blueteamsec

670 readers

17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending March 29th (ctoatncsc.substack.com)

submitted 4 days ago by digicat to c/blueteamsec

0 comments fedilink

2

1

Daily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of posts (briefing.workshop1.net)

submitted 3 weeks ago by digicat to c/blueteamsec

0 comments fedilink

3

1

Notepad++ compromise IoCs (notepad-plus-plus.org)

submitted 4 minutes ago by digicat to c/blueteamsec

0 comments fedilink

4

1

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack (cloud.google.com)

submitted 20 minutes ago by digicat to c/blueteamsec

0 comments fedilink

5

1

Cisco source code stolen in Trivy-linked dev environment breach (www.bleepingcomputer.com)

submitted 22 minutes ago by digicat to c/blueteamsec

0 comments fedilink

6

1

windbg-mcp: An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. control user-mode processes, kernel sessions, and crash dump an (github.com)

submitted 33 minutes ago by digicat to c/blueteamsec

0 comments fedilink

7

3

An analysis of CrystalX commercial RAT with prankware features (securelist.com)

submitted 1 hour ago by digicat to c/blueteamsec

0 comments fedilink

8

2

The Offense Death Cycle: Proactive Environmental Control as a Method of Persistent Cyber Defense (cyberdefensereview.army.mil)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

3

Iran‑Nexus M365 Password Spray Campaign in the Middle East (blog.checkpoint.com)

submitted 3 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

2

Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets (research.checkpoint.com)

submitted 3 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

2

Česká firma inkasovala 2,2 milionu korun od tvůrců špionážního systému Predator - Czech company collects 2.2 million crowns from creators of Predator spy system (www.investigace.cz)

submitted 3 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

2

Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks (www.justice.gov)

submitted 3 hours ago by digicat to c/blueteamsec

0 comments fedilink

13

2

RFC 9849: TLS Encrypted Client Hello - network detection just got harder (datatracker.ietf.org)

submitted 3 hours ago by digicat to c/blueteamsec

0 comments fedilink

14

2

Web PKI Reimagined with Merkle Tree Certificates (www.feistyduck.com)

submitted 13 hours ago by digicat to c/blueteamsec

0 comments fedilink

15

5

Supply Chain Attack on Axios Pulls Malicious Dependency from npm (socket.dev)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

16

5

ImageMagick: From Arbitrary File Read to RCE In Every Policy (ZeroDay) (pwn.ai)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

17

4

Threats based on Clipboards actions (+ KQL Query) (detect.fyi)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

18

5

ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime (research.checkpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

2

CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

1

CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

21

4

Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2) (labs.watchtowr.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

22

1

Unwind Data Can't Sleep - Introducing InsomniacUnwinding (lorenzomeacci.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

23

1

Drifter: C2 traffic dressed as camera management (github.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

24

8

Reverse engineering Apple’s silent security fixes (open.substack.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink

25

6

After Kaspersky was hit with sanctions (Jun 2024), a little company called Midori Trading started submitting Kaspersky drivers to be signed (x.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink