blueteamsec

675 readers

17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1326

1

AdaptixC2-gopher: Uses brute force to locate the configuration within an AdaptixC2's gopher agent. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1327

3

When adversaries bring their own virtual machine for persistence (redcanary.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1328

9

Smallest SSHD backdoor - Survives apt update, Does not create any new file and Does not use authorized_keys or PAM. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1329

4

Evolution of Composite Cyber Threats: 2025 Analysis and 2026 Key Response Strategies (medium.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1330

2

AZexec: The Azure Execution Tool - a PowerShell-based Azure/Entra ID enumeration tool designed to provide netexec-style output for cloud environments. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1331

3

Cybersecurity Performance Goals 2.0 for Critical Infrastructure | CISA (www.cisa.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1332

2

Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack (www.cyberark.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1333

2

Detecting Unauthenticated AWS OSINT and S3 Enumeration (deceptiq.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1334

2

How to detect Mythic activity with NDR-class solutions (securelist.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1335

2

Decompiling run-only AppleScripts (pberba.github.io)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1336

2

How data science can boost your detection engineering maintenance and keep you from herding sheep (medium.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1337

2

Peters & Cornyn Reintroduce Legislation to Protect Commercial Satellites from Cybersecurity Threats (www.hsgac.senate.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1338

2

Patch Wednesday: Root Cause Analysis with LLMs (www.akamai.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1339

3

Detecting malicious pull requests at scale with LLMs (www.datadoghq.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1340

2

MC1193689 - Microsoft baseline security mode for Office, SharePoint, Exchange, Teams, and Entra | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1341

3

Latrodectus BackConnect (www.netresec.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1342

2

BpfJailer: eBPF Mandatory Access Control (lpc.events)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1343

6

thirdeye: The Third Eye 👁⃤ - unmask protected windows from user mode (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1344

3

MicroSpark: Testing Voltage Glitches on Intel Microcode (download.vusec.net)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1345

3

wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting, (github.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1346

3

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited (www.wiz.io)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1347

2

PyStoreRAT: A New AI-Driven Supply Chain Malware Campaign Targeting IT & OSINT Professionals (www.morphisec.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1348

1

Blog: Task Injection – Exploiting agency of autonomous AI agents (bughunters.google.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1349

6

Fake Leonardo DiCaprio Movie Torrent Drops Agent Tesla Through Layered PowerShell Chain (www.bitdefender.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1350

3

phantom-keylogger: Phantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink