blueteamsec

544 readers
8 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
951
2
Stardust Chollima APT Adversary Simulation (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
952
1
Detection Engineering: Practicing Detection-as-Code - Validation - Part 3 (blog.nviso.eu)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
953
1
How to store Defender XDR data for years in Sentinel data lake without expensive ingestion cost (jeffreyappel.nl)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
954
7
finch: Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
955
4
Efimer Trojan delivered via email and hacked WordPress websites (securelist.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
956
10
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions (blog.amberwolf.com)
submitted 3 months ago by digicat to c/blueteamsec
1 comments fedilink
957
5
Vulnerability Management Program - How to implement SLA and its processes (securityautopsy.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
958
3
EPSS Pulse from RunZero - identify big shifts in EPSS (www.runzero.com)
submitted 3 months ago by harry to c/blueteamsec
0 comments fedilink
959
2
Buttercup is now open-source - Buttercup is a fully automated, AI-driven system for discovering and patching vulnerabilities in open-source software. (blog.trailofbits.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
960
4
Noise-Coded Illumination for Forensic and Photometric Video Analysis (dl.acm.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
961
4
pompelmi: Lightweight file upload scanner with optional YARA rules. Works out‑of‑the‑box on Node.js; supports browser via a simple HTTP “remote engine”. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
962
9
awswaf: AWS WAF Solver, full reverse implemented in 100% Python & Golang. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
963
8
Custom firmware for sale for Flipper zero - "1995.- USD - support for Peugeot/Citroen/Volkswagen and new Ford models" (www.ifoedit.com)
submitted 3 months ago by digicat to c/blueteamsec
2 comments fedilink
964
5
"From Bitmaps to Payloads" We dissected a stego-heavy .NET loader embedding BMP headers inside images to drop payloads via CVE-2017-11882. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
965
2
mac_apt - macOS (and iOS) Artifact Parsing Tool - v1.26.1 - "now supports processing Velociraptor collections" (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
966
4
WinRAR 7.13 Final released - "Another directory traversal vulnerability, differing from that in WinRAR 7.12, has been fixed." (self.blueteamsec)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
967
3
Internet Organised Crime Threat Assessment (IOCTA) – Strategic, policy and tactical updates on the fight against cybercrime | Europol (www.europol.europa.eu)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
968
2
Dissecting the CastleBot Malware-as-a-Service operation (www.ibm.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
969
6
CastleLoader: a versatile malware loader, has infected 469 devices since May 2025, leveraging Cloudflare-themed ClickFix phishing and fake GitHub repositories to deliver information stealers and RATs (blog.polyswarm.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
970
6
Leak Reveals the Workaday Lives of North Korean IT Scammers (www.wired.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
971
3
Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks (www.seqrite.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
972
2
BeaconatorC2: BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
973
3
Final Competition Winners Announcement - AI Cyber Challenge - "competitors’ systems discovered 54 unique synthetic vulnerabilities in the Final Competition’s 70 challenges. Of those, they patched 43." (aicyberchallenge.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
974
2
From Phishing Sites to SilverFox: A Practical Infrastructure Expansion Analysis (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
975
2
Weaponization of religious symbols, Mimo gang exploits Microsoft SharePoint RCE vulnerability to deliver 4L4MD4r ransomware (ti.qianxin.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›