home.social

#blueteam — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.

  1. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  2. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  3. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  4. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  5. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  14. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  15. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  16. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  17. Released v1.3.3. of #Yaralyzer, my surprisingly popular tool for visualizing YARA rule matches with colors (a lot of colors).

    1. --export-png images lets you export images of the analysis

    2. almost all command line options (including multi argument ones like --yara-rules-dir) can be permanently set via environment variables or .yaralyzer file

    3. couple of small bug fixes and debugging related command line options

    You can try it on the web here: yaratoolkit.securitybreak.io/
    (I didn't build this website, Thomas Roccia from Microsoft just integrated Yaralyzer into his existing site)

    - Github: github.com/michelcrypt4d4mus/y
    - Pypi: pypi.org/project/yaralyzer/
    - on macOS you can also get it with #Homebrew by installing Pdfalyzer: brew install pdfalyzer

    #ascii #asciiArt #blueteam #cybersecurity #detectionEngineering #DFIR #forensics #FOSS #GPL #hacking #infosec #KaliLinux #maldoc #malware #malwareAnalysis #malwareDetection #openSource #pypi #python #redteam #reverseEngineering #reversing #Threatassessment #threathunting #YARA #YARArule #YARArules

  18. just released version 1.0.1 of The Yaralyzer, my unexpectedly popular tool for visualizing and forcibly decoding #YARA matches in binary data. Fixes a small bug when trying to choose a byte offset to force a UTF-16 or UTF-32 decoding of matched bytes.

    someone set up Yaralyzer as a #Kali package; not sure if that's made it into a release yet but if not the links are below.

    universeodon.com/@cryptadamist

    #ascii #asciiArt #blueteam #cybersecurity #detectionengineering #DFIR #forensics #FOSS #hacking #infosec #KaliLinux #malware #malwareDetection #malwareAnalysis #openSource #pdfalyzer #redteam #reverseEngineering #reversing #threathunting #yaralyze #yaralyzer #YARA #YARArule #YARArules