blueteamsec

544 readers
8 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
976
2
APT-C-09（摩诃草）组织基于Mythic C2框架的新型攻击样本分析 - Analysis of new attack samples from the APT-C-09 (Maha Grass) organization based on the Mythic C2 framework (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
977
2
1Panel panel RCE arbitrary command execution (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
978
2
Detection Engineering Framework - A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
979
2
2025年中网络安全漏洞威胁态势研究报告 - 2025 Cybersecurity Vulnerability Threat Landscape Research Report (static01-www.qianxin.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
980
11
ICE Washington, D.C. leads international takedown of BlackSuit ransomware infrastructure (www.ice.gov)
submitted 3 months ago by digicat to c/blueteamsec
4 comments fedilink
981
2
CTO at NCSC Summary: week ending August 10th (ctoatncsc.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
982
5
Should you trust your zero trust? Bypassing Zscaler posture checks (www.synacktiv.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
983
2
ChromeAlone: A tool to transform Chromium browsers into a C2 Implant (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
984
4
oauthseeker: A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
985
4
Shared secret: EDR killer in the kill chain (news.sophos.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
986
3
Greedy Bear —Massive Crypto Wallet Attack Spans Across Multiple Vectors (blog.koi.security)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
987
3
ED 25-02: Mitigate Microsoft Exchange Vulnerability | CISA - Emergency Directive (www.cisa.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
988
1
New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer (unit42.paloaltonetworks.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
989
2
fustercluck: POC tool to abuse Windows server failover clusters (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
990
2
Breaking ETW flows with Trace Tainter (blog.sektor7.net)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
991
1
Exploiting Retbleed in the real world (bughunters.google.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
992
1
Bittensor theft campaign via PyPI (about.gitlab.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
993
1
Active Exploitation of SonicWall VPNs (www.huntress.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
994
2
Trust but Verify: An Assessment of Vulnerability Tagging Services | USENIX (www.usenix.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
995
3
delete-self-poc: A way to delete a locked file, or current running executable, on disk on Windows (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
996
2
ScarCruft’s New Language: Whispering in PubNub, Crafting Backdoor in Rust, Striking with Ransomware (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
997
1
Subtle Snail (UNC1549, TA455), an Iran-nexus espionage group linked to the Eclipsed Wasp (Charming Kitten) network, has been active since at least November 2022 - IoCs (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
998
1
WSL-Payloads: A small How-To on creating your own weaponized WSL file (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
999
1
Detection Engineering: Practicing Detection-as-Code - Validation - Part 3 (blog.nviso.eu)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1000
1
Linux-persistence: A no-reboot, in-memory Linux persistence PoC leveraging namespace joining, user-namespace elevation, and self‑deletion. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›