blueteamsec

544 readers
17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
351
2
CTO at NCSC Summary: week ending October 5th (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
352
4
How do timing attacks work? The timing attacks I'm discussing here are specifically the ones where a vulnerable server is comparing strings a byte at a time (nickg.ca)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
353
1
Confucius Espionage: From Stealer to Backdoor (www.fortinet.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
354
1
WARMCOOKIE One Year Later: New Features and Fresh Insights (www.elastic.co)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
355
1
UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud (blog.talosintelligence.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
356
1
Security update: Incident related to Red Hat Consulting GitLab instance (www.redhat.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
357
1
CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) (cert.gov.ua)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
358
1
MC1130385 - Retirement of inline SVG images in Microsoft Outlook | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
359
1
New spyware campaigns target privacy-conscious Android users in the UAE (www.welivesecurity.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
360
1
Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations (cloud.google.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
361
1
Datzbro: RAT Hiding Behind Senior Travel Scams (www.threatfabric.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
362
2
Lunar Spider Expands their Web via FakeCaptcha (blog.nviso.eu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
363
5
CharmingKitten: Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
364
4
Become an invisible admin in Active directory (iqunit.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
365
4
Indirect Memory Writing (unprotect.it)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
366
5
Part 4: Building Effective Detection Rules (sudo3rs.medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
367
3
ENISA Threat Landscape 2025 | ENISA (www.enisa.europa.eu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
368
7
North Korea’s IT Workers expand beyond US big tech (www.okta.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
369
1
Exposing a Crypto Phishing Campaign Through Robots.txt (censys.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
370
3
404 Accountability not found: Spyware accountability through software liability (www.atlanticcouncil.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
371
1
Detour Dog: DNS Malware Powers Strela Stealer Campaigns (blogs.infoblox.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
372
1
Passkey : Community Draft of TR -03188 Passkey Server published for comment (www.bsi.bund.de)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
373
1
NIS raises natl. cyber alert level to 'caution' amid public service outage - Korea (m.koreaherald.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
374
1
Silent Smishing : The Hidden Abuse of Cellular Router APIs (blog.sekoia.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
375
5
Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite (unit42.paloaltonetworks.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›