blueteamsec

631 readers
52 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1176
2
Dissecting the Infection Chain: Technical Analysis of the Kimsuky JavaScript Dropper (blog.pulsedive.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1177
3
We share global infrastructure tracking techniques, tools to decrypt VShell communications, and insights into attacker behaviors to strengthen threat detection and incident response capabilities. (www.nviso.eu)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1178
3
NVISO analyzes VShell post-exploitation tool (www.nviso.eu)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1179
4
A Researcher Came Knocking, and Taught China a Lesson in How to Manage Vulnerabilities -- and Researchers (nattothoughts.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1180
3
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools (cloud.google.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1181
4
Russian Cybercrime & State Militarization: Marching Together in the Digital Age (analyst1.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1182
3
Defeating KASLR by Doing Nothing at All (googleprojectzero.blogspot.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1183
3
Treasury Sanctions DPRK Bankers and Institutions Involved in Laundering Cybercrime Proceeds and IT Worker Funds (home.treasury.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1184
3
How RMM abuse fuelled Medusa & DragonForce attacks (zensec.co.uk)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1185
0
Curly COMrades: Evasion and Persistence via Hidden Hyper-V Virtual Machines (www.bitdefender.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1186
10
Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says (chicago.suntimes.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1187
1
Inside the attack chain: Threat activity targeting Azure Blob Storage (www.microsoft.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1188
3
Demystifying Zero Trust (www.ncsc.gov.uk)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1189
1
Using PAWs in OT environments (www.ncsc.gov.uk)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1190
3
Scaling Security Testing by Addressing the Reachability Gap (gpsapia.github.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1191
1
Graph Api Overwhelm (www.alphaf0x.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1192
2
RDSEED Failure on AMD “Zen 5” Processors (www.amd.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1193
3
Remote access, real cargo: cybercriminals targeting trucking and logistics (www.proofpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1194
1
Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure (research.checkpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1195
2
Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody (krebsonsecurity.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1196
2
SilentButDeadly: SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform (WFP). (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1197
2
The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1198
1
Identity Management for Agentic AI by OpenID (openid.net)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1199
2
You are worker #41: Lophiid Honeypot Caught an Automated AI Attack Swarm (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1200
1
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates (expel.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›