#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
We have updated https://www.valtersit.com/methodology/ with the actual information #CVE #Dokploy #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
🔵 Defending Microsoft Azure: A Blue Team Perspective
On 9. November 2024, Kristian Jacobsen will discuss the unique challenges of defending #Azure environments at BSides København.
Get insights into the attack surface, strategic logs, monitoring, and real-life incident response experiences.
🔗 Don’t miss out—get your ticket here: https://billetto.dk/en/e/bsides-kobenhavn-2024-billetter-1067567
#bsides #bsideskbh #infosec #cybersecurity #BlueTeam #logs #incidentresponse -
Good day everyone! The Microsoft Threat Intelligence team has discovered activity from a group known as #FlaxTyphoon. They are a nation-state group from China that targeted organizations in Taiwan. While the group leverages tools that are commonly used, like #ChinaChopper, #MetaSploit, and #Mimikatz, they also rely on abusing #LOLBINS, or Living-off-the-land binaries and scripts (tools that exist and come with the native operating system). Some of their TTPs include using registry key modification for persistence, using #powershell, #certutil, or #bitsadmin to download tools, and accessing #LSASS process memory and Security Account Manager registry hive for credential access. This is a great article that not only provides high-level details but it provides a starting point for any organization to start threat hunting by using the technical details provided! Enjoy your weekend and #HappyHunting!
#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #readoftheday
-
Log Parsing Cheat Sheet by Thomas Roccia
#threatintelligence #threathunting #penetrationtest #informationsecurity #cybersecurity #threatdetection #forensic #siem #soc #blueteam #soc #SOAR #threatintel #threatintelligence #incidentresponse #digitalforensics #computersecurity #cyberattack #infosec #threatreport
-
Hey #soc and #blueteam, if I have to hunt for #mimikatz executed from #cobaltstrike using #osquery, what are the tables I need to correlate? Though I figured out few events from security logs, I want to use OSQUERY logs for hunting. Any suggestions?