digicat

digicat@infosec.pub

digital purrr… and Reddit refugee …

754 Posts
6 Comments

Joined 3 years ago

Cake day: June 18th, 2023

You are not logged in. If you use a Fediverse account that is able to follow users, you can follow this user.

OverviewCommentsPosts

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 1 hour ago

Phishing actors exploit complex routing and misconfigurations to spoof domains

www.microsoft.com

0

3

Phishing actors exploit complex routing and misconfigurations to spoof domains

www.microsoft.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 1 hour ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

The Mac Malware of 2025 👾

objective-see.org

0

4

The Mac Malware of 2025 👾

objective-see.org

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

Office Assistant Supply Chain Attack? Delivery of Mltab Plugin Affects Massive Number of Terminals

0

1

Office Assistant Supply Chain Attack? Delivery of Mltab Plugin Affects Massive Number of Terminals

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors

mp.weixin.qq.com

0

3

CNCERT: Risk Warning Regarding the "Black Cat" Gang's Use of Search Engines to Spread Counterfeit Notepad++ Download Remote Control Backdoors

mp.weixin.qq.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

Analyzing PHALT#BLYX: How Fake BSODs and Trusted Build Tools Are Used to Construct a Malware Infection

www.securonix.com

0

2

Analyzing PHALT#BLYX: How Fake BSODs and Trusted Build Tools Are Used to Construct a Malware Infection

www.securonix.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 14 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

100 Days of YARA 2026: Detects Windows PE files with potentially duplicated Rich headers. This is based on the fact that there can only exist unique pairs of ProdIDs and Build numbers.

0

1

100 Days of YARA 2026: Detects Windows PE files with potentially duplicated Rich headers. This is based on the fact that there can only exist unique pairs of ProdIDs and Build numbers.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

100 Days of YARA 2026: This YARA rule detects hardcoded strings which are part of Apple code-signing.

0

2

100 Days of YARA 2026: This YARA rule detects hardcoded strings which are part of Apple code-signing.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

100 Days of YARA 2026: Detects packer used with recent Oyster loader and implant.

0

1

100 Days of YARA 2026: Detects packer used with recent Oyster loader and implant.

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

100 Days of YARA 2026: Detects Windows PE files with where the XOR key is set to invalid values such as all zeros or padding or if there is a DanS marker mismatch with the XOR key

0

1

100 Days of YARA 2026: Detects Windows PE files with where the XOR key is set to invalid values such as all zeros or padding or if there is a DanS marker mismatch with the XOR key

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

IDontLikeFileLocks: Title is self explaining, well theres few methods we can do to read locked file and play with it...

0

1

IDontLikeFileLocks: Title is self explaining, well theres few methods we can do to read locked file and play with it...

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 16 hours ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

sigint-hombre: Dynamically generated Suricata rules from real-time threat feeds

0

2

sigint-hombre: Dynamically generated Suricata rules from real-time threat feeds

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

【重要】EmEditor ホームページに関する不正リンク（マルウェア）について（続報） – EmEditor (テキストエディタ) - 【Important】 About malicious links (malware) related to the EmEditor homepage (follow-up)

jp.emeditor.com

0

2

【重要】EmEditor ホームページに関する不正リンク（マルウェア）について（続報） – EmEditor (テキストエディタ) - 【Important】 About malicious links (malware) related to the EmEditor homepage (follow-up)

jp.emeditor.com

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

DbgNexum: Shellcode injection using the Windows Debugging API

0

2

DbgNexum: Shellcode injection using the Windows Debugging API

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

FsquirtCPLPoC: PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

1

2

FsquirtCPLPoC: PoC for generating bthprops.cpl module designed to be loaded by Fsquirt.exe LOLBin

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

DiaSymbolView: PDB file inspection tool

0

2

DiaSymbolView: PDB file inspection tool

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

Using ADCS to Attack HTTPS-Enabled WSUS Clients

blog.digitrace.de

1

6

Using ADCS to Attack HTTPS-Enabled WSUS Clients

blog.digitrace.de

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

1

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

More than 50% of Qilin’s "Victims" Never Get Leaked, and I Think That’s an Affiliate Verification Problem

0

2

More than 50% of Qilin’s "Victims" Never Get Leaked, and I Think That’s an Affiliate Verification Problem

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 2 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

NGSOTI: Building an Integrated Threat-Intelligence and Information Sharing Ecosystem for the Next Generation of SOC Analysts

www.misp-project.org

0

2

NGSOTI: Building an Integrated Threat-Intelligence and Information Sharing Ecosystem for the Next Generation of SOC Analysts

www.misp-project.org

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

0

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

witr: Why is this running? - Linux - It explains where a running thing came from, how it was started, and what chain of systems is responsible for it existing right now, in a single, human-readable

6

33

witr: Why is this running? - Linux - It explains where a running thing came from, how it was started, and what chain of systems is responsible for it existing right now, in a single, human-readable

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

6

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Paper page - A unified framework for detecting point and collective anomalies in operating system logs via collaborative transformers
link
fedilink
English
arrow-up
1·
3 days ago
GitHub repo is here: https://github.com/NasirzadehMoh/CoLog

link
fedilink

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

EntraAzureRBACCheck: Azure RBAC Role Assignment Audit & Drift Detection Tool

0

3

EntraAzureRBACCheck: Azure RBAC Role Assignment Audit & Drift Detection Tool

digicat@infosec.pubM to

blueteamsec@infosec.pubEnglish · 3 days ago

0

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Agentic-SOC-Simulation: AI 驱动的 SOC 仿真平台 - "integrating the DeepSeek inference model , multi-agent collaboration, and the MCP (Model Context Protocol) standard, we have built a virtual SOC team.
link
fedilink
English
arrow-up
1·
6 days ago
https://mp.weixin.qq.com/s/llgko171hBvEaZ2gYbQg6A

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365
link
fedilink
English
arrow-up
1·
15 days ago
https://labs.jumpsec.com/tokenflare-serverless-AiTM-phishing-in-under-60-seconds/

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack
link
fedilink
English
arrow-up
1·
23 days ago
https://github.com/cyberark/Vulnhalla

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting,
link
fedilink
English
arrow-up
1·
24 days ago
https://fcavallarin.github.io/wirebrowser/BDHS-Origin-Trace

link
fedilink

digicat@infosec.pubOPMtoblueteamsec@infosec.pub•Start using Windows Autopatch
link
fedilink
English
arrow-up
1·
2 months ago
Related - https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-autopatch-—-elevate-your-update-experience-for-modern-work/4468111

link
fedilink

Moderates

blueteamsec@infosec.pub