blueteamsec

428 readers

29 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending August 3rd (ctoatncsc.substack.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

2

10

North Korea sent me abroad to be a secret IT worker. My wages funded the regime (www.bbc.com)

submitted 8 hours ago by digicat to c/blueteamsec

0 comments fedilink

3

2

U.S. Senate Confirms Sean Cairncross as the National Cyber Director (www.whitehouse.gov)

submitted 8 hours ago by digicat to c/blueteamsec

0 comments fedilink

4

4

INSIDE QILIN RANSOMWARE AFFILIATE’s PANEL - loud noises! (theravenfile.com)

submitted 12 hours ago by digicat to c/blueteamsec

0 comments fedilink

5

1

Exposing and Circumventing SNI-based QUIC Censorship of the Great Firewall of China (gfw.report)

submitted 9 hours ago by digicat to c/blueteamsec

0 comments fedilink

6

7

From Laptops to Laundromats: How DPRK IT Workers Infiltrated the Global Remote Economy (dti.domaintools.com)

submitted 16 hours ago by digicat to c/blueteamsec

0 comments fedilink

7

2

Bootkitting Windows Sandbox (secret.club)

submitted 14 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

3

NETGEAR Devices Hidden Page List (github.com)

submitted 16 hours ago by digicat to c/blueteamsec

1 comments fedilink

9

2

Leveraging ETW for Advanced Threat Detection (www.nextron-systems.com)

submitted 16 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

2

Attack Graph Model Design Requirements and Examples (specterops.io)

submitted 16 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

2

PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python (arxiv.org)

submitted 17 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

3

Why continuous profiling is the fourth pillar of observability (www.datadoghq.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

13

3

Let’s get Digital! Updated Digital Identity Guidelines are Here! NIST (www.nist.gov)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

14

3

Advisory on North Korean information technology (IT) workers - mid-July Canadian government (rcmp.ca)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

15

3

hashcat v7.0.0 (hashcat.net)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

16

8

Plague: A Newly Discovered PAM-Based Backdoor for Linux (www.nextron-systems.com)

submitted 2 days ago by digicat to c/blueteamsec

9 comments fedilink

17

3

Dreigingslandschap Vitale Infrastructuur (2025) - Threat Landscape Critical Infrastructure (2025) (www.nctv.nl)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

18

2

The 26th Annual Hawke Lecture: Counting and countering the cost of espionage - "Often it’s a combination of both, where cyber-espionage enables in-person espionage or in-person espionage begets cyber- (www.asio.gov.au)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

2

OpenImporter: Middleware utility for enriching and uploading data gathered with arbitrary collectors to more effectively map to existing Bloodhound database objects. (github.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

5

Illumina Inc. to Pay $9.8M to Resolve False Claims Act Allegations Arising from Cybersecurity Vulnerabilities in Genomic Sequencing Systems (www.justice.gov)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

21

6

More than 90 state, local governments targeted using Microsoft SharePoint vulnerability, group says (archive.ph)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

22

5

Microsegmentation in Zero Trust Part One: Introduction and Planning (www.cisa.gov)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

23

4

Exploiting the Synology TC500 at Pwn2Own Ireland 2024 (blog.infosectcbr.com.au)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

24

1

Beyond the Patch: SharePoint Exploits and the Hidden Threat of IIS Module Persistence (www.splunk.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

25

1

Hunting for Secrets in Plain Sight: Leveraging Internal Logging and Monitoring Services (www.praetorian.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink