blueteamsec

544 readers

9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

776

4

rustdllproxy: Crate for generating and hooking into proxy DLLs with Rust. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

777

2

Profiling Sea Turtle: Tactics, History & Defenses - "Sea Turtle is a Türkiye-nexus threat actor known for conducting state-affiliated espionage operations since at least 2017." (www.invictus-ir.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

778

5

Investigation Report: APT36 Malware Campaign Using Desktop Entry Files and Google Drive Payload Delivery (www.cloudsek.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

779

6

🌀 Fast-Flux DNS: How Malware Uses DNS to Stay Invisible (medium.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

780

2

From Campus to C2: Tracking a Persistent Chinese Operation Against Vietnamese Universities (ctrlaltint3l.github.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

781

4

Uncovering the Chinese Proxy Service Used in APT Campaigns (spur.us)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

782

5

Chinese National Sentenced to Prison for Deploying Destructive Computer Code on Ohio-based Company’s Global Network (www.justice.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

783

5

The head of a hacking group that also targeted BTS's Jungkook and the president has been arrested and extradited by the Ministry of Justice - " repatriated Chinese national" (www.yna.co.kr)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

https://www.sportskeeda.com/us/k-pop/news-head-hacking-ring-reportedly-stole-8-4-billion-won-hybe-shares-bts-jungkook-arrested

784

7

You don’t find ManualFinder, ManualFinder finds you - "we’re seeing activity where PUPs are dropping highly suspicious files, executing unexpected commands, and turning hosts into residential proxies" (expel.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

785

4

Detecting CVE-2025-43300: A Deep Dive into Apple's DNG Processing Vulnerability | Matt Suiche (www.msuiche.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

786

18

Phishing Emails Are Now Aimed at Users and AI Defenses - "Clearly written in the style of Grok, Gemini or ChatGPT style prompts,. nothing to do with luring the users. Instead.. n AI prompt-injection" (malwr-analysis.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

787

2

REcover: towards recovering object files from stripped binary executables (link.springer.com)

submitted 2 months ago* (last edited 2 months ago) by digicat to c/blueteamsec

0 comments fedilink

https://github.com/huku-/recover

788

3

SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov (github.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

789

3

Countering EDRs With The Backing Of Protected Process Light (PPL) (www.zerosalarium.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

790

3

Platform SSO configuration guide for macOS devices using Microsoft Intune - "configure Platform SSO to enable single sign-on (SSO) for your macOS devices using passwordless authentication, Microsoft E (learn.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

791

3

2025 Minimum Elements for a Software Bill of Materials (SBOM) - CISA is requesting public comment on its updated guidance on Software Bill of Materials (SBOM) (www.cisa.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

792

3

GraphApiAuditEvents: The new Graph API Logs (kqlquery.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

793

4

MC1133508 - Microsoft Teams Integration with Microsoft Defender for Office Tenant Allow/Block List for blocking domains | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

794

3

MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

795

3

Limiting Onmicrosoft Domain Usage for Sending Emails | Microsoft Community Hub (techcommunity.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

796

2

Think before you Click(Fix): Analyzing the ClickFix social engineering technique (www.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

797

2

The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War (www.cloudsek.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

798

1

A new, cheaper Mac stealer emerges (moonlock.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

799

4

The Masked Man in Cyber Attacks: Analysis of the DupeDog Software Framework (mp.weixin.qq.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

800

4

APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files (www.cyfirma.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink