blueteamsec

679 readers
31 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1801
1
APT-C-60（伪猎者）的近期活动分析与技术演进 - Recent Activity Analysis and Technological Evolution of APT-C-60 (False Hunter) (mp.weixin.qq.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1802
2
NTLMPasswordChanger: PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll. (github.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1803
2
Exploiting Ghost SPNs and Kerberos Reflection for SMB Privilege Elevation (www.semperis.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1804
1
ShareHound: An OpenGraph Collector for Network Shares (specterops.io)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1805
2
Ukrainian National Extradited from Ireland in Connection with Conti Ransomware (www.justice.gov)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1806
4
AdminSDHolder Misconceptions & Misconfigurations (specterops.io)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1807
3
A Guide to Understanding China’s Sophisticated Typhoon Cyber Campaigns (mccraryinstitute.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1808
1
UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities (arcticwolf.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1809
2
BRONZE BUTLER exploits Japanese asset management software vulnerability (news.sophos.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1810
3
Ukrainian organizations still heavily targeted by Russian attacks (www.security.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1811
2
Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack (unit42.paloaltonetworks.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1812
1
AL25-016 Internet-accessible industrial control systems (ICS) abused by hacktivists - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1813
2
Vulnerabilities in LUKS2 disk encryption for confidential VMs (blog.trailofbits.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1814
2
Creating a "Two-Face" Rust binary on Linux (www.synacktiv.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1815
2
APT-C-08（蔓灵花）近期使用application文件钓鱼攻击活动分析 - Analysis of Recent Phishing Attacks Using Application Files in APT-C-08 (Manlingflower) (mp.weixin.qq.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1816
2
ATT&CK v18: Detection Strategies, More Adversary Insights, (medium.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1817
2
HWP as an Attack Surface: What Hancom’s Hangul Word Processor Means for South Korea’s Cyber Posture as a US Ally (www.38north.org)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1818
2
US company with access to biggest telecom firms uncovers breach by nation-state hackers (www.reuters.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1819
1
Earth Estries alive and kicking (bartblaze.blogspot.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1820
3
TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition (tee.fail)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1821
1
New Loader Executing TorNet and PureHVNC – IIJ Security Diary (in English) (sect.iij.ad.jp)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1822
5
Hack-cessibility: When DLL Hijacks Meet Windows Helpers (trustedsec.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1823
3
UnderlayCopy: PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads (github.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1824
4
How a hacking gang held Italy’s political elites to ransom (www.politico.eu)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
1825
2
Threats of Unvalidated XPC Clients on macOS (afine.com)
submitted 5 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›