blueteamsec

673 readers
13 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
576
1
Attackers Weaponize Signed RMM Tools via Zoom, Meet, & Teams Lures (www.netskope.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
577
1
PowerShell script to identify Entra ID Tier 0 member MFA settings (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
578
1
Securing Entra ID Administration: Tier 0 (trustedsec.com)
submitted 1 month ago* (last edited 1 month ago) by digicat to c/blueteamsec
0 comments fedilink
579
1
How ClickFix Opens the Door to Stealthy StealC Information Stealer (www.levelblue.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
580
1
Azure Default Outbound Access Changes: Guidance for Windows 365 ANC Customers (techcommunity.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
581
1
Top Security Incidents of 2025:  The Emergence of the ChainedShark APT Group (nsfocusglobal.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
582
1
Operation MacroMaze: new APT28 campaign using basic tooling and legit infrastructure (lab52.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
583
4
US needs to impose ‘real costs’ on bad actors, State Department cyber official says (therecord.media)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
584
3
solidcore_bypass: PowerShell script that executes a non-whitelisted .NET executable from memory, bypassing SolidCore application control. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
585
3
Analyzing The Simplest C++ Program (oneraynyday.github.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
586
3
btrpa-scan: Bluetooth Low Energy (BLE) scanner with Resolvable Private Address (RPA) resolution using Identity Resolving Keys (IRKs) (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
587
8
China may be rehearsing a digital siege, Taiwan warns (therecord.media)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
588
1
rustbof: A Rust template for writing Beacon Object Files (BOFs) (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
589
1
ElephantPoint: a SharePoint Enumeration Tool (www.lrqa.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
590
1
Simple Crystal Palace RDLL template for Adaptix (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
591
2
CTO at NCSC Summary: week ending February 15th (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
592
1
BADIIS to the Bone: New Insights to a Global SEO Poisoning Campaign (www.elastic.co)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
593
6
Multiple Threat Actors Rapidly Exploit React2Shell: A Case Study of Active Compromise - JPCERT/CC Eyes (blogs.jpcert.or.jp)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
594
3
Bypassing Administrator Protection by Abusing UI Access (projectzero.google)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
595
2
Cooking with x64dbg and MCP (x64.ooo)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
596
9
Palo Alto chose not to tie China to hacking campaign for fear of retaliation from Beijing, sources say (www.reuters.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
597
5
800,000 WordPress Sites Affected by Arbitrary File Upload Vulnerability in WPvivid Backup WordPress Plugin (www.wordfence.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
598
1
Lotus Blossom (G0030) and the Notepad++ Supply-Chain Espionage Campaign (dti.domaintools.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
599
1
The North Korean on your payroll (www.okta.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
600
3
Foxveil – New Malware Loader Abusing Cloudflare, Discord, and Netlify as Staging Infrastructure (www.catonetworks.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›