CTO at NCSC Summary: week ending June 7th https://infosec.pub/post/47574773 [https://infosec.pub/u/digicat] #blueteamsec

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface) https://infosec.pub/post/47790122 [https://infosec.pub/u/digicat] #blueteamsec

Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025 https://infosec.pub/post/47814070 [https://infosec.pub/u/digicat] #blueteamsec

GreatXML a bitlocker that seems to only work if you ever had Defender Offline Scan https://infosec.pub/post/47814067 [https://infosec.pub/u/digicat] #blueteamsec

[Op Report] From SSA Phish to AdaptixC2: A Multi-RAT Intrusion https://infosec.pub/post/47809606 [https://infosec.pub/u/digicat] #blueteamsec

Whoops! I did it again. I patched Windows Kernel at Milan0day 2026 https://infosec.pub/post/47763317 [https://infosec.pub/u/digicat] #blueteamsec

Microsoft Defender now monitors RPC activity https://infosec.pub/post/47763316 [https://infosec.pub/u/digicat] #blueteamsec

RoguePlanet: RoguePlanet Windows Defender Vulnerability https://infosec.pub/post/47762932 [https://infosec.pub/u/digicat] #blueteamsec

Benchmarking n-day exploit generation [via AI] https://infosec.pub/post/47764360 [https://infosec.pub/u/digicat] #blueteamsec

gentlemen-decryptor: First-ever decryptor for The Gentlemen ransomware — recovers encryption keys from process memory dumps using X25519 ephemeral key extraction. 35/35 files decrypted. https://infosec.pub/post/45536405 [https://infosec.pub/u/digicat] #blueteamsec