blueteamsec

679 readers
37 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1776
2
The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1777
1
Identity Management for Agentic AI by OpenID (openid.net)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1778
2
You are worker #41: Lophiid Honeypot Caught an Automated AI Attack Swarm (medium.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1779
1
Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates (expel.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1780
2
Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1781
1
Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1782
1
Tracking Lateral Movement: PowerShell Remoting, WMIC, Explicit Credentials, NTLM Relay Attacks, Credential Theft and Reuse (Event IDs) (medium.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1783
1
Tracking Lateral Movement — Named Pipes, Scheduler, Services, Registry, and DCOM (Event IDs) (medium.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1784
0
Evading Elastic Security: Linux Rootkit Detection Bypass (matheuzsecurity.github.io)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1785
4
Bypassing WiFi Client Isolation (pulsesecurity.co.nz)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1786
3
Attacking macOS XPC Helpers: Protocol Reverse Engineering and Interface Analysis (tonygo.tech)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1787
2
Open VSX security update, October 2025 (blogs.eclipse.org)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1788
3
BOF_Spawn: Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames (github.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1789
3
A Defender's Guide to Privileged Account Monitoring | Google Cloud Blog (cloud.google.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1790
10
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware (socket.dev)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1791
11
Is Your Bluetooth Chip Leaking Secrets via RF Signals? (eprint.iacr.org)
submitted 5 months ago by digicat to c/blueteamsec
4 comments fedilink
1792
5
EDR-Redir V2: Blind EDR With Fake Program Files (www.zerosalarium.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1793
4
Decrypted: Midnight Ransomware - Midnight ransomware echoes Babuk’s tactics but stumbles in its code. Gen researchers explain how those mistakes make decryption and recovery possible (www.gendigital.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1794
3
A Comprehensive Survey of Threat Intelligence Research: A Measurement-Based Study (dl.acm.org)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1795
3
Державна служба спеціального зв’язку та захисту інформації України - Finland Joins Tallinn Mechanism to Bolster Ukraine's Cyber Resilience (cip.gov.ua)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1796
1
攻撃グループAPT-C-60による攻撃のアップデート - APT-C-60 Attack Update (blogs.jpcert.or.jp)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1797
3
Yet Another DCOM Object for Command Execution Part 1 (sud0ru.ghost.io)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1798
3
Hunting for EDR-Freeze (blog.axelarator.net)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1799
3
CTO at NCSC Summary: week ending November 2nd (ctoatncsc.substack.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1800
1
APT | 伪猎者组织NAKSOO远控木马加密通信分析 - APT | Analysis of the encrypted communication of the NAKSOO remote control Trojan by the pseudo-hunter group. (mp.weixin.qq.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›