blueteamsec

545 readers
22 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
451
5
firezone: Enterprise-ready zero-trust access platform built on WireGuard®. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
452
1
[위협 분석] 성범죄자 고지 정보를 위장한 Kimsuky 공격 | 로그프레소 - Kimsuky Attack Disguised as Sex Offender Notification Information (logpresso.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
453
1
Defending Against the Evolving OAuth Attack Landscape (aadinternals.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
454
2
Cyber Threat Intelligence Communication & Reporting Techniques (bank-security.medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
455
2
CVE-2025-10035: Detection for CVE-2025-10035 via Nuclei (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
456
1
In-depth Analysis of the Encrypted Payloads in the Pseudo Hunter Github Repository (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
457
6
Infected Steam game downloads malware disguised as patch (www.gdatasoftware.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
458
1
Nimbus Manticore Deploys New Malware Targeting Europe (research.checkpoint.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
459
2
Elons (Proxima/Black Shadow related) ransomware attack via Oracle DBS External Jobs (labs.yarix.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
460
1
SystemBC – Bringing the Noise (blog.lumen.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
461
1
Deserialization Vulnerability in GoAnywhere MFT's License Servlet (www.fortra.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
462
3
Chypnosis: Stealthy Secret Extraction using Undervolting-based Static Side-channel Attacks (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
463
3
EDR-Freeze: EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
464
1
Thalha Jubair DOJ complaint - alleged Scattered Spider (www.documentcloud.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
465
4
From Abstract Terms to Acumen: SEO Poisoning (medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
466
4
Domain Fronting is Dead. Long Live Domain Fronting! (www.praetorian.com)
submitted 1 month ago by digicat to c/blueteamsec
3 comments fedilink
467
0
Hunting for SnakeDisk (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
468
0
Hunting for PyPI Packages Delivering SilentSync RAT (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
469
0
That's How Adversaries Disable Warning Messages (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
470
0
Another Legitimate Web Service Abused by APT28 (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
471
0
That's How Bloody Wolf Abuses WMI for Discovery (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
472
1
That's How Adversaries Abuse WMI for Software Discovery (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
473
-2
That's How Adversaries Modify Registry to Weaken Security (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
474
2
GOLD SALEM’s Warlock operation joins busy ransomware landscape (news.sophos.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
475
3
Blog: Beyond Sandbox Domains: Rendering Untrusted Web Content with SafeContentFrame (bughunters.google.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›