Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
← Înapoi la Urmăritori

Infosec.Pub - blueteamsec

infosec.pub/feeds/c/blueteamsec.xml?sort=Active
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 1 urmăritor
Articole: 75

  1. Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619 (Updated October 25) - "We have retracted our previous update from October 23."

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://unit42.paloaltonetworks.com/cve-2026-109618-cve-2026-109619/

  2. Suspected DPRK Campaign staging PHP2Shell Targeting against Global PHP infrastructure

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 4 points | 0 comments https://www.cyfirma.com/research/cyfirma-threat-advisory-suspected-dprk-campaign-staging-php2shell-targeting-against-global-php-infrastructure/

  3. UAC-0246 Hackers Masquerade as Tax Authorities and Banks to Compromise Devices

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://cip.gov.ua/en/news/misyac-kiberbezpeki-yak-khakeri-z-uac-0246-maskuyutsya-pid-podatkovu-ta-banki

  4. ABC wipes staff devices exposed to new, sophisticated cyber attack

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 4 points | 0 comments https://www.abc.net.au/news/2026-10-23/abc-staff-targeted-adfection-cyber-attack/107300806

  5. wake-and-break: Wake and Break: a PSP exploit for AMD navi31 (RX 7900) that makes the card accept unsigned IP firmware. Not persistent: a cold power cycle restores stock.

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 3 points | 0 comments https://github.com/blasty/wake-and-break

  6. CVE-2026-111497, node2shell Detection Opportunities

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://gist.github.com/Blevene/7d9d769f54826e1fe770d8c19d5ef0b2

  7. WHFB-PinCapture: This project captures the PIN by placing a CPU hardware breakpoint on the function that packages the typed PIN inside LogonUI.exe

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://github.com/ivancabrera02/WHFB-PinCapture

  8. From Boot Key to Plaintext: How Windows LSA Secrets Are Deciphered from the Registry

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 3 points | 0 comments https://hideandsec.sh/books/windows-sNL/page/from-boot-key-to-plaintext-how-windows-lsa-secrets-are-deciphered-from-the-registry/

  9. Local Shellcode Execution via SetupIterateCabinetW

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://medium.com/@s12deff/local-shellcode-execution-via-setupiteratecabinetw-f217b2970aa3

  10. Parameterized .NET memory shell generator | Red team / security testing | JMG equivalent for .NET

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://github.com/baguette168/nmg

  11. How Context Bombs derail offensive AI

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://tracebit.com/blog/context-bombs-that-misdirect-ai-attackers

  12. MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC‑0099-Sandworm collaboration

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration/

  13. WPSplinter - Broadcom’s legacy WPS Monitor implementation does not correctly constrain reassembled EAP-WPS fragments to the size of its destination buffer. A nearby attacker can hit unauthenticated

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://qkaiser.github.io/broadcom-wps/

  14. Analytics Story: PHP2Shell

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://research.splunk.com/stories/php2shell/

  15. php2shell-scanner: High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 4 points | 0 comments https://github.com/assetnote/php2shell-scanner

  16. High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://www.slcyber.io/research/high-fidelity-detection-mechanism-for-php2shell-cve-2026-109618-and-cve-2026-109619

  17. Seizing IP addresses without compromising registry neutrality

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://bindinghook.com/seizing-ip-addresses-without-compromising-registry-neutrality/

  18. Tailworm - "The design choices of the open source tailscale and headscale software have created an environment ripe for risk"

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://tailworm.com/

  19. Add `--emudhra` option to mitmproxy

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b

  20. PHP2Shell exploitation observed: packet-to-process RCE evidence

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://github.com/0x4D31/honeypot-data/blob/main/reports/php2shell/2026-10-24-confirmed-rce.md

  21. low-int-cert-monitor: Monitor Certificate Transparency logs for certificates with trivially small EC private keys (the eMudhra weak-key class). P-256/384/521.

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://github.com/glen-testing/low-int-cert-monitor

  22. CTO at NCSC Summary: week ending October 25th

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://ctoatncsc.substack.com/p/cto-at-ncsc-summary-week-ending-october-cff

  23. PHP2Shell: Obstacles to Weaponizing Likely Constrain Immediate Exploitation

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 4 points | 0 comments https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/

  24. Field Notes: Reconstructing an Attacker’s Workflow

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://dfir.ch/posts/field_note_attacker_workflow/

  25. PHP2Shell: observed exploitation attempts, 22–24 October 2026

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 3 points | 0 comments https://gist.github.com/0x4D31/6b1e7b5fb7a10219af187be91335c96f

  26. Defeating enforced SMB signing: a note

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 3 points | 0 comments https://blackfield.ch/blog/defeating-enforced-smb-signing/

  27. Signet: Mythic Code Signing Wrapper

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://github.com/Whispergate/Signet

  28. brotli-checker: Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 0 points | 0 comments https://github.com/trailofbits/brotli-checker

  29. Regexp compilation fixes related to GitLab's CVE-2026-89078, CVE-2026-93577, CVE-2026-97229 and CVE-2026-110264 | Ruby

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/

  30. Recommandations à destination des acteurs du secteur de l’énergie et de l’eau - ANSSI has been receiving numerous reports concerning the targeting of the renewable energy production and water

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://cert.cyber.gouv.fr/dur/CERTFR-2025-DUR-003/

  31. The Psychology of an AI Hacker

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 0 points | 0 comments https://arxiv.org/abs/2610.30361

  32. The PingCAP TiDB Cloud Leaks - FulcrumSec

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://fulcrumsec.vg/pingcap/

  33. GitLab Critical Patch Release: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/

  34. eMudhra to Exit global SSL/TLS Certificate Business

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 4 points | 0 comments https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business

  35. Dissecting Operation FlashHole, a complex attack by Lazarus

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 0 points | 0 comments https://securelist.com/lazarus-operation-flashhole/121541/

  36. MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC‑0099-Sandworm collaboration

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://www.welivesecurity.com/en/eset-research/mythicratatoskr-yggdrasil-enabled-backdoor-deployed-uac0099-sandworm-collaboration/

  37. New BlackX UEFI bootkit exploiting Baton Drop

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://securelist.com/uefi-bootkit-blackx/121539/

  38. MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://www.blackfog.com/darkcore-a-data-theft-rat-with-a-session-hijacking-browser/

  39. 2083191 - GoDaddy: Delayed Certificate Revocation

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://bugzilla.mozilla.org/show_bug.cgi?

  40. Chrome Now Warns Before Insecure HTTP Connections

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://blog.google/security/chrome-now-warns-before-insecure-http-connections/

  41. Protecting NetScaler Management Access from PHP CVE-2026-109618 & CVE 2026-109619

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/

  42. 【重要】[お名前.com デスクトップクラウド]第三者による不正アクセスに関するお詫びとお知らせ（2026年10月21日 4:00時点）｜[Important] Apology and Notice Regarding Unauthorized Access by a Third Party to Onamae.com Desktop Cloud (As of October 21, 2026,

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://www.onamae.com/news/article/11584

  43. PHP2Shell Patch Uptake Tracker

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 7 points | 2 comments https://php2shell-tracker.com/

  44. PHP2Shell exploitation prior to public disclosure in MadPot

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/

  45. PHP2Shell exploitation prior to public disclosure in MadPot

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/

  46. Header Accordions: QPACK amplification attacks against HTTP/3 servers

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers

  47. Security Disclosure: Wednesday October 21st | Railway Blog

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://blog.railway.com/p/security-disclosure-wednesday-october-21st

  48. eMudhra Statement on Recent Certificate Security Incident

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 2 points | 0 comments https://emudhra.com/en/post/certificate-security-incident

  49. Recent AI-Assisted Cyber Attacks in Japan: Investigating Attack Infrastructure and Techniques - JPCERT/CC Eyes

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 1 points | 0 comments https://blogs.jpcert.or.jp/en/2026/10/web_api_attacks.html

  50. AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

    (Infosec.Pub - blueteamsec)

    submitted by digicat to blueteamsec 3 points | 0 comments https://www.microsoft.com/en-us/security/blog/2026/10/21/storm-0940-uses-artex-agentic-ai-connectwise-supply-chain-compromise/