blueteamsec

632 readers

9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

1726

Make Attackers Cry: Outsmart Them With Deception (www.fastly.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1727

Detecting Password-Spraying with a Honeypot Account (trustedsec.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1728

Uncovering ALVIVA HOLDING: Links to Russian Shell Companies and Cybercrime (theravenfile.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1729

You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) (labs.watchtowr.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1730

Unknown Malware Using Azure Functions as C2 (dmpdump.github.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1731

Learn about ChillyHell, a modular Mac backdoor (www.jamf.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1732

NPM debug and chalk compromise 09-2025 KQL (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1733

Sh3ller: Sh3ller is a lightweight C2 framework in its simplest form. (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1734

From Vietnam to Volt Typhoon: How the PRC Refined Grey Zone Cyber Tactics before Targeting the West (papers.ssrn.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1735

Spyware installed on Kenyan filmmakers' phones in police custody - Committee to Protect Journalists (cpj.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1736

Mythical Beasts: Diving into the depths of the global spyware market (www.atlanticcouncil.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1737

Accounting for the Impact of Real-World Data and Costs in Autonomous Cyber Defence (ieeexplore.ieee.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1738

Ongoing active exploitation of SonicWall SSL VPNs in Australia (CVE-2024-40766) (cyber.gov.au)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1739

An Attacker’s Blunder Gave Us a Look Into Their Operations (www.huntress.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1740

r2con2025 October 24-25 (CFP Oct 14th) - 100% Online (rada.re)

submitted 5 months ago by Diluvian to c/blueteamsec

0 comments fedilink

1741

Elections watchdog admits 'painful lessons learned' after Chinese hack (www.bbc.co.uk)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1742

GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe (arcticwolf.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1743

“LockerGoga,” “MegaCortex,” and “Nefilim” Ransomware Administrator Charged with Ransomware Attacks (www.justice.gov)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1744

Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research (security.apple.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1745

The Internet Coup: How a Chinese Company is Exporting the Great Firewall (interseclab.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1746

Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed (www.trendmicro.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1747

Stopping ransomware before it starts: Lessons from Cisco Talos Incident Response (blog.talosintelligence.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1748

MFTool: Direct access to NTFS volumes (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1749

Security means securing people where they are (blog.yossarian.net)

submitted 5 months ago by Diluvian to c/blueteamsec

0 comments fedilink

1750

Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs (thedfirreport.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink