blueteamsec

623 readers

10 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending February 15th (ctoatncsc.substack.com)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

2

5

China may be rehearsing a digital siege, Taiwan warns (therecord.media)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

3

4

US needs to impose ‘real costs’ on bad actors, State Department cyber official says (therecord.media)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

4

3

solidcore_bypass: PowerShell script that executes a non-whitelisted .NET executable from memory, bypassing SolidCore application control. (github.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

5

3

btrpa-scan: Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs) (github.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

6

2

Distillation, Experimentation, and (Continued) Integration of AI for Adversarial Use (cloud.google.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

7

2

Analyzing The Simplest C++ Program (oneraynyday.github.io)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

1

Huginn is a position-independent COFF loader designed for in-memory execution with built-in stack spoofing, indirect syscalls and automatic heap cleanup to prevent memory leaks (github.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

1

tuxid: A lightweight Linux fingerprinting tool - A lightweight POSIX-compliant shell script that collects hardware, system, and network signals to generate a unique, reproducible fingerprint (github.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

1

VK Styles: 500K Users Infected by Chrome Extensions That Hijack VKontakte Accounts (www.koi.ai)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

1

Reconnaissance Has Begun for the New BeyondTrust RCE (CVE-2026-1731): Here's What We See So Far (www.greynoise.io)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

1

Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures (www.netskope.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

13

1

PowerShell script to identify Entra ID Tier 0 member MFA settings (github.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

14

1

Securing Entra ID Administration: Tier 0 (trustedsec.com)

submitted 4 hours ago* (last edited 4 hours ago) by digicat to c/blueteamsec

0 comments fedilink

15

1

How ClickFix Opens the Door to Stealthy StealC Information Stealer (www.levelblue.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

16

1

Azure Default Outbound Access Changes: Guidance for Windows 365 ANC Customers (techcommunity.microsoft.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

17

1

Top Security Incidents of 2025: The Emergence of the ChainedShark APT Group (nsfocusglobal.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

18

1

Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure (lab52.io)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

19

1

rustbof: A Rust template for writing Beacon Object Files (BOFs) (github.com)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

20

1

ElephantPoint: a SharePoint Enumeration Tool (www.lrqa.com)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

21

1

Simple Crystal Palace RDLL template for Adaptix (github.com)

submitted 5 hours ago by digicat to c/blueteamsec

0 comments fedilink

22

1

BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign (www.elastic.co)

submitted 8 hours ago by digicat to c/blueteamsec

0 comments fedilink

23

9

Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say (www.reuters.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

24

8

Spying Chrome Extensions: 287 Extensions spying on 37M users (qcontinuum.substack.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

25

6

Multiple Threat Actors Rapidly Exploit React2Shell: A Case Study of Active Compromise - JPCERT/CC Eyes (blogs.jpcert.or.jp)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink