#blueteam

2026-10-27 RDP #Honeypot IOCs - 2493 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 660
45.76.89.93 - 345
144.202.31.39 - 258

Top ASNs:
AS8075 - 804
AS20473 - 603
AS8560 - 519

Top Accounts:
142.93.8.59 - 1050
hello - 669
probe - 603

Top ISPs:
Microsoft Corporation - 762
arsys.es - 435
Choopa - 345

Top Clients:
Unknown - 2493

Top Software:
Unknown - 2493

Top Keyboards:
Unknown - 2493

Top IP Classification:
hosting - 1953
Unknown - 483
mobile - 45

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🛡️ SOC Team Lead at AHEAD
📍 Remote (United States)
💰 $110k–$140k a year

Apply: https://blueteamjobs.com/job/soc-team-lead-ahead-7y646n/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

🛡️ Incident Response Specialist at AnaVation
📍 Reston, VA
💰 $89k–$196k a year

Apply: https://blueteamjobs.com/job/incident-response-specialist-anavation-7mc2vd/

#BlueTeam #InfoSec #CyberSecurityJobs #IncidentResponder

RE: https://infosec.exchange/@jfslowik/117513549701209249

Good thoughts on process for #blueteam #infosec defenders dealing with ever increasing nuclear vulns and defense.

Plus, inspired me to learn the difference between geomatric and exponential growth.

🛡️ Cloud Security Engineer Mid at Accenture Federal Services
📍 Leesburg, VA

Apply: https://blueteamjobs.com/job/cloud-security-engineer-mid-accenture-federal-services-ry8mt2/

#BlueTeam #InfoSec #CyberSecurityJobs #CloudSecurityEngineer

🛡️ SoC Engineer at OpenAI
📍 Hybrid · San Francisco, CA
💰 $287k–$485k a year

Apply: https://blueteamjobs.com/job/soc-engineer-openai-qffjec/

#BlueTeam #InfoSec #CyberSecurityJobs #DetectionEngineer

Still “learning cybersecurity” with 47 open tabs and zero plan?

Attackers have a methodology. You should too.

Cyber Blueprint: the dark Notion study planner that maps your path from recon to reporting.

$4.99. Less than your coffee. More useful than your bookmarks folder.

👉 https://cybercraftstore.gumroad.com/l/notion-cybersecurity-study-planner-template

#BlueTeam #ThreatIntel #RedTeam #Students #CyberSecurity

🛡️ Security Analyst at UltraViolet Cyber
📍 On-site

Apply: https://blueteamjobs.com/job/security-analyst-ultraviolet-cyber-fyypgp/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

🛡️ Security Engineer: Tanium at Cyderes
📍 Hybrid · Orlando, FL
💰 $100k–$110k a year

Apply: https://blueteamjobs.com/job/security-engineer-tanium-cyderes-veh367/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

🛡️ Information Security Analyst II - Federal Programs at Datadog
📍 New York, NY
💰 $116k–$145k a year

Apply: https://blueteamjobs.com/job/information-security-analyst-ii-federal-programs-datadog-h15bg8/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

2026-10-26 RDP #Honeypot IOCs - 3282 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 1320
45.76.89.93 - 624
45.65.180.246 - 138

Top ASNs:
AS8075 - 1485
AS20473 - 624
AS8560 - 495

Top Accounts:
hello - 1407
142.93.8.59 - 1122
probe - 624

Top ISPs:
Microsoft Corporation - 1452
Choopa - 624
arsys.es - 426

Top Clients:
Unknown - 3282

Top Software:
Unknown - 3282

Top Keyboards:
Unknown - 3282

Top IP Classification:
hosting - 2595
Unknown - 594
mobile - 90

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-26 RDP #Honeypot IOCs - 2188 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 880
45.76.89.93 - 416
45.65.180.246 - 92

Top ASNs:
AS8075 - 990
AS20473 - 416
AS8560 - 330

Top Accounts:
hello - 938
142.93.8.59 - 748
probe - 416

Top ISPs:
Microsoft Corporation - 968
Choopa - 416
arsys.es - 284

Top Clients:
Unknown - 2188

Top Software:
Unknown - 2188

Top Keyboards:
Unknown - 2188

Top IP Classification:
hosting - 1730
Unknown - 396
mobile - 60

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-26 RDP #Honeypot IOCs - 1094 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 440
45.76.89.93 - 208
45.65.180.246 - 46

Top ASNs:
AS8075 - 495
AS20473 - 208
AS8560 - 165

Top Accounts:
hello - 469
142.93.8.59 - 374
probe - 208

Top ISPs:
Microsoft Corporation - 484
Choopa - 208
arsys.es - 142

Top Clients:
Unknown - 1094

Top Software:
Unknown - 1094

Top Keyboards:
Unknown - 1094

Top IP Classification:
hosting - 865
Unknown - 198
mobile - 30

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🛡️ Senior Security Engineer at MOXFIVE
📍 Remote (United States)
💰 $180k–$240k a year

Apply: https://blueteamjobs.com/job/senior-security-engineer-moxfive-34fa6z/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

Hello, infosec.exchange 👋

The Incident Ledger is a practical security blog for SOC beginners and people moving into security: hands-on tutorials, plain-English attack analyses, certification guides and a glossary.

Happy to be here, and keen to learn from this community.

https://theincidentledger.com

#introduction #infosec #blueteam

🛡️ Sr Manager, Incident Response at UltraViolet Cyber
📍 Hybrid · San Jose, CA
💰 $175k–$205k a year

Apply: https://blueteamjobs.com/job/sr-manager-incident-response-ultraviolet-cyber-ysefde/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityOperationsLeadership

Daily brief, Oct 26:
- PHP2Shell CVE-2026-109618/-109619 (CVSS 9.2): PAN-OS mgmt UI hotfixes 10.2.18-h13/11.1.16-h4/11.2.10-h16 out, rest Oct 27-30. Patch PHP, session.upload_progress.enabled=0, hunt since Oct 17
- Gheist: hunt ci-sync-* branches, UA gheist; rotate all repo secrets
- Tailscale SSH (no CVE/fix): per-pair grants, no forwarding
- CVE-2026-111497: .NET 8.0.33/9.0.22/10.0.14; rebuild self-contained apps

https://tp-security.com/news/cyber-brief-2026-10-26-panos-gheist-tailscale-brotli

#InfoSec #PatchNow #BlueTeam #DevSecOps

🛡️ Principal Network Security Engineer at Roblox
📍 San Mateo, CA
💰 $326k–$385k a year

Apply: https://blueteamjobs.com/job/principal-network-security-engineer-roblox-72kksb/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

🛡️ Security Engineer (Cross-Functional) - SME at Accenture Federal Services
📍 Chantilly, VA

Apply: https://blueteamjobs.com/job/security-engineer-cross-functional-sme-accenture-federal-services-70fcwg/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

🛡️ Security Analyst II at Cyderes
📍 Hybrid · Orlando, FL

Apply: https://blueteamjobs.com/job/security-analyst-ii-cyderes-8w50vy/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

🛡️ SOC Analyst at Cato Networks
📍 Philippines

Apply: https://blueteamjobs.com/job/soc-analyst-cato-networks-128mdv/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

2026-10-25 RDP #Honeypot IOCs - 1326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 440
221.6.237.66 - 78
102.88.21.136 - 70

Top ASNs:
AS8075 - 542
AS8560 - 316
AS4837 - 78

Top Accounts:
142.93.8.59 - 726
hello - 492
probe - 48

Top ISPs:
Microsoft Corporation - 524
arsys.es - 264
CNC Group CHINA169 Jiangsu Province Network - 78

Top Clients:
Unknown - 1326

Top Software:
Unknown - 1326

Top Keyboards:
Unknown - 1326

Top IP Classification:
hosting - 858
Unknown - 340
mobile - 70

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🛡️ Staff Engineer, Cloud Security at Toast
📍 Remote
💰 $193k–$309k a year

Apply: https://blueteamjobs.com/job/staff-engineer-cloud-security-toast-jsz3ws/

#BlueTeam #InfoSec #CyberSecurityJobs #CloudSecurityEngineer

POLAR, c’est CE JEUDI 🎉
Polar arrive cette semaine – la conférence incontournable pour les leaders, gestionnaires et responsables techniques en cybersécurité!
Rejoignez-nous pour une journée riche en apprentissages, en échanges inspirants et en rencontres avec la communauté, au Le Capitole Hôtel - Le Confessionnal.
✨ Moment spécial: La conférence avec notre invité d’honneur, Jeff Man, intitulé “Getting Back to the Basics, The Fundamentals of CyberSecurity, Rethinking Security What Are We Doing Here?”
La journée sera animée par Steve Waterhouse
🔗 Découvrez le programme complet: https://hackfest.ca/polar/?utm_source=twitter&utm_medium=socmed&utm_campaign=polar
Merci à Palo Alto Networks, notre partenaire principal, pour leur soutien exceptionnel! 🙌

#infosec #ciso #cisos #cisolife #cisoadvisor #cisoseries #cybersecurite #polqc #polcan #canada #quebec #conference #cybersecuritymanagement #hacking #redteam #blueteam #management #summit #securityindustry

POLAR is THIS THURSDAY 🎉
Polar is coming this week, the must-attend conference for cybersecurity leaders, managers and technical decision-makers!
Join us for a day full of learning, inspiring conversations and community connections at Le Capitole Hôtel - Le Confessionnal.
✨ Special moment: The talk by our guest of honour, Jeff Man, titled “Getting Back to the Basics, The Fundamentals of CyberSecurity, Rethinking Security What Are We Doing Here?”
The day will be hosted by Steve Waterhouse
🔗 Check out the full program: https://hackfest.ca/polar/?utm_source=twitter&utm_medium=socmed&utm_campaign=polarEN
Thank you to Palo Alto Networks, our main partner, for their outstanding support! 🙌

Weekly roundup, Oct 19–25:
- PHP2Shell CVE-2026-109618/-109619 (CVSS 9.2): fixed 8.5.12/8.4.27/8.3.36/8.2.35; probes since Oct 17. After patching, hunt new .php files in upload/cache dirs and PHP_SESSION_UPLOAD_PROGRESS POSTs
- KEV: Arista VCO CVE-2026-114625, Collabora CVE-2026-110447
- Node2Shell CVE-2026-111497: Node 22.23.4/24.22.1/26.12.1
- Okta lookalikes: riskified-okta[.]com, gladly-okta[.]com
https://tp-security.com/news/weekly-roundup-2026-10-25-php2shell-edge-flaws
#InfoSec #PatchNow #BlueTeam #Phishing

🛡️ Cyber Security Analyst at DataDome
📍 Remote

Apply: https://blueteamjobs.com/job/cyber-security-analyst-datadome-b1kz1z/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

🛡️ Sr. Staff Engineer, Security AI-SOC at Cribl
📍 Remote (US, CA)
💰 $230k–$280k a year

Apply: https://blueteamjobs.com/job/sr-staff-engineer-security-ai-soc-cribl-mneygd/

#BlueTeam #InfoSec #CyberSecurityJobs #SOCAnalyst

🛡️ Lead Security Engineer - SME (R-00242) at True Zero Technologies
📍 Hybrid

Apply: https://blueteamjobs.com/job/lead-security-engineer-sme-r-00242-true-zero-technologies-4399nd/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

🛡️ Fortinet Network Security Engineer - North Central region at GuidePoint Security
📍 Remote

Apply: https://blueteamjobs.com/job/fortinet-network-security-engineer-north-central-region-guidepoint-security-r1ww5g/

#BlueTeam #InfoSec #CyberSecurityJobs #SecurityEngineer

2026-10-24 RDP #Honeypot IOCs - 2208 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
172.213.17.10 - 660
206.71.149.246 - 321
45.65.180.246 - 120

Top ASNs:
AS8075 - 795
AS8560 - 474
AS399629 - 321

Top Accounts:
142.93.8.59 - 1017
hello - 753
probe - 327

Top ISPs:
Microsoft Corporation - 768
arsys.es - 390
BL Networks - 321

Top Clients:
Unknown - 2208

Top Software:
Unknown - 2208

Top Keyboards:
Unknown - 2208

Top IP Classification:
hosting - 1308
Unknown - 846
mobile - 39

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security