blueteamsec

623 readers
17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
151
0
Building a Scalable Windows Driver Vulnerability Analyzer (Part 2) (threatunpacked.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
152
5
Public Safety and Homeland Security Bureau Highlights Best Practices for Defending Against Ransomware Attacks (www.fcc.gov)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
153
6
Security incident on plone GitHub org with force pushes (www.openwall.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
154
6
Incident Report: CVE-2024-YIKES (nesbitt.io)
submitted 1 week ago by digicat to c/blueteamsec
2 comments fedilink
155
4
Rust at Scale: An Added Layer of Security for WhatsApp (engineering.fb.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
156
2
Tech Dependencies Undermine UK National Security (www.rusi.org)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
157
3
Harassment, Scare Tactics, & Why Victims Should Never Pay ShinyHunters (blog.unit221b.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
158
6
ClawdBot Skills Just Ganked Your Crypto (opensourcemalware.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
159
2
Ricochet Chollima APT Adversary Simulation (medium.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
160
2
Hunting Lazarus Part III: The Infrastructure That Was Too Perfect (redasgard.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
161
3
1-Click RCE via Authentication Token Exfiltration From gatewayUrl in openclaw (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
162
3
LOLAPI - Living Off The Land APIs (themagicclaw.github.io)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
163
3
Extensions can leak full tab URLs using declarativeNetRequest via side-channel attack (issues.chromium.org)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
164
3
Operation Neusploit: APT28 Uses CVE-2026-21509 (www.zscaler.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
165
2
Warbird in modern Windows is a surprisingly shallow system, with relatively few tricks that are actually in use. (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
166
2
Demonstration of Warbird Heap Execute (gist.github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
167
3
The Chrysalis Backdoor: A Deep Dive into Lotus Blossom’s toolkit (www.rapid7.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
168
1
From Automation to Infection: How OpenClaw AI Agent Skills Are Being Weaponized (blog.virustotal.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
169
3
Threat-Hunting: Threat Hunting queries of multiple platforms - CrowdStrike/KQL (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
170
1
GhostKatz: Dump LSASS via physical memory read primitives in vulnerable kernel drivers (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
171
8
How the KGB Discovered Computer Viruses (fromcyberia.substack.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
172
2
CERT-UA Danger Bulletin": UAC-0001 (APT28) carries out cyberattacks against Ukraine and EU countries using the CVE-2026-21509 exploit (CERT-UA#19542) (cert.gov.ua)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
173
4
reko: Reko is a binary decompiler. (github.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
174
4
gVisor is an open-source Linux-compatible sandbox that runs anywhere existing container tooling does. It enables cloud-native container security and portability (gvisor.dev)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
175
2
Quest Desktop Authority RCE | CVE-2025-67813 (www.netspi.com)
submitted 1 week ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›