blueteamsec

672 readers
52 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
326
2
Mass exploitation of CVE-2026-1281 and CVE-2026-1340 in Ivanti EPMM (github.security.telekom.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
327
8
A security audit of GotaTun is now available (mullvad.net)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
328
2
A Threat Actor Landscape Assessment of ICS/OT Targeting in the 2026 Iran-US Conflict AND THE SCALE OF THE RISK (www.cloudsek.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
329
3
Getting a Shell on the Tapo C260 Camera (CVE-2026-0651, CVE-2026-0652, CVE-2026-0653) (spaceraccoon.dev)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
330
10
LinageOS December 2025 security issues - The project had a security problem - project private keys were visible in a publicly visible online git repository. (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
2 comments fedilink
331
2
PrivHound: A BloodHound OpenGraph collector that models Windows local privilege escalation as interconnected attack paths. (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
332
2
AI as tradecraft: How threat actors operationalize AI (www.microsoft.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
333
2
An Investigation Into Years of Undetected Operations Targeting High-Value Sectors (unit42.paloaltonetworks.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
334
1
x64dbg-skills: Claude Code plugin providing skills for x64dbg debugger automation (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
335
2
Mobile spyware campaign impersonates Israel's Red Alert rocket warning system (www.acronis.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
336
2
North Korean APT Malware Analysis: DEV#POPPER RAT and OmniStealer (Everyday I'm Shufflin') (www.esentire.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
337
2
On the Effectiveness of Mutational Grammar Fuzzing (projectzero.google)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
338
1
Patch diff to SYSTEM (www.elastic.co)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
339
3
Reversing BEDaisy.sys: Static Analysis of BattlEye’s Kernel Anti-Cheat Driver (s4dbrd.github.io)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
340
1
Chasing the Ghost in the Log: A Deep Dive into CVE-2026-20820 (cravaterouge.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
341
2
M365Pwned: Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
342
2
CTO at NCSC Summary: week ending March 8th (ctoatncsc.substack.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
343
3
InstallFix: Weaponizing malvertized install guides (pushsecurity.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
344
1
Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE) (labs.watchtowr.com)
submitted 4 weeks ago by digicat to c/blueteamsec
1 comments fedilink
345
1
UAT-9244 targets South American telecommunication providers with three new malware implants (blog.talosintelligence.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
346
1
Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company (www.security.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
347
1
Dust Specter APT Targets Gov’t Officials in Iraq (www.zscaler.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
348
2
CVE-2026-29000: Critical Auth Bypass in pac4j-jwt: Full PoC Using Only a Public Key (www.codeant.ai)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
349
4
North Korea Tried to Hack Our CEO Through a Fake Job Interview on LinkedIn (allsecure.io)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
350
1
Fog, Proxies and Uncertainty: Cyber in US-Israeli Operations in Iran (www.rusi.org)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›