blueteamsec

674 readers

17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

826

0

HoneyMyte updates CoolClient backdoor, uses new data stealing tools (securelist.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

827

1

Novel Fake CAPTCHA Chain Delivering Amatera Stealer (blackpointcyber.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

828

3

Diverse Threat Actors Exploiting Critical WinRAR Vulnerability CVE-2025-8088 (cloud.google.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

829

3

Saudi dissident awarded $4.1 million by UK court for hacking, assault 'by Saudi Arabia' (www.reuters.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

830

1

Investigation into International “ATM Jackpotting” Scheme and Tren de Aragua results in Additional Indictment and 87 Total Charged Defendants (www.justice.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

831

1

Advisory - Check Point Harmony Local Privilege Escalation (CVE-2025-9142) (blog.amberwolf.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

832

3

Resurgence of a multi‑stage AiTM phishing and BEC campaign abusing SharePoint (www.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

833

7

NSA Releases First in Series of Zero Trust Implementation Guidelines (www.nsa.gov)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

834

3

MacSync Stealer Returns: SEO Poisoning and Fake GitHub Repositories Target macOS Users (daylight.ai)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

835

1

To the past and beyond: Andariel’s latest arsenal and cyberattacks (labs.withsecure.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

836

1

HuntCyberArk: CyberArk Security Audit (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

837

1

TopazTerminator: Just another EDR killer (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

838

1

Don't Judge a PNG by Its Header: PURELOGS Infostealer Analysis (www.swisspost-cybersecurity.ch)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

839

1

PDFSIDER Malware - Exploitation of DLL Side-Loading for AV and EDR Evasion (www.resecurity.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

840

3

Malicious-PixelCode: Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing them inside images etc with ldr (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

841

1

GitLab Patch Release: 18.8.2, 18.7.2, 18.6.4 - "allowed an individual with existing knowledge of a victim's credential ID to bypass two-factor authentication by submitting forged device responses." (about.gitlab.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

842

1

chisel-ng: Chisel new generation, written in rust. SSH under WSS with some customization. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

843

1

windbg-copilot: WinDbg Copilot - Agentic Debugging extension (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

844

5

LiveContainer: Run iOS apps without actually installing them! (github.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

845

2

sec-context: AI Code Security Anti-Patterns distilled from 150+ sources to help LLMs generate safer code. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

846

1

When Ransomware Makes a Mistake Inside INC Ransomware’s Backup Infrastructure (cybercentaurs.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

847

2

The Next Frontier of Runtime Assembly Attacks: Leveraging LLMs to Generate Phishing JavaScript in Real Time (unit42.paloaltonetworks.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

848

1

Watering Hole Attack Targets EmEditor Users With Information-Stealing Malware (www.trendmicro.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

849

1

Defender Timeline Downloader: Extending Data Retention for Incident Response (www.binaryanalys.is)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

850

2

Living Off the Web: How Trust Infrastructure Became a Malware Delivery Interface (censys.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink