Communicating under pressure: Best practices for service providers https:// infosec.pub/post/51839606 [ https:// infosec.pub/u/digicat ] # blueteamsec
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
Communicating under pressure: Best practices for service providers https:// infosec.pub/post/51839606 [ https:// infosec.pub/u/digicat ] # blueteamsec
Prince of Persia: Detecting the Next C2 https:// infosec.pub/post/51839142 [ https:// infosec.pub/u/digicat ] # blueteamsec
Malicious Packages Served from Unauthorized Registry Server https:// infosec.pub/post/51838989 [ https:// infosec.pub/u/digicat ] # blueteamsec
Russian National Indicted For Exploiting Online Platform Used For Freelance Employment And Distributing Malware To Thousands Of Victim Users Worldwide For Financial Gain https:// infosec.pub/post/51839041 [ https:// infosec.pub/u/digicat ] # blueteamsec
CTO at NCSC Summary: week ending August 30th https:// infosec.pub/post/51619867 [ https:// infosec.pub/u/digicat ] # blueteamsec
Getting Agents to tell on themselves https:// infosec.pub/post/51847935 [ https:// infosec.pub/u/digicat ] # blueteamsec
Node.js: Old Technique Makes a Comeback https:// infosec.pub/post/51839044 [ https:// infosec.pub/u/digicat ] # blueteamsec
Simulating legitimate Active Directory services on the network: the case of GPO exploitation https:// infosec.pub/post/51886377 [ https:// infosec.pub/u/digicat ] # blueteamsec
mythic_ornn: LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles. https:// infosec.pub/post/51886322 [ https:// infosec.pub/u/digicat ] # blueteamsec
How Forza Horizon 6 Breaks Your IDA https:// infosec.pub/post/51886320 [ https:// infosec.pub/u/digicat ] # blueteamsec
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access | Microsoft Security Blog https:// infosec.pub/post/51886313 [ https:// infosec.pub/u/digicat ] # blueteamsec
Modern Adventures in Azure Privilege Escalation https:// infosec.pub/post/51886214 [ https:// infosec.pub/u/digicat ] # blueteamsec
CouchPotato: another PrivEsc potato - Patches ETW & AMSI and uses indirect syscall to abuse SeImpersonatePrivilege. https:// infosec.pub/post/51886530 [ https:// infosec.pub/u/digicat ] # blueteamsec
Malicious code executed on clone between 2026-08-29 and 2026-09-02 https:// infosec.pub/post/51887009 [ https:// infosec.pub/u/digicat ] # blueteamsec
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors https:// infosec.pub/post/51886952 [ https:// infosec.pub/u/digicat ] # blueteamsec
How to get a free .arpa domain https:// infosec.pub/post/51887169 [ https:// infosec.pub/u/digicat ] # blueteamsec
Kim Sooki again? This time, disguised as a seafood purchase request. https:// infosec.pub/post/51887165 [ https:// infosec.pub/u/digicat ] # blueteamsec
Linux Detection Engineering - Fileless Execution https:// infosec.pub/post/51887683 [ https:// infosec.pub/u/digicat ] # blueteamsec
UK Cybercrime Journal: ExfilSquad Emerges https:// infosec.pub/post/51887682 [ https:// infosec.pub/u/digicat ] # blueteamsec
pstrings: pstrings - Parallel strings extractor for very large files https:// infosec.pub/post/51887681 [ https:// infosec.pub/u/digicat ] # blueteamsec
New backdoors from Toy Ghouls https:// infosec.pub/post/51887421 [ https:// infosec.pub/u/digicat ] # blueteamsec
Password spraying campaign targets AWS root user accounts across 150+ organizations https:// infosec.pub/post/51888149 [ https:// infosec.pub/u/digicat ] # blueteamsec
Daisy-Chaining Trust: Investigating Faronics Deploy Abuse https:// infosec.pub/post/51891884 [ https:// infosec.pub/u/digicat ] # blueteamsec
New Entra role - Entra SOC Identity Responder https:// infosec.pub/post/51891828 [ https:// infosec.pub/u/digicat ] # blueteamsec
Windows 365 - Placing a Cloud PC Under Review https:// infosec.pub/post/51891923 [ https:// infosec.pub/u/digicat ] # blueteamsec