blueteamsec

673 readers
39 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
951
4
OffByWon: Network Fuzzing Framework (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
952
3
CTO at NCSC Summary: week ending January 18th (ctoatncsc.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
953
3
Analyzing React2Shell Threat Actors (www.f5.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
954
2
APT-C-06（DarkHotel）利用U盘内安装程序传播恶意载荷的攻击活动报告 - Report on APT-C-06 (DarkHotel) attack activity that uses an installer on a USB drive to spread malicious payloads. (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
955
5
The Design & Implementation of Sprites (fly.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
956
5
BodySnatcher (CVE-2025-12420): A Broken Authentication and Agentic Hijacking Vulnerability in ServiceNow (appomni.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
957
3
Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain (isc.sans.edu)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
958
3
Sicarii Ransomware: Truth vs Myth (research.checkpoint.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
959
4
WhisperPair: Hijacking Bluetooth Accessories Using Google Fast Pair (whisperpair.eu)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
960
5
Predator iOS Spyware: Undocumented Anti-Analysis Techniques (www.jamf.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
961
3
Silent Push Uncovers New Magecart Network: Disrupting Online Shoppers Worldwide (www.silentpush.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
962
10
UNO reverse card: stealing cookies from cookie stealers (www.cyberark.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
963
3
Keeping the Kimwolf at bay: putting a leash on a massive DDoS Botnet. (www.linkedin.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
964
4
UAT-8837 targets critical infrastructure sectors in North America (blog.talosintelligence.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
965
10
Keylogger targets 200,000+ employees at major US bank (sansec.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
966
2
BlackBasta admin identified and added to EU most wanted list (eumostwanted.eu)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
967
1
SDFlags: The Log Field I Wasn't Looking at That Revealed How BloodHound Really Works (www.huntress.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
968
1
LOTUSLITE: Targeted espionage leveraging geopolitical themes (www.acronis.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
969
6
Releasing Rainbow Tables to Accelerate Protocol Deprecation (cloud.google.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
970
12
Exclusive: Beijing tells Chinese firms to stop using US and Israeli cybersecurity software, sources say (www.reuters.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
971
2
🇷🇺 COMmand & Evade: Turla's Kazuar v3 Loader (r136a1.dev)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
972
5
Inside RedVDS: How a single virtual desktop provider fueled worldwide cybercriminal operations (www.microsoft.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
973
4
Microsoft disrupts global cybercrime subscription service responsible for millions in fraud losses (blogs.microsoft.com)
submitted 2 months ago by digicat to c/blueteamsec
1 comments fedilink
974
3
Designing safer links: secure connectivity for operational technology (www.ncsc.gov.uk)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
975
3
TREC: APT Tactic / Technique Recognition via Few-Shot Provenance Subgraph Learning - from 2024 (arxiv.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›