Bluepurple Pulse: week ending November 20th

A love letter to 🇦🇺 and their response to cybercrime.. never pick a fight with an Aussie

Welcome to the weekly highlights and analysis of the blueteamsec subreddit (and my wider reading). Not everything makes it in, but the best bits do.

Operationally this week various vulnerabilities continue to appear in edge appliances, be it Citrix, Big-IP and others. Outside of that the Infosec Mastodon server fell to a vulnerability - interesting times as the world in part rapidly pivots away from Twitter. In short expect more..

In the high-level this week:

• French National Strategic Review published - cyber features a lot - this line is the killer - the application of a deterrent approach in cyberspace that would force any attacker to restrain himself against France is illusory

• Cyber Norms in the Context of Armed Conflict - Kurt Sanger (ex DoD) and Peter Pascucci (Fleet Judge Advocate for Cyber Command / U.S. 10th Fleet / U.S. Navy Space/ Joint Force Headquarters Cyber) drops the wisdom here.

• Man Charged for Participation in LockBit Global Ransomware Campaign - it is like law enforcemen…