APT_CyberCriminal_Campagin_Collections VS Lobsters

You can look at:

- A collection of public threat intel reports [0]. Lot's of reading though. I did some Splunking on it last year and at least 50% uses phishing for initial access. You could call that a structural vulnerability.

- Exploiting vulnerable public facing stuff is another initial access technique. Here someone collected all the CVEs used by ransomware crews:

- VERIS community database: collection of 8894 security incidents. If you look in the JSON there are some fields describing the vector and the actor.

[0] https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_C...

[1] https://twitter.com/uuallan/status/1437068825636265985

[2] https://github.com/vz-risk/VCDB

https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections/

Cybermonitor on github for a collection of APT reports: cybermonitor

var req2 = http.GetStringAsync("https://lobste.rs");

"I actually wish we had a hacker community like this without the business/startup side at all"

Sounds like you want https://lobste.rs

Well, there's https://lobste.rs/, or we could all go back to slashdot I guess

Requesting https://github.com/lobsters/lobsters as I'm going through that codebase and would be able to provide feedback. cheers

ps. just gonna second everyone else who's saying being able to edit out incorrect data is very important, otherwise people are gonna be weary of reading repos they aren't already familiar with.

> Hacker News, but also lobster.rs

First time I hear about it. I think you meant https://lobste.rs