blueteamsec

669 readers

32 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

226

EntraOps: Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM) (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

227

LnkMeMaybe - A Review of CVE-2026-25185 (trustedsec.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

228

Building a Full-Featured DuckDB Kernel for Jupyter — With a Database Explorer You’ll Actually Use (medium.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

229

Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios (arxiv.org)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

230

Contagious Interview: Malware delivered through fake developer job interviews (www.microsoft.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

231

oss-security - Re: Multiple vulnerabilities in AppArmor (www.openwall.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

232

Malware Insights: MacOS Phexia Campaign (cookie.engineer)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

233

CVE-2026-24291: Exploit code for LPE in Windows clients and servers (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

234

AppsFlyer SDK compromised 2026-03-10 (gist.github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

235

China-nexus Group Targets Persian Gulf Region | ThreatLabz (www.zscaler.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

236

DRILLAPP: new backdoor targeting Ukrainian entities with possible links to Laundry Bear (lab52.io)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

237

When Trusted Websites Turn Malicious: WordPress Compromises Advance Global Stealer Operation (www.rapid7.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

238

BeatBanker: both banker and miner for Android (securelist.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

239

Kyiv says cyber ops inflicted $220 mln losses on Russia (tvpworld.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

240

BlackSanta EDR-Killer A Silent Threat Targeting Recruitment Workflows (www.aryaka.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

241

Poland says foiled cyberattack on nuclear centre may have come from Iran (www.reuters.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

242

The Return of PhantomRaven: Detecting Three New Waves of npm Supply Chain Attacks (www.endorlabs.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

243

EMAC Anti-Cheat Driver Analysis (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

244

kerlab: kerberos in rust for fun and profit (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

245

“Handala Hack” - Unveiling Group's Modus Operandi - Check Point Research (research.checkpoint.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

246

Priced to Move: The Underground Markets of Modern Cyberattacks (www.abstract.security)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

247

From Static Lists to Threat Intelligence: Better Domain Detection in Elastic (www.neteye-blog.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

248

How Threat Actors Abuse Remote Management Software for Initial Access (www.huntress.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

249

CTO at NCSC Summary: week ending March 15th (ctoatncsc.substack.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

250

Detection Pipeline Maturity Model (detect.fyi)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink