#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: https://radar.offseq.com/threat/papercut-flaws-exploited-in-ai-powered-attacks-2193db246901da9f #OffSeq #PaperCut #ZeroDay #BlueTeam
-
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2139 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2001
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2001
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2046
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2001
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2139Top Software:
Unknown - 2139Top Keyboards:
Unknown - 2139Top IP Classification:
Unknown - 2016
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 1426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 1334
165.22.57.45 - 12
80.66.83.43 - 12Top ASNs:
AS135905 - 1334
AS14061 - 26
AS396982 - 18Top Accounts:
hello - 1364
Administr - 18
Test - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 1334
DigitalOcean, LLC - 26
Google LLC - 18Top Clients:
Unknown - 1426Top Software:
Unknown - 1426Top Keyboards:
Unknown - 1426Top IP Classification:
Unknown - 1344
hosting - 80
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 713 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 667
165.22.57.45 - 6
80.66.83.43 - 6Top ASNs:
AS135905 - 667
AS14061 - 13
AS396982 - 9Top Accounts:
hello - 682
Administr - 9
Test - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 667
DigitalOcean, LLC - 13
Google LLC - 9Top Clients:
Unknown - 713Top Software:
Unknown - 713Top Keyboards:
Unknown - 713Top IP Classification:
Unknown - 672
hosting - 40
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
SafeLine : un WAF prêt à protéger vos applis web des bots malveillants https://www.it-connect.fr/safeline-waf-prise-en-main/ #Cybersécurité #BlueTeam
-
2026-09-09 RDP #Honeypot IOCs - 5919 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 3300
168.144.34.49 - 2499
80.66.83.43 - 18Top ASNs:
AS14061 - 5817
AS396982 - 42
AS216473 - 18Top Accounts:
hello - 5850
Administr - 18
Test - 6Top ISPs:
DigitalOcean, LLC - 5817
Google LLC - 42
Bashinskii Vadim Ruslanovich - 18Top Clients:
Unknown - 5919Top Software:
Unknown - 5919Top Keyboards:
Unknown - 5919Top IP Classification:
hosting - 5910
Unknown - 6
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 5919 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 3300
168.144.34.49 - 2499
80.66.83.43 - 18Top ASNs:
AS14061 - 5817
AS396982 - 42
AS216473 - 18Top Accounts:
hello - 5850
Administr - 18
Test - 6Top ISPs:
DigitalOcean, LLC - 5817
Google LLC - 42
Bashinskii Vadim Ruslanovich - 18Top Clients:
Unknown - 5919Top Software:
Unknown - 5919Top Keyboards:
Unknown - 5919Top IP Classification:
hosting - 5910
Unknown - 6
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 5919 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 3300
168.144.34.49 - 2499
80.66.83.43 - 18Top ASNs:
AS14061 - 5817
AS396982 - 42
AS216473 - 18Top Accounts:
hello - 5850
Administr - 18
Test - 6Top ISPs:
DigitalOcean, LLC - 5817
Google LLC - 42
Bashinskii Vadim Ruslanovich - 18Top Clients:
Unknown - 5919Top Software:
Unknown - 5919Top Keyboards:
Unknown - 5919Top IP Classification:
hosting - 5910
Unknown - 6
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 5919 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 3300
168.144.34.49 - 2499
80.66.83.43 - 18Top ASNs:
AS14061 - 5817
AS396982 - 42
AS216473 - 18Top Accounts:
hello - 5850
Administr - 18
Test - 6Top ISPs:
DigitalOcean, LLC - 5817
Google LLC - 42
Bashinskii Vadim Ruslanovich - 18Top Clients:
Unknown - 5919Top Software:
Unknown - 5919Top Keyboards:
Unknown - 5919Top IP Classification:
hosting - 5910
Unknown - 6
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 3946 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 2200
168.144.34.49 - 1666
80.66.83.43 - 12Top ASNs:
AS14061 - 3878
AS396982 - 28
AS216473 - 12Top Accounts:
hello - 3900
Administr - 12
Test - 4Top ISPs:
DigitalOcean, LLC - 3878
Google LLC - 28
Bashinskii Vadim Ruslanovich - 12Top Clients:
Unknown - 3946Top Software:
Unknown - 3946Top Keyboards:
Unknown - 3946Top IP Classification:
hosting - 3940
Unknown - 4
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 3946 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 2200
168.144.34.49 - 1666
80.66.83.43 - 12Top ASNs:
AS14061 - 3878
AS396982 - 28
AS216473 - 12Top Accounts:
hello - 3900
Administr - 12
Test - 4Top ISPs:
DigitalOcean, LLC - 3878
Google LLC - 28
Bashinskii Vadim Ruslanovich - 12Top Clients:
Unknown - 3946Top Software:
Unknown - 3946Top Keyboards:
Unknown - 3946Top IP Classification:
hosting - 3940
Unknown - 4
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 3946 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 2200
168.144.34.49 - 1666
80.66.83.43 - 12Top ASNs:
AS14061 - 3878
AS396982 - 28
AS216473 - 12Top Accounts:
hello - 3900
Administr - 12
Test - 4Top ISPs:
DigitalOcean, LLC - 3878
Google LLC - 28
Bashinskii Vadim Ruslanovich - 12Top Clients:
Unknown - 3946Top Software:
Unknown - 3946Top Keyboards:
Unknown - 3946Top IP Classification:
hosting - 3940
Unknown - 4
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 3946 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 2200
168.144.34.49 - 1666
80.66.83.43 - 12Top ASNs:
AS14061 - 3878
AS396982 - 28
AS216473 - 12Top Accounts:
hello - 3900
Administr - 12
Test - 4Top ISPs:
DigitalOcean, LLC - 3878
Google LLC - 28
Bashinskii Vadim Ruslanovich - 12Top Clients:
Unknown - 3946Top Software:
Unknown - 3946Top Keyboards:
Unknown - 3946Top IP Classification:
hosting - 3940
Unknown - 4
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 1973 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 1100
168.144.34.49 - 833
80.66.83.43 - 6Top ASNs:
AS14061 - 1939
AS396982 - 14
AS216473 - 6Top Accounts:
hello - 1950
Administr - 6
Test - 2Top ISPs:
DigitalOcean, LLC - 1939
Google LLC - 14
Bashinskii Vadim Ruslanovich - 6Top Clients:
Unknown - 1973Top Software:
Unknown - 1973Top Keyboards:
Unknown - 1973Top IP Classification:
hosting - 1970
Unknown - 2
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 1973 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 1100
168.144.34.49 - 833
80.66.83.43 - 6Top ASNs:
AS14061 - 1939
AS396982 - 14
AS216473 - 6Top Accounts:
hello - 1950
Administr - 6
Test - 2Top ISPs:
DigitalOcean, LLC - 1939
Google LLC - 14
Bashinskii Vadim Ruslanovich - 6Top Clients:
Unknown - 1973Top Software:
Unknown - 1973Top Keyboards:
Unknown - 1973Top IP Classification:
hosting - 1970
Unknown - 2
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 1973 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 1100
168.144.34.49 - 833
80.66.83.43 - 6Top ASNs:
AS14061 - 1939
AS396982 - 14
AS216473 - 6Top Accounts:
hello - 1950
Administr - 6
Test - 2Top ISPs:
DigitalOcean, LLC - 1939
Google LLC - 14
Bashinskii Vadim Ruslanovich - 6Top Clients:
Unknown - 1973Top Software:
Unknown - 1973Top Keyboards:
Unknown - 1973Top IP Classification:
hosting - 1970
Unknown - 2
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-09 RDP #Honeypot IOCs - 1973 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
152.42.198.23 - 1100
168.144.34.49 - 833
80.66.83.43 - 6Top ASNs:
AS14061 - 1939
AS396982 - 14
AS216473 - 6Top Accounts:
hello - 1950
Administr - 6
Test - 2Top ISPs:
DigitalOcean, LLC - 1939
Google LLC - 14
Bashinskii Vadim Ruslanovich - 6Top Clients:
Unknown - 1973Top Software:
Unknown - 1973Top Keyboards:
Unknown - 1973Top IP Classification:
hosting - 1970
Unknown - 2
hosting & proxy - 1Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.
https://denizhalil.com/2026/06/02/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
#CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil
-
Subdomain Takeover Vulnerabilities and Prevention
In this article, I cover:
* How subdomain takeover vulnerabilities occur
* Real-world exploitation scenarios
Reconnaissance and detection techniques
* Practical prevention and DNS hygiene strategieshttps://denizhalil.com/2026/02/16/subdomain-takeover-vulnerabilities-prevention/
#CyberSecurity #SubdomainTakeover #DNS #AttackSurface #BugBounty #RedTeam #BlueTeam #InfoSec #CloudSecurity #WebSecurity #EthicalHacking
-
Released v1.3.3. of #Yaralyzer, my surprisingly popular tool for visualizing YARA rule matches with colors (a lot of colors).
1. --export-png images lets you export images of the analysis
2. almost all command line options (including multi argument ones like --yara-rules-dir) can be permanently set via environment variables or .yaralyzer file
3. couple of small bug fixes and debugging related command line options
You can try it on the web here: https://yaratoolkit.securitybreak.io/
(I didn't build this website, Thomas Roccia from Microsoft just integrated Yaralyzer into his existing site)- Github: https://github.com/michelcrypt4d4mus/yaralyzer
- Pypi: https://pypi.org/project/yaralyzer/
- on macOS you can also get it with #Homebrew by installing Pdfalyzer: brew install pdfalyzer#ascii #asciiArt #blueteam #cybersecurity #detectionEngineering #DFIR #forensics #FOSS #GPL #hacking #infosec #KaliLinux #maldoc #malware #malwareAnalysis #malwareDetection #openSource #pypi #python #redteam #reverseEngineering #reversing #Threatassessment #threathunting #YARA #YARArule #YARArules
-
🔍 Web Malware Scan Results
Website: cantontx.gov
Security Verdict: LOW RISKFull analysis & details:
https://scanmalware.com/scan/c756bd93-9375-469c-8918-73c0dedbfc1e#WebAnalysis #AIinSecurity #BlueTeam #OnlineSafety #GenerativeAI
-
Used some #AI to jury rig a basic API documentation site for The Yaralyzer, my unexpectedly popular tool for visualizing and forcibly decoding #YARA matches in binary data.
* GitHub: https://github.com/michelcrypt4d4mus/yaralyzer
* PyPi: https://pypi.org/project/yaralyzer/
* API documentation: https://michelcrypt4d4mus.github.io/yaralyzer/api/
* Can also be installed (indirectly) via homebrew if you install The #Pdfalyzer (different tool)#ascii #asciiArt #blueteam #cybersecurity #detectionengineering #DFIR #forensics #FOSS #hacking #infosec #KaliLinux #malware #malwareDetection #malwareAnalysis #openSource #pdfalyzer #redteam #reverseEngineering #reversing #threathunting #yaralyze #yaralyzer #YARA #YARArule #YARArules
-
Just released version 1.16.8 of The Pdfalyzer with a bunch of new and updated #YARA rules to scan #PDF files for malicious content. Links in the quoted toot below.
https://universeodon.com/@cryptadamist/114768170683991686
#ascii #asciiArt #blueteam #cybersecurity #detectionEngineering #DFIR #forensics #FOSS #hacking #homebrew #infosec #KaliLinux #malware #malwareDetection #malwareAnalysis #openSource #pdf #pdfs #pdfalyzer #pypi #python #redteam #reverseEngineering #reversing #Threatassessment #threathunting #yaralyze #yaralyzer #YARA #YARArule #YARArules
-
just released version 1.0.1 of The Yaralyzer, my unexpectedly popular tool for visualizing and forcibly decoding #YARA matches in binary data. Fixes a small bug when trying to choose a byte offset to force a UTF-16 or UTF-32 decoding of matched bytes.
someone set up Yaralyzer as a #Kali package; not sure if that's made it into a release yet but if not the links are below.
https://universeodon.com/@cryptadamist/113642071681749608
#ascii #asciiArt #blueteam #cybersecurity #detectionengineering #DFIR #forensics #FOSS #hacking #infosec #KaliLinux #malware #malwareDetection #malwareAnalysis #openSource #pdfalyzer #redteam #reverseEngineering #reversing #threathunting #yaralyze #yaralyzer #YARA #YARArule #YARArules
-
There so many trainings and certification out there in the infosec field. This one gives a good overview. With that you can make your own training plan.
#cybersecurity #trainings #blueteam #redteam #infosec #purpleteam #career
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
Cybersecurity Week at TEDIC: A space to protect our lives in the Digital age
In a world where technology permeates every aspect of our lives, cybersecurity has become more than a protective measure; it’s a form of autonomy. From simple daily actions like safeguarding our passwords to defending digital activism against sophisticated attacks, the di
https://www.tedic.org/cybersecurity-week/
#Blog #CitizenParticipation #InformationAccess #blueteam #BTTs #cybersecurity #DigitalSecurity
-
Happy Wednesday everyone!
The Check Point Software researchers highlight a recent attack by an adversary they call #VoidManticore and the tools, TTPs, and behaviors they observed. A notable technique was the deployment of different variants of wipers that, if you analyze some of the behaviors they exhibited, could be confused with ransomware. There was the destruction of shadow copies using vssadmin and abuse bcdedit to modify the boot configuration to prevent recovery. But the added activity of removing partition information is what revealed the wiper's true identity. It is a very good read and I highly recommend it! Enjoy and Happy Hunting!
BAD KARMA, NO JUSTICE: VOID MANTICORE DESTRUCTIVE ACTIVITIES IN ISRAEL
https://research.checkpoint.com/2024/bad-karma-no-justice-void-manticore-destructive-activities-in-israel/#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday
-
#BOLO for the Top Vulnerabilities of 2022, provided by #CISA in colaboration with the #5Eyes countries. You should have #patched all of these by now, and if not - GET TO IT!! #DoNotGetHacked #CyberAwareness #CyberDefense #BlueTeam
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-215a
-
Tickets for #BSidesAugusta0xA OPENS TODAY AT NOON EST. BSidesAugusta.org/tickets (Get Tickets). #cyber #csra #AugustaGA #cybersecurity #InfoSec #blueteam #redteam #purpleteam
-
Catch up on everything cyber with this week's edition of our SOC Goulash newsletter!:
https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-373
Images which were redacted or cropped on Google Pixel devices or using the Windows Snipping Tool can be reversed and sensitive data revealed. The bug, dubbed "Acropalypse", may have been fixed but any existing images - be they bank details, nudes, or confidential company information - remain up for grabs.
#Hacktivists launched a week-long, coordinated attack on Australian banks, hospitals, airports and more, in retaliation for an offensive submission by an Australian designer at the Melbourne Fashion Festival, of all things.
The takedown of #BreachForums was made official last week, with the subsequent disarray demonstrating that continued law enforcement action is succeeding in capitalising on the mistrust inherent to the cyber crime ecosystem.
A significant vulnerability in the #WooCommerce Payments plugin can let attackers takeover #WordPress sites, and a PoC #exploit has been released publicly for a vulnerability in #Veeam's backup software.
The #blueteam had a great week, with CISA releasing a tool that helps grab #Azure, #M365 and the #Defender suite telemetry to help run ad hoc investigations; #Splunk shared an awesome defensive guide to #ADCS attacks, and we've seen a bunch of great write-ups on #IcedID, #ASyncRAT, and more!
Catch all this and much more in this week's newsletter:
https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-373
#infosec #cyber #news #cybernews #infosec #infosecnews #informationsecurity #cybersecurity #hacking #security #technology #hacker #vulnerability #vulnerabilities #malware #ransomware #dfir #soc #threatintel #threatintelligence #acropalypse #OpAustralia #darkweb #CISA
-
OffSec (tidigare Offensive Security) har släppt en ny Linux-distribution vid namn Kali Purple, läs mer här: https://kryptera.se/kali-purple-fran-offsec/
#offensivesecurity #linux #offsec #kali #cybersecurity #purpleteam #blueteaming #blueteam
-
A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv