blueteamsec

544 readers

11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

726

3

Amazon disrupts watering hole campaign by Russia’s APT29 | Amazon Web Services (aws.amazon.com)

submitted 2 months ago* (last edited 2 months ago) by digicat to c/blueteamsec

1 comments fedilink

727

3

Detecting Velociraptor misuse :: Velociraptor (docs.velociraptor.app)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

728

4

A Nightmare on EDR Street: WDAC's Revenge (beierle.win)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

729

7

ShadowSilk: A Cross-Border Binary Union for Data Exfiltration (www.group-ib.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

730

4

TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents (www.trendmicro.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

731

9

Malvertising Campaign on Meta Expands to Android, Pushing Advanced Crypto-Stealing Malware to Users Worldwide (www.bitdefender.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

732

6

Loophole allows threat actors to claim VS Code extension names (www.reversinglabs.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

733

7

Anklage gegen ein mutmaßliches Mitglied einer deutschen „Anonymous“-Gruppierung - Charges against a suspected member of a German “Anonymous” group (www.berlin.de)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

734

5

Malicious versions of Nx and some supporting plugins were published (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/

735

13

Taiwan traces Chinese hackers selling stolen data to trafficking ring - Focus Taiwan (focustaiwan.tw)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

736

5

DPRK IT WORKERS UNVEILED (theravenfile.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

737

2

ENISA to operate the EU Cybersecurity Reserve with EUR 36 million | ENISA (enisa.europa.eu)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

738

4

Endpointmanager Aug 2025 zero-day - The Sangoma FreePBX Security Team is aware of a potential exploit affecting some systems with the administrator control panel exposed to the public internet (community.freepbx.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

739

5

No Ranges, No Bounties, No Contests: Forging Offensive Capabilities in China’s 2000s Hacker Scene (open.substack.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

740

3

MystRodX: The Covert Dual-Mode Backdoor Threat (blog.xlab.qianxin.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

741

2

Threat Actors Deploy Sinobi Ransomware via Compromised SonicWall SSL VPN Credentials (www.esentire.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

742

2

ShadowSilk: A Cross-Border Binary Union for Data Exfiltration (www.group-ib.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

743

4

Velociraptor incident response tool abused for remote access (news.sophos.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

744

3

Storm-0501’s evolving techniques lead to cloud-based ransomware (www.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

745

1

U.S.-ROK-Japan Joint Statement on DPRK Information Technology Workers - United States Department of State (www.state.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

746

3

One Step Ahead: Stark Industries Solutions Preempts EU Sanctions (www.recordedfuture.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

747

2

Treasury Sanctions Fraud Network Funding DPRK Weapons Programs (home.treasury.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

748

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

749

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

750

2

Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group (chollima-group.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink