blueteamsec

545 readers

7 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1076

3

User-mode Accessors - a set of DDIs designed to safely access and manipulate user-mode memory from kernel-mode code. These DDIs address common security vulnerabilities and programming errors (learn.microsoft.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1077

3

The Operational Blueprint of Kimsuky APT for Cyber Espionage (www.aryaka.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1078

11

North Korea sent me abroad to be a secret IT worker. My wages funded the regime (www.bbc.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1079

2

U.S. Senate Confirms Sean Cairncross as the National Cyber Director (www.whitehouse.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1080

2

Exposing and Circumventing SNI-based QUIC Censorship of the Great Firewall of China (gfw.report)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1081

4

INSIDE QILIN RANSOMWARE AFFILIATE’s PANEL - loud noises! (theravenfile.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1082

2

Bootkitting Windows Sandbox (secret.club)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1083

7

From Laptops to Laundromats: How DPRK IT Workers Infiltrated the Global Remote Economy (dti.domaintools.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1084

3

NETGEAR Devices Hidden Page List (github.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1085

2

Leveraging ETW for Advanced Threat Detection (www.nextron-systems.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1086

2

Attack Graph Model Design Requirements and Examples (specterops.io)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1087

2

PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python (arxiv.org)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1088

3

Why continuous profiling is the fourth pillar of observability (www.datadoghq.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1089

3

Let’s get Digital! Updated Digital Identity Guidelines are Here! NIST (www.nist.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1090

3

Advisory on North Korean information technology (IT) workers - mid-July Canadian government (rcmp.ca)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1091

3

hashcat v7.0.0 (hashcat.net)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1092

3

Dreigingslandschap Vitale Infrastructuur (2025) - Threat Landscape Critical Infrastructure (2025) (www.nctv.nl)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1093

2

The 26th Annual Hawke Lecture: Counting and countering the cost of espionage - "Often it’s a combination of both, where cyber-espionage enables in-person espionage or in-person espionage begets cyber- (www.asio.gov.au)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1094

2

OpenImporter: Middleware utility for enriching and uploading data gathered with arbitrary collectors to more effectively map to existing Bloodhound database objects. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1095

1

Beyond the Patch: SharePoint Exploits and the Hidden Threat of IIS Module Persistence (www.splunk.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1096

1

Hunting for Secrets in Plain Sight: Leveraging Internal Logging and Monitoring Services (www.praetorian.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1097

1

UNC2891 Bank Heist: Physical ATM Backdoor & Linux Forensic Evasion Evasion (www.group-ib.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1098

1

CTO at NCSC Summary: week ending August 3rd (ctoatncsc.substack.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1099

1

#OFTW v3.0 - 'Objective for the We' v3.0 - London, July 2025 - slides and videos (objective-see.org)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1100

8

Plague: A Newly Discovered PAM-Based Backdoor for Linux (www.nextron-systems.com)

submitted 3 months ago by digicat to c/blueteamsec

9 comments fedilink