blueteamsec

673 readers

38 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

926

3

nova-claude-code-protector: NOVA - Claude Code Protection System against prompt injection attacks (github.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

927

6

5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems (socket.dev)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

928

4

Suricata 8.0.3 and 7.0.14 released! -four high CVEs resolved (suricata.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

929

6

Inside a Malicious Push Network: What 57M Logs Taught Us (www.infoblox.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

930

4

CVE-2026-0227 PAN-OS: Firewall Denial of Service (DoS) in GlobalProtect Gateway and Portal (security.paloaltonetworks.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

931

3

global_struct_dissector: Global Struct Dissector is an IDA Pro plugin that renders data in the disassembly view in a clear, readable format with explicit field names, offsets, and values. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

932

5

Unauthenticated HTTP Server Allows Arbitrary Command Execution in open source AI coding agent (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

933

2

Dissecting CrashFix: KongTuke's New Toy (www.huntress.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

934

4

Infrastructure in the Shadows - How Two Leaks Unmasked the Criminal Network of Yalishanda aka Media Land, and BlackBasta (analyst1.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

935

3

New Infostealer Campaign Targets Users via Spoofed Software Installers (blog.virustotal.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

936

3

Singapore court rejects application by Chinese suspect wanted in US for global malware crimes (www.channelnewsasia.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

937

5

The Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multi-Step Malware (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

938

5

Jordanian Man Admits Selling Unauthorized Access to Computer Networks of 50 Companies (www.justice.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

939

6

GhostWrite: Edit files without leaving timestamp traces. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

940

10

6-day and IP Address Certificates are Generally Available (letsencrypt.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

941

5

MalwareBytes internals (incomplete) (malwaresourcecode.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

942

3

Kerberos Authentication Relay Via CNAME Abuse (cymulate.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

https://github.com/BenZamir/MITM6-Kerberos-CNAME-Abuse

943

2

Security-Detections-MCP: MCP to help Defenders Detection Engineer Harder and Smarter (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

944

2

StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU’s Stack Engine (cispa.de)

submitted 2 months ago* (last edited 2 months ago) by digicat to c/blueteamsec

0 comments fedilink

945

5

Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wild (patchstack.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

946

3

AgentGuardian: Learning Access Control Policies to Govern AI Agent Behavior (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

947

5

Using NTLM Reflection to Own Active Directory (CVE-2025-33073) (www.depthsecurity.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

948

3

Rust VBS Enclave DLL in VTL1 (Windows Secure Enclaves) (fluxsec.red)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

949

3

One WSL BOF to Rule Them All (specterops.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

950

4

OffByWon: Network Fuzzing Framework (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink