blueteamsec

544 readers
22 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
526
2
AWSDoor: Persistence on AWS (www.riskinsight-wavestone.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
527
2
fwd:cloudsec conference videos (youtube.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
528
2
Artificial Intelligence for Post-Exploitation | Cobalt Strike (www.cobaltstrike.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
529
6
The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU (blog.xlab.qianxin.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
530
2
Technical Analysis of SmokeLoader Version 2025 (www.zscaler.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
531
2
Introducing the AWS Infrastructure Canarytoken (blog.thinkst.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
532
2
CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning | Research - AI at Meta (ai.meta.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
533
3
Magecart Skimmer Analysis: From One Tweet to a Campaign (blog.himanshuanand.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
534
2
病毒伪装搜狗输入法，正规签名内嵌恶意脚本 - The virus disguises itself as Sogou Input Method, embedding malicious scripts in legitimate signatures (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
535
5
raw-disk-parser: A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs (github.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
536
2
sneaky_remap: A C and Go /proc/pid/maps cloak of invisibilty for shared object files (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
537
3
Analysis of APT-C-24 (Sidewinder) Recent LNK File Phishing Attacks (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
538
3
AI-Driven Deepfake Military ID Fraud Campaign by Kimsuky APT (www.genians.co.kr)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
539
3
Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days (www.willsroot.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
540
4
Sidewinder APT leverages Nepal protests to push mobile malware (strikeready.com)
submitted 1 month ago by campuscodi to c/blueteamsec
0 comments fedilink
541
4
Yurei the New Ransomware Group on the Scene (research.checkpoint.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
542
0
2025년 8월 APT 그룹 동향 보고서 - APT Group Trends Report for August 2025 (asec.ahnlab.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
543
1
2025년 8월 APT 공격 동향 보고서(국내) - APT Attack Trend Report for August 2025 (Domestic) (asec.ahnlab.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
544
3
Cyberspike Villager Cobalt Strike's AI-native Successor - "a Chinese-based pentesting framework that acts as an AI-powered framework in the style of Cobalt Strike" (www.straiker.ai)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
545
9
Insider threat of students leading to increasing number of cyber attacks in schools (ico.org.uk)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
546
10
US Investment in Spyware Is Skyrocketing (www.wired.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
547
2
Ransomware Tool Matrix Update: Community Reports (blog.bushidotoken.net)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
548
6
Iran-linked hacker group doxes journalists and amplifies leaked information through AI chatbots (www.international.gc.ca)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
549
1
Cyber Criminal Groups UNC6040 and UNC63940 Compromising Salesforce Instances for Data Theft and Extortion (self.blueteamsec)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://www.ic3.gov/CSA/2025/250912.pdf

550
1
How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be (www.zetter-zeroday.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›