blueteamsec

679 readers
35 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1551
2
Detecting Cobalt Strike HTTP(S) Beacons with a Simple Method (academy.bluraven.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1552
6
Former contractor admits to hacking employer in retaliation for termination (www.justice.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1553
3
Poland arrests Russian suspected of hacking Polish companies (www.reuters.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1554
3
Long Live Pass-The-Cert: Reviving the Classical Rendition of Lateral Movement across Entra ID joined Devices (www.alteredsecurity.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1555
3
China Security Report (www.nids.mod.go.jp)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1556
5
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks (socket.dev)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1557
2
Custom Mach-O Image Loader with in-memory Mach-O loader (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1558
3
The Mystery OAST Host Behind a Regionally Focused Exploit Operation (www.vulncheck.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1559
2
Field Notes on Malware: C2 Evasion Evolution and Detection Implications (deceptiq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1560
3
Joint statement on malicious cyber activity targeting Canadian critical infrastructure - Canada.ca (www.canada.ca)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1561
1
Report Explanation| MSMT: The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (slowmist.medium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1562
3
A Tsunami Sweeping the Cyber Battlefield Analysis of SectorA01’s Hacking Activities (medium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1563
1
FlexibleFerret: macOS Malware Deploys in Fake Job Scams (www.jamf.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1564
1
UNC5174 그룹의 Discord Bot 백도어 악성코드 - Discord Bot backdoor malware from the UNC5174 group (asec.ahnlab.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1565
1
KeyDrop Scans The Web for Publicly Exposed API Keys - Innovation at Consumer Reports (innovation.consumerreports.org)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1566
2
The cyber threat to Canada’s water systems: Assessment and mitigation - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1567
0
Critical strike: China's hacking training grounds (PART 1) (substack.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1568
3
Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine (arcticwolf.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1569
2
QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in an archive, named spam_log.7z, to VirusTotal from Taiwan (x.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1570
3
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications (www.cisa.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1571
5
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations (blog.narimangharib.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1572
3
The Hidden Dangers of Calendar Subscriptions: 4 Million Devices at Risk (www.bitsight.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1573
5
Cooking up trouble: How TamperedChef uses signed apps to deliver stealthy payloads (www.acronis.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1574
4
Russian-Linked StealC V2 Campaign Targeting Blender Users via Malicious .blend Files (www.morphisec.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1575
2
Native Secure Enclaved backed ssh keys on MacOS (gist.github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›