blueteamsec

674 readers
37 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1101
2
GlassWorm Goes Mac: Fresh Infrastructure, New Tricks (www.koi.ai)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1102
2
A Threat Hunter’s Perspective on MongoBleed (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1103
3
Roundcube Security updates 1.6.12 and 1.5.12 released - Fix Cross-Site-Scripting vulnerability via SVG’s animate tag reported by Valentin T., CrowdStrike (roundcube.net)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1104
2
VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion (unit42.paloaltonetworks.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1105
3
EvilNeko is a project to automate orchestration of containers and operationalize Browser in the Browser (BITB) attacks for red teams (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1106
4
ConsentFix: How a New OAuth Attack Bypasses Microsoft Entra Conditional Access - detection and mitigations (www.glueckkanja.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1107
4
The Kimwolf Botnet is Stalking Your Local Network (krebsonsecurity.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1108
3
The Holiday Whisper: Shai-Hulud 3.0 (snyk.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1109
6
Ballot CSC-31: Maximum Validity Reduction - the lifespan of code-signing certificates from 39 months to 460 days starting with March 1 (cabforum.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1110
4
Remote-BOF-Runner: Remote BOF Runner is a Havoc extension framework for remote execution of Beacon Object Files (BOFs) using a PIC loader made with Crystal Palace. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1111
3
100 Days of YARA 2026: detects on a default darkmode icon included in apps built with Delphi. This default icon is used with a large amount of malware and 'cracked software' installers as the default (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1112
3
100 Days of YARA 2026: Detects Bloody Wolf malicious PDF files (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1113
5
CTO at NCSC Summary: week ending January 4th (ctoatncsc.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1114
4
MSFinger: Microsoft Network Service Fingerprinting Tool (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1115
1
2025 CVE Data Review (jerrygamblin.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1116
1
Knownsec Data Breach: A Trove of Espionage Tradecraft with an Insider Narrative (www.resecurity.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1117
3
(2026-01-01) PowerShell Script To Reset The KrbTgt Account Password/Keys For Both RWDCs And RODCs (Update 8) (jorgequestforknowledge.wordpress.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1118
0
Расследования и киберразведка: рост числа атак на российский бизнес и новые инструменты хакеров - Investigations and Cyber Intelligence: Growing Attacks on Russian Businesses and New Hacker Tools (habr.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1119
2
100 Days of YARA 2026: Calculates hashes and size for PE files (excluding .NET executables). (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1120
1
100 Days of YARA 2026: Detects files using modern tool chains with older linkers which can indicate possible tampering. It is based on the mismatch in the PE RICH header and Optional header MSVC lnker (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1121
3
sentinel-mcp-github: A comprehensive Model Context Protocol (MCP) configuration for Microsoft Sentinel security operations, incident management, and threat hunting (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1122
2
RondoDoX Botnet Weaponizes React2Shell (www.cloudsek.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1123
6
MongoBleed: Critical MongoDB Vulnerability CVE-2025-14847 - custom Nuclei template (see below) designed to deterministically and safely detect if a MongoDB server is vulnerable to CVE-2025-14847 (www.wiz.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1124
2
DeepAudit: 人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。 让安全不再昂贵，让审计不再复杂。- An AI auditing team for everyone, making vulnerability discovery (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1125
3
[Chinese] - Intelligent traffic mapping and attack defense for encrypted and anonymous communication environments - encrypted traffic analysis, critical flow detection, traffic prediction etc. (www.ccf.org.cn)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›