DigitalOcean, LLC - 30
Google LLC - 27Top Clients:
Unknown - 29778Top Software:
Unknown - 29778Top Keyboards:
Unknown - 29778Top IP Classification:
Unknown - 29679
hosting - 78
proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
We still have not processed 49 hours of new #cve #cvealert data due to system update and new source connection https://www.valtersit.com/cve will become much better and after that vendors is next on the list. #defcon #devops #devsecops #sysadmin #cybersecurity #redteam #blueteam #hackers #infosec #linux #python #developers #ubuntu #ethicalhacking #ethicalhacker #angular #android
-
New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 3 - Vulnerability Scanning with Real Triage
#Cybersecurity #InfoSec #VulnerabilityManagement #BlueTeam #CybersecKyleHowTo
-
Palo: "Almost Half of Malware Samples Communicate Direct to IP"
Also Palo: "We don't understand why you want to Block-by-ASN."
https://unit42.paloaltonetworks.com/malware-bypass-dns-direct-to-ip/
-
Qu’est-ce qu’un WAF ? Principes et mise en pratique https://www.it-connect.fr/waf-web-application-firewall-debutant/ #Pourlesdébutants #Cybersécurité #BlueTeam #Web
-
Great write-up about security debt by Brent Huston.
https://stateofsecurity.com/security-debt-compounds-faster-than-technical-debt/
-
Rewriting all structure for migration from #SQLite to different database engine I know I will lose a bit speed, but it is minimal, but easier to maintain and backup + new #CVE sources will be added and additional information! #devsecops #devops #developer #sysadmin #cybersecurity #linux #python #redteam #blueteam https://www.valtersit.com CVE database will be more powerful
-
While others relax, the API development is ongoing! API V1 soon released to public #devsecops #devops #sysadmin #infosec #CVe #CVEalert #redteam #blueteam #git #github #gitlab #developer #developers #cybersecurity #ethicalhacker #ethicalhacking #linux #python #ubuntu
-
RE: https://infosec.exchange/@badsamurai/117016191874879106
This week in BS Lists, AI Meeting Notetakers, the Shadow AI that's siphoning sensitive data from your organization.
If not approved, block these in your web proxy, firewall, and SEG. You may be limited in what you can do in Teams/Zoom, but this will help deter and nerf their usability.
Upgrade to a ban-sledge with additional LinkedIn URLs. I also included some of the most common attendee formats to hunt in your SIEM.
But
notetakerwill get you real far.https://github.com/BadSamuraiDev/bs-lists/blob/main/ai-meeting-notetakers.md
-
Built a new stats dashboard for Drosera, my open-source SSH deception platform. It tracks attacker activity, services, credentials, origins, tooling, and more in real time.
⭐ https://github.com/AfterPacket/Drosera
#CyberSecurity #InfoSec #BlueTeam #Honeypot #OpenSource #Python
-
Had so many plans for today, but ended up completely re-architecting our CVE backbone instead! Prepping the pipeline for new incoming official sources (EUVD is coming!) and completely overhauled our parsing logic. Now we extract and verify Patch statuses from the sources much faster and with significantly higher precision.
#DevSecOps #CVE #devsecops #devops #developer #developers #sysadmin #cybersecurity #redteam #blueteam #git #github #gitlab #Docker #linux #python -
New by me: CybersecKyle Security How-To Series: Blue Team Fundamentals, Part 2 - macOS Baseline with Profiles and Audit Basics
-
Anyone else feel like Hugging Face is setting the bar high for Red Team / Incident Response reports? :P https://huggingface.co/blog/agent-intrusion-technical-timeline
#blueteam #redteam time to up your game, customers are going to have pretty high expectations.
-
Heh, this week wanted to launch API and more advanced data processing for CVE and Vendors https://www.valtersit.com , but sad that @hetzner doesn't have VPS available that i use :(.... Sad now I need to search different hosting provider who I can test and migrate all. #devops #devsecops #developer #CVE #sysadmin #cybersecurity #hosting #infosec #redteam #blueteam #linux #vps #python