blueteamsec

632 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1776

2

DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift (arxiv.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1777

2

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again (arxiv.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1778

3

Breaking Diffusion with Cache: Exploiting Approximate Caches in Diffusion Models (arxiv.org)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1779

1

[2508.20866] AI Agentic Vulnerability Injection And Transformation with Optimized Reasoning (arxiv.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1780

2

Let's evaluate "The Iranian Internet Outage from the Perspective of Cyberspace" from the perspective of real cyberspace. (mp.weixin.qq.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1781

0

LLM-TIKG: Threat intelligence knowledge graph construction utilizing large language model (www.sciencedirect.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1782

2

ReDAN: An Empirical Study on Remote DoS Attacks against NAT Networks (www.ndss-symposium.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1783

5

CTO at NCSC Summary: week ending September 7th (ctoatncsc.substack.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1784

2

Inside the Kimsuky Leak: How the “Kim” Dump Exposed North Korea’s Credential Theft Playbook (dti.domaintools.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1785

2

Threat Actors Abuse Simplified AI to Steal Microsoft 365 Credentials (www.catonetworks.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1786

0

MeetC2 a.k.a Meeting C2 (medium.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

**

1787

4

orsted: Orsted C2 Framework (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1788

12

Microsoft Used China-Based Engineers. - "internal work-tracking system that showed China-based employees recently fixing bugs for SharePoint “OnPrem,”" (www.propublica.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1789

2

ACM SIGCOMM 2025: Proceedings of the ACM SIGCOMM 2025 Conference (conferences.sigcomm.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1790

4

ACM SIGCOMM 2025: Proceedings of the Workshops (conferences.sigcomm.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1791

2

Operation BarrelFire: NoisyBear Targets Kazakhstan Oil & Gas (www.seqrite.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1792

4

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes (www.welivesecurity.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1793

1

From CastleLoader to CastleRAT: TAG-150 Advances Operations with Multi-Tiered Infrastructure (www.recordedfuture.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1794

2

Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 (blog.cloudflare.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1795

7

Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms (www.sentinelone.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1796

12

‘Unrestrained’ Chinese Cyberattackers May Have Stolen Data From Almost Every American (www.nytimes.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1797

2

Leveraging Raw Disk Reads to Bypass EDR (medium.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1798

2

auth0/auth0-customer-detections (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1799

6

ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690) (cloud.google.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1800

6

TTP-Threat-Feeds: Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨ (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink