blueteamsec

632 readers
58 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1226
3
Hunting for EDR-Freeze (blog.axelarator.net)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1227
3
CTO at NCSC Summary: week ending November 2nd (ctoatncsc.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1228
1
APT | 伪猎者组织NAKSOO远控木马加密通信分析 - APT | Analysis of the encrypted communication of the NAKSOO remote control Trojan by the pseudo-hunter group. (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1229
1
APT-C-60（伪猎者）的近期活动分析与技术演进 - Recent Activity Analysis and Technological Evolution of APT-C-60 (False Hunter) (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1230
2
NTLMPasswordChanger: PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1231
2
Exploiting Ghost SPNs and Kerberos Reflection for SMB Privilege Elevation (www.semperis.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1232
1
ShareHound: An OpenGraph Collector for Network Shares (specterops.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1233
2
Ukrainian National Extradited from Ireland in Connection with Conti Ransomware (www.justice.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1234
4
AdminSDHolder Misconceptions & Misconfigurations (specterops.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1235
3
A Guide to Understanding China’s Sophisticated Typhoon Cyber Campaigns (mccraryinstitute.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1236
1
UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities (arcticwolf.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1237
2
BRONZE BUTLER exploits Japanese asset management software vulnerability (news.sophos.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1238
3
Ukrainian organizations still heavily targeted by Russian attacks (www.security.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1239
2
Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack (unit42.paloaltonetworks.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1240
1
AL25-016 Internet-accessible industrial control systems (ICS) abused by hacktivists - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1241
2
Vulnerabilities in LUKS2 disk encryption for confidential VMs (blog.trailofbits.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1242
2
Creating a "Two-Face" Rust binary on Linux (www.synacktiv.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1243
2
APT-C-08（蔓灵花）近期使用application文件钓鱼攻击活动分析 - Analysis of Recent Phishing Attacks Using Application Files in APT-C-08 (Manlingflower) (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1244
2
ATT&CK v18: Detection Strategies, More Adversary Insights, (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1245
2
HWP as an Attack Surface: What Hancom’s Hangul Word Processor Means for South Korea’s Cyber Posture as a US Ally (www.38north.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1246
2
US company with access to biggest telecom firms uncovers breach by nation-state hackers (www.reuters.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1247
1
Earth Estries alive and kicking (bartblaze.blogspot.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1248
3
TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition (tee.fail)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1249
1
New Loader Executing TorNet and PureHVNC – IIJ Security Diary (in English) (sect.iij.ad.jp)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1250
5
Hack-cessibility: When DLL Hijacks Meet Windows Helpers (trustedsec.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›