blueteamsec

679 readers
42 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1726
1
Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection (malcrove.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1727
3
Runtime Android Object Instrumentation (knifecoat.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1728
1
DonPwner: Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database (github.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1729
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1730
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1731
2
JA4+ Plugin for Wireshark (github.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 
1732
2
SoK: Honeypots & LLMs, More Than the Sum of Their Parts? (arxiv.org)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1733
2
警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击 - Beware! The APT-C-08 (Manlinghua) group has launched its first cyberattack using the WinRAR vulnerability CVE-2025-6218. (mp.weixin.qq.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1734
3
What’s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) (labs.watchtowr.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1735
2
Data-Structure Injection (DSI) in AI Agents (labs.zenity.io)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1736
2
CTO at NCSC Summary: week ending November 9th (ctoatncsc.substack.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1737
3
BSI TR -03185-2 Secure Software Lifecycle for Open Source Software (www.bsi.bund.de)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1738
5
Site Unseen: Enumerating and Attacking Active Directory Sites (www.synacktiv.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1739
2
SesameOp: Novel backdoor uses OpenAI Assistants API for command and control (www.microsoft.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1740
4
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices (unit42.paloaltonetworks.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1741
2
Lazarus Group targets Aerospace and Defense with new Comebacker variant | Enki White Hat (www.enki.co.kr)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1742
1
How CHERIoT uses Sealing (cheriot.org)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1743
2
CyberUK tech talks call for papers (www.cyberuk.uk)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1744
13
Meta is earning a fortune on a deluge of fraudulent ads, documents show (archive.ph)
submitted 5 months ago by digicat to c/blueteamsec
1 comments fedilink
1745
2
New Kimsuky Malware “EndClient RAT”: First Technical Report and IOCs (www.0x0v1.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1746
7
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy (www.security.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1747
6
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation (research.checkpoint.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1748
3
Close Those Ports: Exploring Splashtop RMM and Relays (blog.axelarator.net)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1749
1
Malicious Infrastructure Finds Stability with aurologic GmbH (assets.recordedfuture.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1750
3
Spoofed numbers blocked in crackdown on scammers (www.gov.uk)
submitted 5 months ago by digicat to c/blueteamsec
1 comments fedilink
view more: ‹ prev next ›