Blue Team Alerts

@blueteamalerts

Гео и язык канала: Индия, Английский

Категория: Криптовалюты

Bringing the latest Blue Team news and information fresh to your Telegram inbox! 🔮
Red Teamer? Checkout @redteamalerts

Связанные каналы | Похожие каналы

Гео и язык канала

Индия, Английский

Категория

Криптовалюты

Статистика

Избранное

Фильтр публикаций

Скрывать удаленные

Скрывать репосты

Blue Team Alerts

22 Dec, 00:17

SBOM導入・運用の手引き | デジタル人材の育成 | SBOM Implementation and Operation Guide
https://ift.tt/h3IJzH9

Discuss on Reddit: https://ift.tt/VZy1aIB
@blueteamalerts

SBOM導入・運用の手引き | デジタル人材の育成 | IPA 独立行政法人情報処理推進機構

情報処理推進機構（IPA）の「SBOM導入・運用の手引き」に関する情報です。

184 0 2

Script to gather Defender logs and create a performance recording, then compress it and upload it to Azure blob storage
https://ift.tt/tl1LApJ

Discuss on Reddit: https://ift.tt/ZAkucJ1
@blueteamalerts

nathanmcnulty/DefenderForEndpoint/Performance/upload-logs-to-blob-storage.ps1 at master · nathanmcnulty/nathanmcnulty

Contribute to nathanmcnulty/nathanmcnulty development by creating an account on GitHub.

177 0 3

Blue Team Alerts

21 Dec, 09:17

Araneida Scanner: Cracked Acunetix Web App & API Scanner
https://ift.tt/toMEuvq

Discuss on Reddit: https://ift.tt/P5RY08Q
@blueteamalerts

Araneida Scanner: Silent Push Discovers Cracked Acunetix Web App & API Scanner - Silent Push

Silent Push Threat Analysts have discovered the Araneida WebApp Scanner—a cracked version of Acunetix—is being used to propagate criminal activity.

330 0 5

Blue Team Alerts

21 Dec, 08:17

United States Charges Dual Russian and Israeli National as Developer of LockBit Ransomware Group
https://ift.tt/1ax2y4N

Discuss on Reddit: https://ift.tt/a6Yy3LB
@blueteamalerts

United States Charges Dual Russian and Israeli National as Developer

A superseding criminal complaint filed in the District of New Jersey was unsealed today charging a dual Russian and Israeli national for being a developer of the LockBit ransomware group.

307 0 2

Blue Team Alerts

21 Dec, 08:17

Announcing OPA 1.0: A New Standard for Policy as Code
https://ift.tt/drka3BV

Discuss on Reddit: https://ift.tt/XRN3SWg
@blueteamalerts

Announcing OPA 1.0: A New Standard for Policy as Code

Since the project’s CNCF graduation at the start of 2021, our work has been focused on Rego’s developer experience and consistency. While…

252 0 3

Blue Team Alerts

21 Dec, 08:17

Resolved Multiple Vulnerabilities in Sophos Firewall (CVE-2024-12727, CVE-2024-12728, CVE-2024-12729)
https://ift.tt/KqhPAxU

Discuss on Reddit: https://ift.tt/2fiCFHu
@blueteamalerts

Cybersecurity as a Service Delivered | Sophos

We Deliver Superior Cybersecurity Outcomes for Real-World Organizations Worldwide with a Broad Portfolio of Advanced Security Products and Services.

230 0 2

Blue Team Alerts

21 Dec, 08:17

Using the Mach-O module in YARA-X
https://ift.tt/kbVzmS6

Discuss on Reddit: https://ift.tt/cbfBJ2G
@blueteamalerts

Using the Mach-O module in YARA-X

YARA-X now features a macho module for parsing and extracting information from Mach-O binaries which aids in writing rules and detections.

211 0 1

Blue Team Alerts

21 Dec, 08:17

LITTLELAMB.WOOLTEA: Stealthy Network Edge Device Backdoor - During an investigation we observed an active attack on a Palo Alto network firewall - Upon closer examination we identified a novel, stealthy, and advanced backdoor, which we believe is associated with LITTLELAMB.WOOLTEA
https://ift.tt/4C7sWo6

Discuss on Reddit: https://ift.tt/FEnHMPo
@blueteamalerts

203 0 4

Blue Team Alerts

21 Dec, 07:17

NSO's hacking violated the federal Computer Fraud & Abuse Act and well as Californian anti-fraud law along with being a breach of contract when it used WhatsApp to hack victims
https://ift.tt/by8HDKM

Discuss on Reddit: https://ift.tt/xJcSUHk
@blueteamalerts

196 0 0

Blue Team Alerts

21 Dec, 05:17

Malware Series: Process Injection Mapped Sections
https://ift.tt/Whi8Cgb

Discuss on Reddit: https://ift.tt/ml23bqI
@blueteamalerts

Malware Series: Process Injection Mapped Sections

221 0 5

Blue Team Alerts

21 Dec, 05:17

Where to find AWS CloudWatch Logs Datasets for Cyber Security Learning
Hi, I am looking for datasets that contain CloudWatch Logs to practice threat hunting and incident response in the Cloud. I am aware of BOTSv3 but I am looking for recent practice datasets. Splunk does not release the latest BOTSv9.Thanks

Discuss on Reddit: https://ift.tt/t0uslkx
@blueteamalerts

From the blueteamsec community on Reddit

Explore this post and more from the blueteamsec community

221 0 5 1

Blue Team Alerts

21 Dec, 04:17

Krueger: Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
https://ift.tt/MP15g6V

Discuss on Reddit: https://ift.tt/PpXb7wc
@blueteamalerts

GitHub - logangoins/Krueger: Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC

Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC - logangoins/Krueger

245 0 5

Blue Team Alerts

20 Dec, 21:17

CTO at NCSC Summary: week ending December 22nd
https://ift.tt/bsFXdI0

Discuss on Reddit: https://ift.tt/0LHXev1
@blueteamalerts

CTO at NCSC Summary: week ending December 22nd

🤶 Santa 🎅edition 🧑‍🎄

323 0 3

Blue Team Alerts

20 Dec, 11:17

WikiKit AiTM Phishing Kit: Where Links Tell Lies
https://ift.tt/t3bmc2I

Discuss on Reddit: https://ift.tt/0xFeo6K
@blueteamalerts

WikiKit AiTM Phishing Kit: Where Links Tell Lies

TRAC Labs has recently identified a phishing kit, which we have named WikiKit because of its functionality to redirect to Wikipedia …

454 0 4

Blue Team Alerts

20 Dec, 10:17

Lazarus targets nuclear-related organization with new malware
https://ift.tt/cOIzDdw

Discuss on Reddit: https://ift.tt/hLawADZ
@blueteamalerts

Lazarus targets nuclear-related organization with new malware

Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.

433 0 2

Blue Team Alerts

20 Dec, 05:17

Summiting the Pyramid: Bring the Pain with Robust and Accurate Detection
https://ift.tt/O9ceb7G

Discuss on Reddit: https://ift.tt/vyrwRSo
@blueteamalerts

Summiting the Pyramid: Bring the Pain with Robust and Accurate Detection

Written by Michaela Adams, Roman Daszczyszak, Steve Luke.

422 0 4 1

Blue Team Alerts

20 Dec, 00:17

BeyondTrust Remote Support SaaS Service Security Investigation
https://ift.tt/FHGupDx

Discuss on Reddit: https://ift.tt/tYbGoXA
@blueteamalerts

421 0 2

Blue Team Alerts

19 Dec, 23:17

Google Calendar Notifications Bypassing Email Security Policies
https://ift.tt/0yqYs1N

Discuss on Reddit: https://ift.tt/K4yOsg8
@blueteamalerts

Google Calendar Notifications Bypassing Email Security Policies - Check Point Blog

Google Calendar is a tool for organizing schedules and managing time, designed to assist individuals and businesses in planning their days efficiently.

432 0 2

Blue Team Alerts

19 Dec, 23:17

cShell DDoS Bot Attack Case Targeting Linux SSH Server (screen and hping3)
https://ift.tt/rcfLbW0

Discuss on Reddit: https://ift.tt/7gldxrA
@blueteamalerts

cShell DDoS Bot Attack Case Targeting Linux SSH Server (screen and hping3) - ASEC

AhnLab SEcurity intelligence Center (ASEC) monitors attacks against poorly managed Linux servers using multiple honeypots. Among the prominent honeypots are SSH services using weak credential information, which are targeted by numerous DDoS and CoinMiner threat actors. ASEC recently identified a n...

404 0 2