cool platform, don' miss it :)

We were able to identify 6 Iran related underground activity , but yet shared POC of "JumpJump" vpn incident is unknown to us. It will be very helpful to help us cluster this activity by sending more details in our channel DM :)


also you don't need to pay for VPN !!!
Unredacted group provide high quality free solutions to anyone who need free access to internet :)
Try it now :
https://unredacted.org/blog/2026/07/internet-freedom-is-here-freesocks-v2/

My New Blog Post

Evading Sysmon Dns Monitoring In 2026 | binary-win

DNSevade : https://github.com/binary-win/DNSevade.git

Sysmon gets its DNS telemetry from the Microsoft-Windows-DNS-Client ETW provider.
Let's hide in plain sight.

#sysmon #bypass

Your Notes are HERE

#Tech_book
#Offensive_security
#Red_Team_Tactics
"Red Team Engineering: The Art of Building Offensive Tools and Infrastructure", 2026.

]-> Various course materials, scripts, and configurations

bullshit
don't waste your time
#T

I’m pleased to share the Patchwork CTI Framework v0.7.1, now publicly available for community review.

Patchwork began as personal documentation, a way to connect the useful pieces of different CTI approaches. It has grown into a platform-independent framework for structuring observations, tracking adversaries, and sharing intelligence while preserving evidence, uncertainty, and assessment history. It brings together published approaches from CERT-EU, Mandiant/Google Threat Intelligence, Palo Alto Networks Unit 42, CISA, and OASIS STIX 2.1, documenting both what it adopts and where it deliberately differs.

The framework covers:
- Activity clusters, attribution tiers, and adversary naming.
- Confidence, source grading, and provenance.
- Classification, sharing rules, and STIX 2.1 serialization.
- Report templates, worked examples, and documentation tools.

A central design principle: stronger attribution should build on earlier assessments, not erase them.
We’re also developing a compatible threat-intelligence platform. That work is ongoing, and adopting the framework does not require using our platform.
This is a community-review draft, not a final standard. I’d welcome feedback from CTI analysts, researchers, CERT/CSIRT teams, and platform builders, especially on practical adoption, difficult attribution cases, and assumptions that deserve challenging.
Explore the framework and join the discussion:

https://github.com/CTI-Center/PatchWork


#CTI

#Research
#cryptography
"Randomness-Anchored Runtime Discovery of Cryptographic Operations on Linux Using eBPF",
Oct 2026.

]-> https://github.com/yulim4hyoung/ebpf-pqc-runtime-discovery

// This work presents a runtime cryptographic discovery system for Linux, built on eBPF user-space probes, that detects classical and post-quantum operations as they execute

How We Claimed a Pre-Bedrock Optimism Withdrawal

Link: https://medium.com/coinsbench/how-we-claimed-a-pre-bedrock-optimism-withdrawal-4d1df1ba017f

Seems someone wrote a SPL hunting rule for VMware Vcenter #CVE-2026-59310🙄



VMware docs :

Deployment of 3rd Party Agents and Anti-virus software on the ESXi Hypervisor and vCenter Server Appliance (VCSA)
The ESXi hypervisor is a specialized, purpose-built solution, similar to a network router’s firmware. While this approach has several advantages, it also makes ESXi unable to run “off-the-shelf” software, including security tools, designed for general-purpose operating systems as the ESXi runtime environment is dissimilar to other operating systems