blueteamsec

669 readers
25 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
151
5
Authorities disrupt world’s largest IoT DDoS botnets responsible for record breaking attacks targeting victims worldwide (www.justice.gov)
submitted 1 week ago by digicat to c/blueteamsec
1 comments fedilink
152
2
VoidStealer: Debugging Chrome to Steal Its Secrets (www.gendigital.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
153
5
Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found (trustedsec.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
154
2
NemoClaw: NVIDIA plugin for secure installation of OpenClaw (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
155
2
RagaSerpent a.k.a SideWinder-Adjacent ‘Tax Audit’ Cluster: MultiCountry Targeted Chain (2025–2026) (itsec.asia)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
156
4
Operation GhostMail: Russian APT Exploits Zimbra XSS to Target Ukraine Government (www.seqrite.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
157
1
Technical Analysis of SnappyClient - delivered using HijackLoader. SnappyClient has an extended list of capabilities including taking screenshots, keylogging, a remote terminal, and data theft etc. (www.zscaler.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
158
2
Inside Keitaro Abuse: A Persistent Stream of AI-Driven Investment Scams - Keitaro Tracker, sometimes referred to as Keitaro TDS, is an advertising performance tracking platform.. (www.infoblox.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
159
2
The "dual life" of Wuhan Anjun Technology - "presented itself as a professional cybersecurity company in its business registration and public promotion... team has fallen out and admitted to stealing (mp.weixin.qq.com)
submitted 1 week ago by digicat to c/blueteamsec
1 comments fedilink
160
3
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization (www.cisa.gov)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
161
6
ANNUAL THREAT ASSESSMENT OF THE U.S. INTELLIGENCE COMMUNITY: "Cyber actors from China, Russia, Iran, North Korea, and ransomware groups will continue to pose critical threats to U.S. networks and CNI" (www.dni.gov)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
162
4
APT28 / FancyBear Phishing Framework (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
163
2
Boggy Serpens Threat Assessment (unit42.paloaltonetworks.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
164
2
StoatWaffle, malware used by WaterPlum | セキュリティナレッジ | NTTセキュリティ・ジャパン株式会社 (jp.security.ntt)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
165
2
Interlock ransomware campaign targeting enterprise firewalls (aws.amazon.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
166
2
ScreenConnect™ 26.1 Security Hardening - issues related to how server-level cryptographic material is protected. (www.connectwise.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
167
2
Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack (www.trendmicro.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
168
2
fronthunter: FrontHunter is a tool for testing large lists of domains to identify candidates for domain fronting. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
169
2
RegPwnBOF: Bof of RegPwn - Exploits a registry symlink race condition in the Windows Accessibility ATConfig mechanism to write arbitrary values to protected HKLM registry keys from a normal user (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
170
2
Dropbox APIを使用するKimsukyのマルウェア – Kimsuky malware using Dropbox API (sect.iij.ad.jp)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
171
3
Mythical Beasts: Investigating the role of intermediaries in the proliferation of offensive cyber capabilities (www.atlanticcouncil.org)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
172
3
Inside DarkSword: A New iOS Exploit Kit Delivered Via Compromised Legitimate Websites (iverify.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
173
2
Building a Pipeline for Agentic Malware Analysis (synthesis.to)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
174
2
ODR: Internals of Microsoft's New Native MCP Registration (www.originhq.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
175
2
Bitrefill was the target of a cyberattack - by the DPRK Lazarus / Bluenoroff - initial access originated through a compromised employee laptop, from which a legacy credential was exfiltrated. (x.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›