blueteamsec

632 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1951
2
Think before you Click(Fix): Analyzing the ClickFix social engineering technique (www.microsoft.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1952
2
The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War (www.cloudsek.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1953
1
A new, cheaper Mac stealer emerges (moonlock.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1954
4
The Masked Man in Cyber Attacks: Analysis of the DupeDog Software Framework (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1955
4
APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files (www.cyfirma.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1956
3
koney: Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates and uses eBPF to detect, log, and forward alerts (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1957
3
[2505.21244] When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1958
4
Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1959
3
Developing a Transit Cybersecurity Framework Community Profile: Project Update (Draft) (csrc.nist.gov)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1960
4
Sludge for Good: Slowing and Imposing Costs on Cyber Attackers (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1961
16
The Great SSL Certificate Panic (redmonk.com)
submitted 6 months ago by digicat to c/blueteamsec
4 comments fedilink
1962
4
Bypassing Enrollment Restrictions to Break BYOD Barriers in Intune (temp43487580.github.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1963
4
Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1964
4
THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1965
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1966
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1967
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1968
3
A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1969
2
APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1970
2
StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1971
2
AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1972
2
rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1973
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1974
2
Silent Harvest: Extracting Windows Secrets Under the Radar (sud0ru.ghost.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
1975
2
Hunting for Malware Networks (dti.domaintools.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›