blueteamsec

674 readers
17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
726
2
Cobaltstrike_BOFLoader: open source port/reimplementation of the Cobalt Strike BOF Loader as is (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
727
10
How LLMs Feed Your RE Habit: Following the Use-After-Free Trail in CLFS (clearbluejar.github.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
728
6
APT28: Geofencing as a Targeting Signal (CVE-2026-21509 Campaign) (blog.synapticsystems.de)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
729
0
Building a Scalable Windows Driver Vulnerability Analyzer (Part 2) (threatunpacked.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
730
5
Public Safety and Homeland Security Bureau Highlights Best Practices for Defending Against Ransomware Attacks (www.fcc.gov)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
731
6
Security incident on plone GitHub org with force pushes (www.openwall.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
732
6
Incident Report: CVE-2024-YIKES (nesbitt.io)
submitted 2 months ago by digicat to c/blueteamsec
2 comments fedilink
733
4
Rust at Scale: An Added Layer of Security for WhatsApp (engineering.fb.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
734
2
Tech Dependencies Undermine UK National Security (www.rusi.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
735
3
Harassment, Scare Tactics, & Why Victims Should Never Pay ShinyHunters (blog.unit221b.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
736
6
ClawdBot Skills Just Ganked Your Crypto (opensourcemalware.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
737
2
Ricochet Chollima APT Adversary Simulation (medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
738
2
Hunting Lazarus Part III: The Infrastructure That Was Too Perfect (redasgard.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
739
3
1-Click RCE via Authentication Token Exfiltration From gatewayUrl in openclaw (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
740
3
LOLAPI - Living Off The Land APIs (themagicclaw.github.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
741
3
Extensions can leak full tab URLs using declarativeNetRequest via side-channel attack (issues.chromium.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
742
3
Operation Neusploit: APT28 Uses CVE-2026-21509 (www.zscaler.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
743
2
Warbird in modern Windows is a surprisingly shallow system, with relatively few tricks that are actually in use. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
744
2
Demonstration of Warbird Heap Execute (gist.github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
745
3
The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit (www.rapid7.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
746
1
From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized (blog.virustotal.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
747
3
Threat-Hunting: Threat Hunting queries of multiple platforms - CrowdStrike/KQL (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
748
1
GhostKatz: Dump LSASS via physical memory read primitives in vulnerable kernel drivers (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
749
8
How the KGB Discovered Computer Viruses (fromcyberia.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
750
2
CERT-UA Danger Bulletin": UAC-0001 (APT28) carries out cyberattacks against Ukraine and EU countries using the CVE-2026-21509 exploit (CERT-UA#19542) (cert.gov.ua)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›