APT_CyberCriminal_Campagin_Collections VS Lobsters

You can look at:

- A collection of public threat intel reports [0]. Lot's of reading though. I did some Splunking on it last year and at least 50% uses phishing for initial access. You could call that a structural vulnerability.

- Exploiting vulnerable public facing stuff is another initial access technique. Here someone collected all the CVEs used by ransomware crews:

- VERIS community database: collection of 8894 security incidents. If you look in the JSON there are some fields describing the vector and the actor.

[0] https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_C...

[1] https://twitter.com/uuallan/status/1437068825636265985

[2] https://github.com/vz-risk/VCDB

https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections/

that link's broken, I think you meant https://lobste.rs/

https://lobste.rs/ is a bit like HackerNews but less varied since it's mostly focused on programming.

Lobsters : Lobsters is a technology-focused community centered around link aggregation and discussion.

In the same vein, any other site that focuses more explicitly on CS only? HN is irreplaceable on that count, you really get sometimes the very creator of the thing chine in, but there are sometimes almost a week going by without any “proper” CS-content (I follow basically every “front page” submission through RSS). https://lobste.rs/ comes to mind, but it has very few comments unfortunately. Maybe a tag system could be great, at least this crude.

Oh, and while we are at it, could we list some tech forums for other languages? I spend way too much time lurking around tech forums, and being forced to use another language might make me actually learn it (German in my case).