#blueteam

Kushal Mankar @kmankarjr19@infosec.exchange

· 3d ago

Hi everyone! 👋 I'm Kushal, a cybersecurity student working toward a SOC analyst role. I built Intel60 (https://intel60.app) every 30 min it turns news from 8 security outlets + CISA KEV into 60-word, severity-rated briefs with CVSS, EPSS and "actively exploited" tags. Free, no sign-up, no ads. Here to learn from the blue team community. Feedback very welcome! #introduction #infosec #cybersecurity #blueteam #threatintel #SOC

intel60.app

Intel60: Cybersecurity news in 60 words

Severity-rated security briefs from 8 trusted sources, updated every 30 minutes, with CVSS, EPSS and actively-exploited tags.

0

1

0

Trinacriatech @trinacriatech@cyberplace.social

· 2w ago

Boosted by @welcome@friends.deko.cloud

Ciao fediverso! Siamo TrinacriaTech, community cybersecurity nata in Sicilia: vendor-neutral, fatta da chi lavora sul campo (SOC, IR, CTI, red e blue team). Qui trovi ogni giorno una notizia cyber verificata su due fonti, il lunedì una pillola di detection pronta da usare e il venerdì il punto sulla minaccia in Italia. Meetup a Palermo, conferenza nel 2027. #introduction #presentazione #infosec #cybersecurity #blueteam

0

1

0

Solomon Neas @solomonneas@infosec.exchange

· 2w ago

Boosted by @welcome@friends.deko.cloud

#introduction, round two. I'm Solomon: retired chef, network and systems engineer, CySA+, finishing an M.S. in cybersecurity at USF. I build Brigade, open-source tooling that keeps AI coding agents honest: verified runs with signed exit codes, a code graph agents check before editing, and an evidence log of what they did. I also run a homelab SOC on Wazuh, TheHive, and MISP. Here for blue team, agent security, and homelabs. https://brigade.tools #infosec #blueteam #aisecurity #homelab

Brigade - trackable work for coding-agent fleets

brigade.tools

Brigade - trackable work for coding-agent fleets

Track coding-agent tasks, receipts, shared memory, and synced tools across tools, repos, and sessions. Local files. No required daemon.

0

1

0

B'ad Samurai

@badsamurai@infosec.exchange

· 4w ago

Happy #ICANN Reveal Fresh Hell Day! A company in the Caymans would like the TLD .pdf And these other spectacular submissions that surely won't end poorly: .sys .key .duo .lab .private .state .auth .conf .config .loc .log .php .url .vpn #DNS #RevealDay #blueTeam #tld

466

49

422

0

CyRay @CyRay@infosec.exchange

· 1mo ago

Can your SOC see a scheduled task being created? 🕵️‍♂️ schtasks /create is persistence in one built-in command, and a normal user can run it without admin rights. Safe test for a box you own: create a task that only exits, check your alerts, delete it. Caveat: a task registered from an XML file or via the Task Scheduler API is a quieter path some rules miss. Test and the Sigma rule here: https://cyray.io/test-your-soc/scheduled-task-creation #BlueTeam #DetectionEngineering #SOC #ThreatHunting #SigmaRules

cyray.io

CyRay - AI-Powered SIEM/SOC Platform

The world's first autonomous threat detection mastermind. 6000+ rules, live in 48 hours.

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-26 RDP #Honeypot IOCs - 366 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 66.163.119.35 - 240 104.64.217.122 - 30 165.22.190.202 - 18 Top ASNs: AS63023 - 240 AS63949 - 45 AS396982 - 36 Top Accounts: hello - 300 rg5hhbrn - 12 Administr - 9 Top ISPs: GTHost - 240 Google LLC - 36 Akamai Technologies, Inc. - 33 Top Clients: Unknown - 366 Top Software: Unknown - 366 Top Keyboards: Unknown - 366 Top IP Classification: Unknown - 243 hosting - 114 hosting & proxy - 9 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

1

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-23 RDP #Honeypot IOCs - 216 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 20.51.184.62 - 39 104.64.217.122 - 27 80.66.83.43 - 18 Top ASNs: AS8075 - 39 AS396982 - 36 AS63949 - 36 Top Accounts: hello - 84 Administr - 24 (empty) - 21 Top ISPs: Microsoft Corporation - 39 Google LLC - 36 Akamai Technologies, Inc. - 36 Top Clients: Unknown - 216 Top Software: Unknown - 216 Top Keyboards: Unknown - 216 Top IP Classification: hosting - 195 Unknown - 9 hosting & proxy - 6 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

Bug404Found @bug404found@infosec.exchange

· 1mo ago

IDS evasion often starts with traffic analysis. If your detection only watches signatures, attackers blend in with jitter, fragmentation, and protocol tunneling. Tip: baseline east-west flows, not just perimeter. Lateral movement hides in normal SMB/RDP. Practical labs: bug404found https://bug404found.com/?utm_source=mastodon&utm_medium=social&utm_campaign=awareness&utm_content=en #cybersec #infosec #security #netsec #threatdetection #blueteam

bug404found.com

Bug404found?= — Cybersécurité & IA

Labs 3D pour prouver tes compétences cyber/dev et te connecter aux entreprises, + audit de sécurité et développement IA automatisés pour PME/ETI.

1

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-19 RDP #Honeypot IOCs - 183 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 104.64.217.122 - 30 118.69.191.219 - 24 165.22.190.202 - 18 Top ASNs: AS396982 - 48 AS63949 - 36 AS18403 - 24 Top Accounts: hello - 78 Administr - 21 ident - 18 Top ISPs: Google LLC - 48 Akamai Technologies, Inc. - 36 Vietnam Internet Network Information Center - 24 Top Clients: Unknown - 183 Top Software: Unknown - 183 Top Keyboards: Unknown - 183 Top IP Classification: hosting - 120 Unknown - 39 proxy - 18 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-18 RDP #Honeypot IOCs - 756 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 134.209.180.117 - 510 104.64.217.122 - 87 118.69.191.219 - 42 Top ASNs: AS14061 - 510 AS63949 - 90 AS18403 - 42 Top Accounts: hello - 642 Administr - 18 ident - 18 Top ISPs: DigitalOcean, LLC - 510 Akamai Technologies, Inc. - 90 Vietnam Internet Network Information Center - 42 Top Clients: Unknown - 756 Top Software: Unknown - 756 Top Keyboards: Unknown - 756 Top IP Classification: hosting - 684 Unknown - 48 proxy - 18 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-15 RDP #Honeypot IOCs - 2343 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 147.182.250.28 - 2263 104.64.217.122 - 10 80.66.83.43 - 6 Top ASNs: AS14061 - 2270 AS63949 - 15 AS4766 - 13 Top Accounts: hello - 2298 142.93.8.59 - 11 anonymous - 7 Top ISPs: DigitalOcean, LLC - 2270 Akamai Technologies, Inc. - 15 Korea Telecom - 13 Top Clients: Unknown - 2343 Top Software: Unknown - 2343 Top Keyboards: Unknown - 2343 Top IP Classification: hosting - 2317 Unknown - 18 hosting & proxy - 4 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

BSidesLuxembourg @BSidesLuxembourg@infosec.exchange

· 1mo ago

#BSidesLuxembourg2026 recording:“OpenTide: From Raw Intelligence to Structured Threat-Informed Detections” – Remi Seguy Watch 's session, recorded live at the Digital Learning Hub during BSides Luxembourg 2026. Find all the talks from this track/village here: https://archive.org/details/BSidesLuxembourg2026/d1+t2+05+OpenTide%3A+From+Raw+Intelligence+To+Structured+Threat-Informed+Detections+-+Remi+Seguy.mkv #BSidesLuxembourg2026 #ThreatIntelligence #DetectionEngineering #CTI #OpenSource #BlueTeam

archive.org

BSides Luxembourg 2026 : Free Download, Borrow, and Streaming : Internet Archive

These are the recordings of the BSides Luxembourg 2026 computer security conference, held on 7 and 8 may at the offices of the Digital Learning Hub in Belval...

3

0

2

0

OffSequence @offseq@infosec.exchange

· 1mo ago

Cisco Secure Email Gateway faces a CRITICAL zero-day vulnerability, actively exploited in the wild. No CVE or version info yet. Patch available — apply ASAP to protect email infrastructure. https://radar.offseq.com/threat/cisco-patches-secure-email-gateway-zero-day-exploited-in-attacks-76a43690673247c4 #OffSeq #Cisco #ZeroDay #BlueTeam #EmailSecurity

radar.offseq.com

Cisco patches Secure Email Gateway zero-day exploited in… | Threat Radar

Vulnerability: Cisco warned customers to patch a critical Secure Email Gateway zero-day security flaw that threat actors have been exploiting in attacks. [...]

0

Simon Roses Femerling @simonroses@infosec.exchange

· 1mo ago

New Bytes Revealer AI-assisted reverse engineering feature is really cool. Supports frontier and local models. Will be a game changer for blue/red work, just saying 😊 #AI #reversing #cybersecurity #blueteam #redteam Coming soon!

bytesrevealer.online

VULNEX -Bytes Revealer-

1

0

2

0

RDP Snitch @rdpsnitch@infosec.exchange

· 1mo ago

2026-09-09 RDP #Honeypot IOCs - 3946 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 152.42.198.23 - 2200 168.144.34.49 - 1666 80.66.83.43 - 12 Top ASNs: AS14061 - 3878 AS396982 - 28 AS216473 - 12 Top Accounts: hello - 3900 Administr - 12 Test - 4 Top ISPs: DigitalOcean, LLC - 3878 Google LLC - 28 Bashinskii Vadim Ruslanovich - 12 Top Clients: Unknown - 3946 Top Software: Unknown - 3946 Top Keyboards: Unknown - 3946 Top IP Classification: hosting - 3940 Unknown - 4 hosting & proxy - 2 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

RDP Snitch @rdpsnitch@infosec.exchange

· 2mo ago

2026-08-08 RDP #Honeypot IOCs - 2091 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 155.117.13.211 - 726 170.64.227.228 - 642 206.189.58.63 - 564 Top ASNs: AS14061 - 1236 AS16276 - 726 AS396982 - 30 Top Accounts: hello - 2007 Domain - 18 zgrab - 6 Top ISPs: DigitalOcean, LLC - 1236 OVH SAS - 726 Google LLC - 30 Top Clients: Unknown - 2091 Top Software: Unknown - 2091 Top Keyboards: Unknown - 2091 Top IP Classification: hosting - 1320 Unknown - 765 proxy - 6 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

RDP Snitch @rdpsnitch@infosec.exchange

· 2mo ago

2026-08-08 RDP #Honeypot IOCs - 1394 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 155.117.13.211 - 484 170.64.227.228 - 428 206.189.58.63 - 376 Top ASNs: AS14061 - 824 AS16276 - 484 AS396982 - 20 Top Accounts: hello - 1338 Domain - 12 zgrab - 4 Top ISPs: DigitalOcean, LLC - 824 OVH SAS - 484 Google LLC - 20 Top Clients: Unknown - 1394 Top Software: Unknown - 1394 Top Keyboards: Unknown - 1394 Top IP Classification: hosting - 880 Unknown - 510 proxy - 4 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0

RDP Snitch @rdpsnitch@infosec.exchange

· 2mo ago

2026-08-08 RDP #Honeypot IOCs - 697 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 155.117.13.211 - 242 170.64.227.228 - 214 206.189.58.63 - 188 Top ASNs: AS14061 - 412 AS16276 - 242 AS396982 - 10 Top Accounts: hello - 669 Domain - 6 zgrab - 2 Top ISPs: DigitalOcean, LLC - 412 OVH SAS - 242 Google LLC - 10 Top Clients: Unknown - 697 Top Software: Unknown - 697 Top Keyboards: Unknown - 697 Top IP Classification: hosting - 440 Unknown - 255 proxy - 2 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security

0