blueteamsec

670 readers

21 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending March 29th (ctoatncsc.substack.com)

submitted 4 days ago by digicat to c/blueteamsec

0 comments fedilink

2

1

Daily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of posts (briefing.workshop1.net)

submitted 3 weeks ago by digicat to c/blueteamsec

0 comments fedilink

3

5

Cisco source code stolen in Trivy-linked dev environment breach (www.bleepingcomputer.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

4

2

Notepad++ compromise IoCs (notepad-plus-plus.org)

submitted 1 hour ago by digicat to c/blueteamsec

0 comments fedilink

5

1

No Paste for You! - Reverse Engineering Apple's ClickFix Protections (objective-see.org)

submitted 1 hour ago by digicat to c/blueteamsec

0 comments fedilink

6

1

PlugX : Mustang Panda APT (0x3obad.github.io)

submitted 1 hour ago by digicat to c/blueteamsec

0 comments fedilink

7

4

An analysis of CrystalX commercial RAT with prankware features (securelist.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

1

North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack (cloud.google.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

1

windbg-mcp: An MCP (Model Context Protocol) server that turns all pybag Windows debugger functions into native MCP tools. control user-mode processes, kernel sessions, and crash dump an (github.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

2

The Offense Death Cycle: Proactive Environmental Control as a Method of Persistent Cyber Defense (cyberdefensereview.army.mil)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

3

Iran‑Nexus M365 Password Spray Campaign in the Middle East (blog.checkpoint.com)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

2

Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets (research.checkpoint.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

13

2

Česká firma inkasovala 2,2 milionu korun od tvůrců špionážního systému Predator - Czech company collects 2.2 million crowns from creators of Predator spy system (www.investigace.cz)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

14

2

Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks (www.justice.gov)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

15

2

RFC 9849: TLS Encrypted Client Hello - network detection just got harder (datatracker.ietf.org)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

16

2

Web PKI Reimagined with Merkle Tree Certificates (www.feistyduck.com)

submitted 15 hours ago by digicat to c/blueteamsec

0 comments fedilink

17

5

Supply Chain Attack on Axios Pulls Malicious Dependency from npm (socket.dev)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

18

5

ImageMagick: From Arbitrary File Read to RCE In Every Policy (ZeroDay) (pwn.ai)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

4

Threats based on Clipboards actions (+ KQL Query) (detect.fyi)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

5

ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime (research.checkpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

21

2

CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

22

1

CVE-2026-4946: NSA Ghidra Auto-Analysis Annotation Command Execution (takeonme.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

23

4

Please, We Beg, Just One Weekend Free Of Appliances (Citrix NetScaler CVE-2026-3055 Memory Overread Part 2) (labs.watchtowr.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

24

1

Unwind Data Can't Sleep - Introducing InsomniacUnwinding (lorenzomeacci.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

25

1

Drifter: C2 traffic dressed as camera management (github.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink