blueteamsec

542 readers

6 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

151

3

Malicious package with AdaptixC2 framework agent found in npm registry (securelist.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

152

2

WOOT'25 videos (www.youtube.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

153

3

Unmasking the Invisible: Hunting and Defeating EDR-Evading Threats Like BRICKSTORM - "YARA signatures, or suspicious file paths on a vCenter server) were found in a customer's backups" (zerolabs.rubrik.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

154

4

Extortion and ransomware drive over half of cyberattacks - "Just 20 ASNs—only 0.04%— account for more than 80% of malicious password spray activity" (cdn-dynmedia-1.microsoft.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

155

1

Secure Parsing and Serializing with Separation Logic Applied to CBOR, CDDL, and COSE (www.microsoft.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

156

5

Diffing 7-Zip for CVE-2025-11001 (pacbypass.github.io)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

157

1

KNighter: Transforming Static Analysis with LLM-Synthesized Checkers (arxiv.org)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

158

1

Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing (www.trendmicro.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

159

2

DefenderWrite: Abusing Whitelisted Programs for Arbitrary Writes (www.zerosalarium.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

160

2

Lessons from the BlackBasta Ransomware Attack on Capita (blog.bushidotoken.net)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

161

3

CTO at NCSC Summary: week ending October 19th.. (ctoatncsc.substack.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

162

2

BeaverTail and OtterCookie evolve with a new Javascript module (blog.talosintelligence.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

163

1

OtterCandy, malware used by WaterPlum | セキュリティナレッジ | NTTセキュリティ・ジャパン株式会社 (jp.security.ntt)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

164

2

New Group on the Block: UNC5142 Leverages EtherHiding to Distribute Malware | Google Cloud Blog (cloud.google.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

165

2

DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains | Google Cloud Blog (cloud.google.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

166

4

Training Solo - the first systematic analysis of self-training Spectre-v2 attacks that break the core assumption behind domain isolation—even when implemented perfectly. (www.vusec.net)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

167

2

yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) (labs.watchtowr.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

168

4

StealthServer: A Dual-Platform Backdoor from a South Asian APT Group (blog.xlab.qianxin.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

169

3

Operation Silk Lure: Scheduled Tasks Weaponized for DLL Side-Loading (drops ValleyRAT) (www.seqrite.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

170

2

Mysterious Elephant APT: TTPs and tools (securelist.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

171

12

How I Almost Got Hacked By A 'Job Interview' (blog.daviddodda.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

172

3

Unknown hackers have been confirmed to have accessed the Onnara administrative network without authorization and accessed data (www.nis.go.kr:4016)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

173

0

TigerJack's Extensions Continue to Rob Developers Blind Across Different Marketplaces (www.koi.ai)

submitted 2 weeks ago by digicat to c/blueteamsec

2 comments fedilink

174

5

SecRL: Benchmarking LLM agents on Cyber Threat Investigation. (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

175

5

Chinese Hackers Blamed for Severe Breach at US Cyber Firm F5 (archive.ph)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink