blueteamsec

632 readers

14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1826

1

Sindoor Dropper: New Phishing Campaign (www.nextron-systems.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1827

3

Three Lazarus RATs coming for your cheese (blog.fox-it.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1828

4

Proposals to update the Telecommunications Security Code of Practice 2022 (www.gov.uk)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1829

3

A Primer on Forensic Investigation of Salesforce Security Incidents (www.salesforce.com)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1830

3

CHERI Myths: I don’t need CHERI if I have safe languages (cheriot.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1831

3

CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1832

4

Bypassing TLS Verification on Nintendo Switch (reversing.live)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1833

2

Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1834

1

[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1835

6

Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1836

2

Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1837

2

Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1838

5

IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1839

5

Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1840

4

Release QUANTUMSTRAND beta 1 - designed to revolutionize how analysts interact with strings in binary files - qs focuses on providing deep context (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1841

4

Inside the Lab-Dookhtegan Hack: How Iranian Ships Lost Their Voice at Sea (blog.narimangharib.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1842

2

v0.7 -> v0.8 | Adaptix Framework (adaptix-framework.gitbook.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1843

1

Secretary Noem Terminates Inept FEMA Employees After Uncovering Massive Cyber Failures, Demands Accountability | Homeland Security (www.dhs.gov)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1844

1

How attackers adapt to built-in macOS protection - good overview but by Kaspersky who have interest (securelist.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1845

1

DeviceToken: Request device ticket/token using the device's MSA (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1846

2

TrapFlagForSyscalling: Bypass user-land hooks by syscall tampering via the Trap Flag (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1847

3

RtlHijack: Alternative Read and Write primitives using Rtl* functions the unintended way. (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1848

2

ADSyncDump-BOF: The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies. (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1849

1

漫步安卓物理内存：CVE-2025-21479 提权实录 - A Walk Through Android Physical Memory: CVE-2025-21479 Privilege Escalation (dawnslab.jd.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1850

2

EnumEDRs: Enumerate active EDR's on the system (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink