blueteamsec

675 readers

10 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1376

1

Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users (securitylabs.datadoghq.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1377

1

Hamas-Affiliated Ashen Lepus Targets Middle Eastern Diplomatic Entities With New AshTag Malware Suite (unit42.paloaltonetworks.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1378

1

SHADOW-VOID-042 Targets Multiple Industries with Void Rabisu-like Tactics (www.trendmicro.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1379

1

UK clamps down on China-based companies for reckless and irresponsible activity in cyberspace (www.gov.uk)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1380

1

PowerShell 5.1: Preventing script execution from web content - Microsoft Support (support.microsoft.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1381

2

Password manager provider fined £1.2m by ICO for data breach affecting up to 1.6 million people in the UK (ico.org.uk)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1382

2

Charming Kitten Leak Continues: Payroll Data and a Stolen IAEA Document (blog.narimangharib.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1383

4

SessionHop: Windows Session Hijacking via COM (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1384

5

Updating our guidance on security certificates, TLS and IPsec (www.ncsc.gov.uk)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1385

3

Malicious Apprentice | How Two Hackers Went From Cisco Academy to Cisco CVEs (www.sentinelone.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1386

2

AWS re:Invent 2025 - Make Attackers Cry: Outsmart Them With Deception (SEC326) (www.youtube.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1387

3

Captch-ya if you can (strikeready.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1388

4

ConsentFix: Browser-native ClickFix hijacks OAuth grants (pushsecurity.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1389

1

Cyber deception trials: what we’ve learned so far (www.ncsc.gov.uk)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1390

3

PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182 (www.huntress.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1391

8

Senior Manager for Government Contractor Charged in Cybersecurity Fraud Scheme (www.justice.gov)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1392

3

Justice Department Announces Actions to Combat Two Russian State-Sponsored Cyber Criminal Hacking Groups (www.justice.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1393

2

OGhidra: OGhidra bridges Large Language Models (LLMs) via Ollama with the Ghidra reverse engineering platform, enabling AI-driven binary analysis through natural language. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1394

2

AI-Automated Threat Hunting Brings GhostPenguin Out of the Shadows (www.trendmicro.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink

1395

1

CVE-2025-55182 Exploitation Hits the Smart Home - React (www.bitdefender.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1396

1

KustoHawk: KustoHawk is a lightweight incident triage and response tool designed for effective incident response in Microsoft Defender XDR and Microsoft Sentinel environments. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1397

3

Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure (www.ic3.gov)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1398

1

AI powered SAST : The New Frontier? (devansh.bearblog.dev)

submitted 4 months ago by N7x to c/blueteamsec

0 comments fedilink

1399

2

GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries (www.recordedfuture.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1400

3

New BYOVD loader behind DeadLock ransomware attack (blog.talosintelligence.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink