blueteamsec

675 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1176
5
To sign or not to sign: Practical vulnerabilities in GPG & friends (media.ccc.de)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1177
3
DNGerousLINK: A Deep Dive into WhatsApp 0-Click Exploits on iOS and Samsung Devices (media.ccc.de)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1178
2
39C3: Power Cycles - media.ccc.de (media.ccc.de)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1179
3
Extracting Syscalls from a Suspended Process (cymulate.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1180
3
Lateral Movement via Checkmk (pentest.party)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1181
1
The Role of Artificial Intelligence in SOC Operations: Adoption, Perception, and Workforce Impact (ceur-ws.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1182
2
Vectored Exception Handling Squared (VEH²) in Rust | Patchless AMSI Bypass Research (fluxsec.red)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1183
0
gpg.fail (gpg.fail)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1184
1
CVE-2025-54322 - XSpeeder (SXZOS) pre-auth RCE - Unauthenticated Root RCE affecting ~70,000+ Hosts - Xspeeder is a Chinese networking vendor known for edge devices like routers, SD-WAN appliances etc. (pwn.ai)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1185
1
Cross-Site ETag Length Leak - can be used as an XS-Leak oracle (blog.arkark.dev)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1186
2
UAC-0184 | "The Dark Side of the Fallen Files" Pitching Operation - They attack Ukrainian military personnel by deploying malicious LNK files or PowerShell scripts, leading to Remcos infections. (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1187
4
Registry Writes Without Registry Callbacks (deceptiq.com)
submitted 3 months ago by digicat to c/blueteamsec
1 comments fedilink
1188
1
monitors a given folder and dumps the contents to a dump directory - useful to obtain changed/dropped/extracted files during dynamic malware analysi (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1189
1
ColdFusion++ Christmas Campaign: Catching a Coordinated Callback Calamity (www.labs.greynoise.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1190
1
Linux.Detection.CVE202514847.MongoBleed :: Velociraptor (docs.velociraptor.app)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1191
1
FindExposedMongoDB.kql - Find Internet exposed assets, onboard to MDE and mongoDB installed. Based on common network port or TVM data (gist.github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1192
2
MalwareTracesGenerator: Generate malware traces for detection tests (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1193
9
‘All brakes are off’: Russia’s attempt to rein in illicit market for leaked data backfires (www.theguardian.com)
submitted 3 months ago by digicat to c/blueteamsec
1 comments fedilink
1194
3
CTO at NCSC Summary: week ending December 28th (ctoatncsc.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1195
2
HP Aruba Privileged Escalation Dec 2025 (thecontractor.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1196
3
Continuously hardening ChatGPT Atlas against prompt injection attacks - "However, prompt injection remains an open challenge for agent security, and one we expect to continue working on for years" (openai.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1197
3
Ransomware cyber attack on Romanian Waters (www.dnsc.ro)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1198
3
Mapping “Fly”, a threat actor with links to Russian Market’s infrastructure (www.intrinsec.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1199
3
Annual Report to Congress: Military and Security Developments Involving the People's Republic of China 2025 - "Throughout 2024, PLA cyber actors almost certainly maintained and developed further" (media.defense.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1200
5
Reviving Discarded Vulnerabilities: Exploiting Previously Unexploitable Linux Kernel Bugs Through Control Metadata Fields (lujie.ac.cn)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›