blueteamsec

570 readers

11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending December 21st - nearly Christmas edition ❄️🎄🎅🤶🎄❄️ (ctoatncsc.substack.com)

submitted 22 minutes ago by digicat to c/blueteamsec

0 comments fedilink

2

2

Using DCOM objects for remote command execution (securelist.com)

submitted 17 minutes ago by digicat to c/blueteamsec

0 comments fedilink

3

1

Yet Another DCOM Object for Command Execution Part 2 (sud0ru.ghost.io)

submitted 18 minutes ago by digicat to c/blueteamsec

0 comments fedilink

4

1

Making CloudFlare Workers Work for Red Teams (blog.zsec.uk)

submitted 21 minutes ago by digicat to c/blueteamsec

0 comments fedilink

5

1

APT-C-36（盲眼鹰）利用Hijackloader开展攻击活动 - APT-C-36 (Blind Hawk) uses Hijackloader to carry out attacks. (mp.weixin.qq.com)

submitted 1 hour ago by digicat to c/blueteamsec

0 comments fedilink

6

9

Russia is responsible for destructive and disruptive cyberattacks against Denmark (www.fe-ddis.dk)

submitted 20 hours ago by digicat to c/blueteamsec

0 comments fedilink

7

6

Amazon Caught North Korean IT Worker By Tracing Keystroke Data (www.bloomberg.com)

submitted 1 day ago by digicat to c/blueteamsec

1 comments fedilink

8

1

Unmasking the Evolving Iranian Prince of Persia (www.safebreach.com)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

2

GachiLoader: Defeating Node.js Malware with API Tracing GachiLoader: Defeating Node.js Malware (research.checkpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

10

2

LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan (www.welivesecurity.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

11

2

Black Hole of Trust: SEO Poisoning in Silver Fox’s Space Odyssey (www.nccgroup.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

12

2

Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns (hunt.io)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

13

2

Understanding MFA Bypass: Trends, Tactics, and Solutions (noorstream.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

14

7

Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users (www.koi.ai)

submitted 2 days ago by digicat to c/blueteamsec

1 comments fedilink

15

1

BlueDelta’s Persistent Campaign Against UKR.NET (www.recordedfuture.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

16

1

HubSpot users targeted by active phishing campaign (evalian.co.uk)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

17

1

ResidentBat: Operational Report & Advisory on KGB spyware in Belarus in 2025 (resident.ngo)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

18

1

Exclusive: RSF uncovers new spyware from Belarus (rsf.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

1

React2Shell used as initial access vector for Weaxor ransomware deployment (www.s-rminform.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

1

Access granted: phishing with device code authorization for account takeover (www.proofpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

21

1

UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager (blog.talosintelligence.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

22

1

ConsentFix: A New way to Phish for Tokens (newtonpaul.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

23

7

Iran-linked hackers dox Israelis, offer cash bounties (www.jpost.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink

24

1

The Post-Compromise Gap: Why Mature Keep Winning (deceptiq.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

25

2

FreeBSD: Remote code execution via ND6 Router Advertisements (www.freebsd.org)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink