digicat@infosec.pubMEnglish · 8 days agoCTO at NCSC Summary: week ending March 1stplus-squarepinctoatncsc.substack.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkCTO at NCSC Summary: week ending March 1stplus-squarepinctoatncsc.substack.comdigicat@infosec.pubMEnglish · 8 days agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoTile’s Security Is So Bad It’s a Feature for Stalkersplus-squareblog.adafruit.comexternal-linkmessage-square0linkfedilinkarrow-up19arrow-down10
arrow-up19arrow-down1external-linkTile’s Security Is So Bad It’s a Feature for Stalkersplus-squareblog.adafruit.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoLinageOS December 2025 security issues - The project had a security problem - project private keys were visible in a publicly visible online git repository.plus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up16arrow-down10
arrow-up16arrow-down1external-linkLinageOS December 2025 security issues - The project had a security problem - project private keys were visible in a publicly visible online git repository.plus-squaregithub.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 6 hours agoQwik: Unauthenticated RCE via server$ Deserializationplus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkQwik: Unauthenticated RCE via server$ Deserializationplus-squaregithub.comdigicat@infosec.pubMEnglish · 6 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoA security audit of GotaTun is now availableplus-squaremullvad.netexternal-linkmessage-square0linkfedilinkarrow-up15arrow-down10
arrow-up15arrow-down1external-linkA security audit of GotaTun is now availableplus-squaremullvad.netdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 6 hours agoClaude Static Binary Analysis of BPFDoor Malware on Linuxplus-squaregist.github.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkClaude Static Binary Analysis of BPFDoor Malware on Linuxplus-squaregist.github.comdigicat@infosec.pubMEnglish · 6 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoAmos Stealer “malext” variant spread in a global malvertising campaign using free text-sharing websitesplus-squaregi7w0rm.medium.comexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkAmos Stealer “malext” variant spread in a global malvertising campaign using free text-sharing websitesplus-squaregi7w0rm.medium.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 6 hours agoAPT36: A Nightmare of Vibewareplus-squarebusinessinsights.bitdefender.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkAPT36: A Nightmare of Vibewareplus-squarebusinessinsights.bitdefender.comdigicat@infosec.pubMEnglish · 6 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoida-cyberchef: A Qt-based CyberChef interface designed for malware analysis workflows, particularly in IDA Proplus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkida-cyberchef: A Qt-based CyberChef interface designed for malware analysis workflows, particularly in IDA Proplus-squaregithub.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 6 hours agoTurning Almost Nothing into a Supply Chain Compromise of Angular with GitHub Actions Cache Poisoningplus-squareadnanthekhan.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkTurning Almost Nothing into a Supply Chain Compromise of Angular with GitHub Actions Cache Poisoningplus-squareadnanthekhan.comdigicat@infosec.pubMEnglish · 6 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoGetting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653)plus-squarespaceraccoon.devexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkGetting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653)plus-squarespaceraccoon.devdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoTrivy security incident 2026-03-01 · Trivy has been attacked today via GitHub Actions, along with other popular projectsplus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkTrivy security incident 2026-03-01 · Trivy has been attacked today via GitHub Actions, along with other popular projectsplus-squaregithub.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoLinux Rootkit Competition — tmp.out #5tmpout.shexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkLinux Rootkit Competition — tmp.out #5tmpout.shdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 8 hours agoReversing BEDaisy.sys: Static Analysis of BattlEye’s Kernel Anti-Cheat Driverplus-squares4dbrd.github.ioexternal-linkmessage-square0linkfedilinkarrow-up13arrow-down10
arrow-up13arrow-down1external-linkReversing BEDaisy.sys: Static Analysis of BattlEye’s Kernel Anti-Cheat Driverplus-squares4dbrd.github.iodigicat@infosec.pubMEnglish · 8 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoaarts: An Open Standard for AI Agent Runtime Safety (AARTS)plus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkaarts: An Open Standard for AI Agent Runtime Safety (AARTS)plus-squaregithub.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoMass exploitation of CVE-2026-1281 and CVE-2026-1340 in Ivanti EPMMplus-squaregithub.security.telekom.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkMass exploitation of CVE-2026-1281 and CVE-2026-1340 in Ivanti EPMMplus-squaregithub.security.telekom.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoA Threat Actor Landscape Assessment of ICS/OT Targeting in the 2026 Iran-US Conflict AND THE SCALE OF THE RISKplus-squarewww.cloudsek.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkA Threat Actor Landscape Assessment of ICS/OT Targeting in the 2026 Iran-US Conflict AND THE SCALE OF THE RISKplus-squarewww.cloudsek.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoPrivHound: A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.plus-squaregithub.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkPrivHound: A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths.plus-squaregithub.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 6 hours agoMail2Shell – CVE-2026-28289: New Zero-Click RCE On FreeScoutplus-squarewww.ox.securityexternal-linkmessage-square0linkfedilinkarrow-up11arrow-down10
arrow-up11arrow-down1external-linkMail2Shell – CVE-2026-28289: New Zero-Click RCE On FreeScoutplus-squarewww.ox.securitydigicat@infosec.pubMEnglish · 6 hours agomessage-square0linkfedilink
digicat@infosec.pubMEnglish · 7 hours agoAI as tradecraft: How threat actors operationalize AIplus-squarewww.microsoft.comexternal-linkmessage-square0linkfedilinkarrow-up12arrow-down10
arrow-up12arrow-down1external-linkAI as tradecraft: How threat actors operationalize AIplus-squarewww.microsoft.comdigicat@infosec.pubMEnglish · 7 hours agomessage-square0linkfedilink