blueteamsec

677 readers

26 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1451

2

React2Shell-CVE-2025-55182-original-poc: Original Proof-of-Concept's for React2Shell CVE-2025-55182 (github.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1452

3

Operation DupeHike : UNG0902 targets Russian employees with DUPERUNNER and AdaptixC2 (www.seqrite.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1453

2

Fatemeh Sedighian Kashi & Mohammad Bagher Shirinkar – Rewards For Justice (rewardsforjustice.net)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1454

4

macOS Stealers: Technical Analysis of Credential Harvesting (deceptiq.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1455

1

Burp CVE-2025-55182CVE-2025-66478 React2Shell bambda (github.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1456

2

China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182) (aws.amazon.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1457

2

Microsoft Silently Patched CVE-2025-9491 - We Think Our Patch Provides More Security (blog.0patch.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1458

3

摩诃草（APT-Q-36）利用 WebSocket 的新木马 StreamSpy 分析 - Analysis of the new Trojan StreamSpy using WebSocket, which is called Mahayana (APT-Q-36). (mp.weixin.qq.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1459

3

Security Advisory: CVE-2025-66478: A critical vulnerability has been identified in the React Server Components (RSC) protocol. The issue is rated CVSS 10.0 and can allow remote code execution (nextjs.org)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1460

3

French NGO Reporters Without Borders targeted by Calisto in recent campaign (blog.sekoia.io)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1461

4

Investigating Shai-Hulud: Inside the NPM Supply Chain Worm (the-sequence.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1462

1

Decoding Brickstorms Garble strings (medium.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1463

4

Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks (www.volexity.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1464

3

Using Cobalt Strike to Find (More) Cobalt Strike (censys.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1465

4

BRICKSTORM Backdoor (www.cisa.gov)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1466

1

Intellexa’s Global Corporate Web (www.recordedfuture.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1467

1

Building trust in the digital age: a collaborative approach to content provenance technologies (www.ncsc.gov.uk)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1468

3

To Catch a Predator: Leak exposes the internal operations of Intellexa’s mercenary spyware - Amnesty International Security Lab (securitylab.amnesty.org)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1469

5

Israeli Spyware firm owned by ex-intel officer still active despite U.S. sanctions (www.haaretz.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1470

1

Intellexa’s Prolific Zero-Day Exploits Continue (cloud.google.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1471

0

Unveiling WARP PANDA: A New Sophisticated China-Nexus Adversary (www.crowdstrike.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1472

1

Adventures in Dynamic Evasion (medium.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1473

3

Critical RCE Vulnerabilities Discovered in React & Next.js (www.wiz.io)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1474

0

raptor: Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. By using Claude.md and creating rules, sub-agents, and skills, and orchestrating security tool usage (github.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1475

3

Knownsec: The King of Vulnerability Missed Three Vulnerabilities of Its Own (nattothoughts.substack.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink