▲ 2 r/blueteamsec
Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook
microsoft.comu/digicat — 8 hours ago
u/digicat
▲ 6 r/blueteamsec
The Dangers of Reusing Protobuf Definitions: Critical Code Execution in protobuf.js (GHSA-xq3m-2v4x-88gg)
endorlabs.comu/digicat — 1 day ago
▲ 6 r/blueteamsec
One Click(Fix) To Rule Them All, One Click(Fix) To Find Them
sakshamanand.comu/digicat — 1 day ago
▲ 2 r/blueteamsec
Analysis of RedSun: Local Privilege Escalation via Defender Remediation Abuse
coresecurity.comu/digicat — 2 days ago
▲ 2 r/blueteamsec
Silver Fox Hits Japan: ValleyRAT via Rakuten Invoice Lure with Dell MaxxAudio DLL Sideloading
intel.breakglass.techu/digicat — 2 days ago
▲ 1 r/blueteamsec
Astral_Projection: Astral Projection is a Cobalt Strike UDRL (User-Defined Reflective Loader), that preforms advanced module stomping. The UDRL loads a module using LoadLibraryExW and stomps it.
github.comu/digicat — 2 days ago
▲ 6 r/blueteamsec
Europol-supported global operation targets over 75 000 users engaged in DDoS attacks – Operation PowerOFF is a global effort aimed at dismantling criminal DDoS-for-hire infrastructure
europol.europa.euu/digicat — 3 days ago
▲ 1 r/blueteamsec
Ephemeral Leaks and Automated BGP Route Leak Detection
kentik.comu/digicat — 3 days ago
▲ 3 r/blueteamsec
ExportHider: ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.
github.comu/digicat — 3 days ago
▲ 7 r/blueteamsec
toastfix-demo: Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with ClickFix-style lure
github.comu/digicat — 3 days ago
▲ 4 r/blueteamsec
smokedmeat: A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
github.comu/digicat — 3 days ago
▲ 31 r/blueteamsec
Benchmarking Self-Hosted LLMs for Offensive Security
trustedsec.comu/digicat — 3 days ago
▲ 9 r/blueteamsec
zettelforge: Agentic memory for CTI: STIX knowledge graphs, threat actor alias resolution, offline-first RAG — MCP server for Claude Code
github.comu/digicat — 3 days ago
▲ 1 r/blueteamsec
cirro: Creating attacks paths across management and data planes
github.comu/digicat — 3 days ago
▲ 1 r/blueteamsec
Working with the automatic enablement of Windows hotpatch security updates
petervanderwoude.nlu/digicat — 3 days ago
▲ 1 r/blueteamsec
TREVEX: A Black-Box Detection Framework For Data-Flow Transient Execution Vulnerabilities
roots.ec
u/digicat — 3 days ago
▲ 5 r/blueteamsec
Beyond the breach: inside a cargo theft actor’s post-compromise playbook
proofpoint.comu/digicat — 3 days ago