blueteamsec

544 readers
25 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
576
7
Frankenstein Variant of the ToneShell Backdoor Targeting Myanmar (intezer.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
577
7
EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company (www.bitdefender.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
578
1
Akira Ransomware Group Utilizing SonicWall Devices for Initial Access (www.rapid7.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
579
1
Salt Typhoon: New Joint Advisory Offers a Beacon Through the Storm but Stirs Up New Questions (open.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
580
7
KittyLoader: KittyLoader is a highly evasive loader written in C / Assembly (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
581
3
Effective Versioning Strategies for Detection-as-Code (blog.nviso.eu)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
582
6
Make Attackers Cry: Outsmart Them With Deception (www.fastly.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
583
3
Detecting Password-Spraying with a Honeypot Account (trustedsec.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
584
1
Uncovering ALVIVA HOLDING: Links to Russian Shell Companies and Cybercrime (theravenfile.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
585
9
You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) (labs.watchtowr.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
586
2
Unknown Malware Using Azure Functions as C2 (dmpdump.github.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
587
4
Learn about ChillyHell, a modular Mac backdoor (www.jamf.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
588
3
NPM debug and chalk compromise 09-2025 KQL (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
589
2
Sh3ller: Sh3ller is a lightweight C2 framework in its simplest form. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
590
2
From Vietnam to Volt Typhoon: How the PRC Refined Grey Zone Cyber Tactics before Targeting the West (papers.ssrn.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
591
8
Spyware installed on Kenyan filmmakers' phones in police custody - Committee to Protect Journalists (cpj.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
592
3
Mythical Beasts: Diving into the depths of the global spyware market (www.atlanticcouncil.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
593
2
Accounting for the Impact of Real-World Data and Costs in Autonomous Cyber Defence (ieeexplore.ieee.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
594
1
Ongoing active exploitation of SonicWall SSL VPNs in Australia (CVE-2024-40766) (cyber.gov.au)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
595
3
An Attacker’s Blunder Gave Us a Look Into Their Operations (www.huntress.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
596
2
r2con2025 October 24-25 (CFP Oct 14th) - 100% Online (rada.re)
submitted 2 months ago by Diluvian to c/blueteamsec
0 comments fedilink
597
10
Elections watchdog admits 'painful lessons learned' after Chinese hack (www.bbc.co.uk)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
598
5
GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe (arcticwolf.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
599
2
“LockerGoga,” “MegaCortex,” and “Nefilim” Ransomware Administrator Charged with Ransomware Attacks (www.justice.gov)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
600
4
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research (security.apple.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›