home.social

#blueteam — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.

  1. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  2. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  3. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  4. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  5. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  14. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  15. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  16. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  17. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  18. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  19. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  20. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  21. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  22. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  23. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  24. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  25. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  26. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  27. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  28. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  29. Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

    In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.

    denizhalil.com/2026/06/02/cve-

    #CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil

  30. Subdomain Takeover Vulnerabilities and Prevention

    In this article, I cover:
    * How subdomain takeover vulnerabilities occur
    * Real-world exploitation scenarios
    Reconnaissance and detection techniques
    * Practical prevention and DNS hygiene strategies

    denizhalil.com/2026/02/16/subd

    #CyberSecurity #SubdomainTakeover #DNS #AttackSurface #BugBounty #RedTeam #BlueTeam #InfoSec #CloudSecurity #WebSecurity #EthicalHacking

  31. Released v1.3.3. of #Yaralyzer, my surprisingly popular tool for visualizing YARA rule matches with colors (a lot of colors).

    1. --export-png images lets you export images of the analysis

    2. almost all command line options (including multi argument ones like --yara-rules-dir) can be permanently set via environment variables or .yaralyzer file

    3. couple of small bug fixes and debugging related command line options

    You can try it on the web here: yaratoolkit.securitybreak.io/
    (I didn't build this website, Thomas Roccia from Microsoft just integrated Yaralyzer into his existing site)

    - Github: github.com/michelcrypt4d4mus/y
    - Pypi: pypi.org/project/yaralyzer/
    - on macOS you can also get it with #Homebrew by installing Pdfalyzer: brew install pdfalyzer

    #ascii #asciiArt #blueteam #cybersecurity #detectionEngineering #DFIR #forensics #FOSS #GPL #hacking #infosec #KaliLinux #maldoc #malware #malwareAnalysis #malwareDetection #openSource #pypi #python #redteam #reverseEngineering #reversing #Threatassessment #threathunting #YARA #YARArule #YARArules

  32. just released version 1.0.1 of The Yaralyzer, my unexpectedly popular tool for visualizing and forcibly decoding #YARA matches in binary data. Fixes a small bug when trying to choose a byte offset to force a UTF-16 or UTF-32 decoding of matched bytes.

    someone set up Yaralyzer as a #Kali package; not sure if that's made it into a release yet but if not the links are below.

    universeodon.com/@cryptadamist

    #ascii #asciiArt #blueteam #cybersecurity #detectionengineering #DFIR #forensics #FOSS #hacking #infosec #KaliLinux #malware #malwareDetection #malwareAnalysis #openSource #pdfalyzer #redteam #reverseEngineering #reversing #threathunting #yaralyze #yaralyzer #YARA #YARArule #YARArules

  33. There so many trainings and certification out there in the infosec field. This one gives a good overview. With that you can make your own training plan.

    #cybersecurity #trainings #blueteam #redteam #infosec #purpleteam #career

    pauljerimy.com/security-certif

  34. #GammaGroup clients use

    🔎 UDP port 123 🔍

    as default #RedTeam data #exfiltration ports

    #gammagroup #finfsher #finspy #infosec #memes
    #BlueTeam
    #statesponsoredmalware ☣️🤳🐐☣️

    Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐

  35. Cybersecurity Week at TEDIC: A space to protect our lives in the Digital age

    In a world where technology permeates every aspect of our lives, cybersecurity has become more than a protective measure; it’s a form of autonomy. From simple daily actions like safeguarding our passwords to defending digital activism against sophisticated attacks, the di

    tedic.org/cybersecurity-week/

    #Blog #CitizenParticipation #InformationAccess #blueteam #BTTs #cybersecurity #DigitalSecurity

  36. Happy Wednesday everyone!

    The Check Point Software researchers highlight a recent attack by an adversary they call #VoidManticore and the tools, TTPs, and behaviors they observed. A notable technique was the deployment of different variants of wipers that, if you analyze some of the behaviors they exhibited, could be confused with ransomware. There was the destruction of shadow copies using vssadmin and abuse bcdedit to modify the boot configuration to prevent recovery. But the added activity of removing partition information is what revealed the wiper's true identity. It is a very good read and I highly recommend it! Enjoy and Happy Hunting!

    BAD KARMA, NO JUSTICE: VOID MANTICORE DESTRUCTIVE ACTIVITIES IN ISRAEL
    research.checkpoint.com/2024/b

    #CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

  37. Catch up on everything cyber with this week's edition of our SOC Goulash newsletter!:

    opalsec.substack.com/p/soc-gou

    Images which were redacted or cropped on Google Pixel devices or using the Windows Snipping Tool can be reversed and sensitive data revealed. The bug, dubbed "Acropalypse", may have been fixed but any existing images - be they bank details, nudes, or confidential company information - remain up for grabs.

    #Hacktivists launched a week-long, coordinated attack on Australian banks, hospitals, airports and more, in retaliation for an offensive submission by an Australian designer at the Melbourne Fashion Festival, of all things.

    The takedown of #BreachForums was made official last week, with the subsequent disarray demonstrating that continued law enforcement action is succeeding in capitalising on the mistrust inherent to the cyber crime ecosystem.

    A significant vulnerability in the #WooCommerce Payments plugin can let attackers takeover #WordPress sites, and a PoC #exploit has been released publicly for a vulnerability in #Veeam's backup software.

    The #blueteam had a great week, with CISA releasing a tool that helps grab #Azure, #M365 and the #Defender suite telemetry to help run ad hoc investigations; #Splunk shared an awesome defensive guide to #ADCS attacks, and we've seen a bunch of great write-ups on #IcedID, #ASyncRAT, and more!

    Catch all this and much more in this week's newsletter:

    opalsec.substack.com/p/soc-gou

    #infosec #cyber #news #cybernews #infosec #infosecnews #informationsecurity #cybersecurity #hacking #security #technology #hacker #vulnerability #vulnerabilities #malware #ransomware #dfir #soc #threatintel #threatintelligence #acropalypse #OpAustralia #darkweb #CISA

  38. A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
    Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
    Reserve your your spot!! lnkd.in/dZf-yyPv