blueteamsec

428 readers
29 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
76
4
MSSQLHound: PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph (github.com)
submitted 5 days ago by digicat to c/blueteamsec
0 comments fedilink
77
1
LOLRMM is a curated list of Remote Monitoring and Management (RMM) - now with SIEM detections - see comment for important PR for KQL (lolrmm.io)
submitted 3 days ago* (last edited 3 days ago) by digicat to c/blueteamsec
1 comments fedilink
78
1
깃헙브 데이터 저장소를 악용한 김수키(Kimsuky) 전자세금계산서 사칭 악성코드 공격-전자세금계산서.pdf.lnk(2025.7.23) - Kimsuky Electronic Tax Invoice Fraud Attack Exploiting GitHub Data Repository - Electronic Tax Invoice.pdf.lnk (wezard4u.tistory.com)
submitted 3 days ago by digicat to c/blueteamsec
0 comments fedilink
79
1
유튜브 동영상 다운로드 사이트에서 유포 중인 Proxyware 악성코드 - Proxyware malware circulating on YouTube video download sites (asec.ahnlab.com)
submitted 3 days ago by digicat to c/blueteamsec
0 comments fedilink
80
3
MaaS Appeal: An Infostealer Rises From The Ashes — NOVABLIGHT is a NodeJS-based Malware-as-a-Service (MaaS) information stealer developed and sold by a threat group that demonstrates French-language (www.elastic.co)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
81
3
GOLD BLADE remote DLL sideloading attack deploys RedLoader (news.sophos.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
82
3
Privacy Enhancing Technologies Symposium videos (youtube.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
83
3
United States files a civil complaint in the Northern District of Texas seeking the forfeiture of over $1.7 million worth of cryptocurrency seized by Dallas FBI (www.justice.gov)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
84
4
Rooting the TP-Link Tapo C200 Rev.5 (quentinkaiser.be)
submitted 5 days ago by digicat to c/blueteamsec
1 comments fedilink
85
4
Taming the Windows Module Loading for Stealthy Injection (youtu.be)
submitted 5 days ago by digicat to c/blueteamsec
1 comments fedilink
86
4
No[one|thing] will be left behind — Manual guide to patch your the exiled SharePoint/Exchange server (testbnull.medium.com)
submitted 5 days ago by digicat to c/blueteamsec
0 comments fedilink
87
4
theProtector: Linux Bash Script for the Paranoid Admin on a Budget - real-time monitoring and active threat response (github.com)
submitted 5 days ago by digicat to c/blueteamsec
0 comments fedilink
88
2
LARVA-208 compromised the Steam game Chemia to distribute multiple malware families - Indicators of Compromise (github.com)
submitted 4 days ago by digicat to c/blueteamsec
1 comments fedilink
89
1
Two (or Too Many) Cheers for UN Cyber Diplomacy? (carnegieendowment.org)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
90
2
Umbral Stealer config extractor.ipynb - Config extractor of obfuscated umbral stealer samples and CLEANED (de4dot) samples writen in DotNet. hashes (github.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
91
2
TPwSav.sys Driver - Arbitrary Physical Memory Read and Write Primitive (zeifan.my)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
92
2
Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal - The campaign leverages malicious advertisements to lure victims to install fake applications which impersonate ~ 50 common apps (research.checkpoint.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
93
2
Auto-Color Backdoor: the threat actor had exploited CVE-2025-31324 - Over the course of three days, a threat actor gained access to the customer’s network, attempted to download suspicious files (www.darktrace.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
94
2
Mistwalker: Create Entra Global Admin accounts from On-Prem (github.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
95
2
PENGUIN (Personalized EmulatioN Generated Using Instrumented Analysis) takes a target centric approach to rehosting using a precise and tailored specification of the rehosting process (github.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
96
2
Revisiting UNC3886 Tactics to Defend Against Present Risk - an APT group that has historically targeted including telco, gov tech and defense, with a recent attack against Singapore (www.trendmicro.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
97
2
Consumer Beware! Exploring Data Brokers' CCPA Compliance (arxiv.org)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
98
2
Important Security Update - "statement to inform you of an isolated security incident involving a malware-infected version of our Configuration Tool for the OP1w 4k v2 mouse." (www.endgamegear.com)
submitted 4 days ago by digicat to c/blueteamsec
0 comments fedilink
99
3
obfus.h: Macro-header for compile-time C obfuscation (tcc, win x86/x64) (github.com)
submitted 5 days ago by digicat to c/blueteamsec
1 comments fedilink
100
3
Stack Overflows, Heap Overflows, and Existential Dread (SonicWall SMA100 CVE-2025-40596, CVE-2025-40597 and CVE-2025-40598) (labs.watchtowr.com)
submitted 5 days ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›