blueteamsec

674 readers
20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
651
2
malasada: Linux Shared Library to Shellcode Loader (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
652
1
/vouch: A contributor trust management system based on explicit vouches to participate. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
653
2
Disabling PPL Protection on Windows Processes (medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
654
2
Scarcruft’s ROKRAT Malware: Recent Changes (s2w.inc)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
655
2
TP-Link ER605 DDNS Pre-Auth RCE: Chaining CVE-2024-5242, CVE-2024-5243, CVE-2024-5244 (oobs.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
656
4
Nearly 5 Million Web Servers Found Exposing Git Metadata – Study Reveals Widespread Risk of Code and Credential Leaks (www.mysteriumvpn.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
657
5
The RCE that AMD won't fix - they store their update URL in the program’s app.config, although its a little odd that they use their “Develpment” URL in production, (web.archive.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
658
2
WatchGuard Firebox LDAP Injection (www.watchguard.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
659
2
Microsoft SDL: Evolving security practices for an AI-powered world (www.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
660
3
Peacock: UEFI Firmware Runtime Observability Layer for Detection and Response (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
661
2
How to detect CVE-2026-21509 exploits (decalage.info)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
662
3
MANSPIDER: Spider entire networks for juicy files sitting on SMB shares. Search filenames or file content - regex supported! (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
663
3
kahlo-mcp: A Frida MCP server to enable autonomous AI assistance for Android instrumentation (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
664
1
Announcing Windows 11 Insider Preview Build 26220.7752 (Beta Channel) - with built in Sysmon (blogs.windows.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
665
3
Secure Boot playbook for certificates expiring in 2026 (techcommunity.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
666
2
FalconFriday: Need for Speed: going underground with near-real-time (NRT) rules (falconforce.nl)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
667
2
Kusto Tables | Firewall IP Lists (firewalliplists.gypthecat.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
668
3
A security alert regarding APT-C-28 (ScarCruft) using MiradorShell to launch a cyberattack. (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
669
1
Deobfuscation and Analysis of Ring-1.io (back.engineering)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
670
1
hermes: A Python agent targeting Linux for Mythic C2 (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
671
3
New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan | Microsoft Security Blog (www.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
672
1
Gone Phishing, Got a Token: When Separate Flaws Combine (www.praetorian.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
673
1
Build-time String Encryption for Position-Independent Code (tmpest.dev)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
674
8
tap-ducky: Turns any rooted phone into the legendary USB Rubber Ducky. Android USB HID Keystroke Injector (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
675
1
Another day, another Domain Admin - What is new is that a language model is now doing all of this on its own, starting from a Responder hash, and stitching the pieces together into a coherent chain. (blog.vulnetic.ai)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›