blueteamsec

627 readers
35 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
376
10
6-day and IP Address Certificates are Generally Available (letsencrypt.org)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
377
5
MalwareBytes internals (incomplete) (malwaresourcecode.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
378
3
Kerberos Authentication Relay Via CNAME Abuse (cymulate.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://github.com/BenZamir/MITM6-Kerberos-CNAME-Abuse

379
2
Security-Detections-MCP: MCP to help Defenders Detection Engineer Harder and Smarter (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
380
2
StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU’s Stack Engine (cispa.de)
submitted 4 weeks ago* (last edited 4 weeks ago) by digicat to c/blueteamsec
0 comments fedilink
381
5
Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wild (patchstack.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
382
3
AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior (arxiv.org)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
383
5
Using NTLM Reflection to Own Active Directory (CVE-2025-33073) (www.depthsecurity.com)
submitted 4 weeks ago by digicat to c/blueteamsec
1 comments fedilink
384
3
Rust VBS Enclave DLL in VTL1 (Windows Secure Enclaves) (fluxsec.red)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
385
3
One WSL BOF to Rule Them All (specterops.io)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
386
4
OffByWon: Network Fuzzing Framework (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
387
3
CTO at NCSC Summary: week ending January 18th (ctoatncsc.substack.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
388
3
Analyzing React2Shell Threat Actors (www.f5.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
389
2
APT-C-06（DarkHotel）利用U盘内安装程序传播恶意载荷的攻击活动报告 - Report on APT-C-06 (DarkHotel) attack activity that uses an installer on a USB drive to spread malicious payloads. (mp.weixin.qq.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
390
5
The Design & Implementation of Sprites (fly.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
391
5
BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow (appomni.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
392
3
Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain (isc.sans.edu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
393
3
Sicarii Ransomware: Truth vs Myth (research.checkpoint.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
394
4
WhisperPair: Hijacking Bluetooth Accessories Using Google Fast Pair (whisperpair.eu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
395
5
Predator iOS Spyware: Undocumented Anti-Analysis Techniques (www.jamf.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
396
3
Silent Push Uncovers New Magecart Network: Disrupting Online Shoppers Worldwide (www.silentpush.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
397
10
UNO reverse card: stealing cookies from cookie stealers (www.cyberark.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
398
3
Keeping the Kimwolf at bay: putting a leash on a massive DDoS Botnet. (www.linkedin.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
399
4
UAT-8837 targets critical infrastructure sectors in North America (blog.talosintelligence.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
400
10
Keylogger targets 200,000+ employees at major US bank (sansec.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›