blueteamsec

632 readers

17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1551

4

Patching Firmware Secure Boot on DELL G115 Through Off-chip Extraction (blog.redcrowlab.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1552

2

Eye of the Storm: Analyzing DarkCloud's Latest Capabilities (www.esentire.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1553

7

docuseal: Open source DocuSign alternative. Create, fill, and sign digital documents ✍️ (github.com)

submitted 4 months ago by digicat to c/blueteamsec

1 comments fedilink

1554

3

WerDump: A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass (github.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1555

5

Pointer leaks through pointer-keyed data structures (googleprojectzero.blogspot.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1556

2

CTI Dataset Construction from Telegram (arxiv.org)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1557

2

pipe-intercept: Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools (github.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1558

2

CTO at NCSC Summary: week ending September 28th (ctoatncsc.substack.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1559

3

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices (blog.talosintelligence.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1560

8

Netherlands: Two teenagers arrested in spying case linked to Russia - " walked past the offices of Europol, Eurojust and the Canadian embassy in The Hague carrying a "wi-fi sniffer" (www.bbc.co.uk)

submitted 4 months ago by digicat to c/blueteamsec

1 comments fedilink

1561

5

IMDS Abused: Hunting Rare Behaviors to Uncover Exploits - we uncovered exploitation in the wild of a previously unknown zero-day vulnerability from insecure use of pandoc. (www.wiz.io)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1562

4

The PLA Goes Back to School: Mapping New Developments in China’s Military Cyber Education System (margin.re)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1563

3

Bookworm to Stately Taurus Using the Unit 42 Attribution Framework (unit42.paloaltonetworks.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1564

3

XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory (www.microsoft.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1565

4

Ollama Drama: Investigating the Prevalence of Ollama Open Instances (censys.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1566

4

First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails (www.koi.security)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1567

3

Hunting For PsExec.exe abuse (medium.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1568

2

crates.io: Malicious crates faster_log and async_println | Rust Blog (blog.rust-lang.org)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1569

1

RedNovember Targets Government, Defense, and Technology Organizations (assets.recordedfuture.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1570

10

Tea continued - Unauthenticated access to 150+ Firebase databases, storage buckets and secrets (ice0.blog)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1571

1

ED 25-03: Identify and Mitigate Potential Compromise of Cisco Devices (www.cisa.gov)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1572

2

DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception (www.welivesecurity.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1573

2

Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat - DomainTools Investigations | DTI (dti.domaintools.com)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1574

1

NCSC warns of persistent malware campaign targeting Cisco devices (www.ncsc.gov.uk)

submitted 4 months ago by digicat to c/blueteamsec

0 comments fedilink

1575

2

Department of War Announces New Cybersecurity Risk Management Construct (www.war.gov)

submitted 4 months ago by digicat to c/blueteamsec

1 comments fedilink