blueteamsec

679 readers

20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1851

2

offlineSCCMdecrypt: Step-by-step documentation on how to decrypt SCCM database secrets offline (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1852

1

rpc2efs: Unauthenticated start EFS service on remote Windows host (make PetitPotam great again) (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1853

1

PostEx-Arsenal: Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, dumps (wifi, clipboard, screenshot, slack, office), PE in memory execution etc (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1854

2

From Dream Job to Malware: DreamLoaders in Lazarus’ Recent Campaign (lab52.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1855

6

NetRunner: A .NET assembly tracer using Harmony for runtime method interception. (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1856

10

Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287) (www.huntress.com)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1857

2

Proceedings of the 2025 ACM Internet Measurement Conference (dl.acm.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1858

5

What We Learned Inside a North Korean Internet Server: How Well Do You Know Your Partners? (www.38north.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1859

2

Advancing Security in Software-Defined Vehicles: A Comprehensive Survey and Taxonomy (papers.ssrn.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1860

7

Fil-C: Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil (fil-c.org)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1861

2

Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage (www.group-ib.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1862

3

CTO at NCSC Summary: week ending October 26th (ctoatncsc.substack.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1863

2

Analysis of APT-C-08 (Manlinghua)'s recent phishing attacks using application files (mp.weixin.qq.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1864

3

Decoy Databases: Analyzing Attacks on Public Facing Databases (gsmaragd.github.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1865

7

Could the XZ backdoor have been detected with better Git and Debian packaging practices? (optimizedbyotto.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1866

4

CSA Releases An Addendum To Support System Owners In Securing Agentic AI System (www.csa.gov.sg)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1867

9

Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers (brave.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1868

3

LockBit Returns — and It Already Has Victims (blog.checkpoint.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1869

3

Stealth BGP Hijacks with uRPF Filtering (www.usenix.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1870

2

Tunneling WireGuard over HTTPS using Wstunnel (kroon.email)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1871

3

TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware (edera.dev)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1872

11

How Hacked Card Shufflers Allegedly Enabled a Mob-Fueled Poker Scam That Rocked the NBA (www.wired.com)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1873

3

PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation (www.sentinelone.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1874

3

The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns (www.trendmicro.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1875

4

Catching Credential Guard Off Guard (specterops.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink