blueteamsec

633 readers

14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2026

5

DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2027

3

sauron: Fast context enumeration for newly obtained Active Directory credentials. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2028

3

dumping_lsass: The different ways to dump LSASS (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2029

7

Cisco Security Advisory: Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (sec.cloudapps.cisco.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2030

5

Protecting You From Social Engineering Campaigns: An Update From Workday (blog.workday.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2031

4

hexstrike-ai: HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, etc. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2032

4

ECC.fail - Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory (ecc.fail)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2033

2

Hidden Links: Analyzing Secret Families of VPN Apps - The Citizen Lab (citizenlab.ca)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2034

1

Атрибуция Exchange-кейлоггеров к группировке PhantomCore - Attribution of Exchange keyloggers to the PhantomCore group (from Russia) (habr.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2035

3

Hacking and Firewalls Under Siege: Russia’s Cyber Industry During the War on Ukraine (www.cna.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2036

6

Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme (krebsonsecurity.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2037

4

Don’t Phish-let Me Down: FIDO Authentication Downgrade (www.proofpoint.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2038

3

Okta Evilginx phishlet (OIE) with MFA downgrade rewrites (gist.github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2039

4

'Blue Locker' Analysis: Ransomware Targeting Oil & Gas Sector in Pakistan (www.resecurity.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2040

4

Pantheon Introduction: A Guide and Script Collection for Mythic Eventing (specterops.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2041

4

ControlSTUDIO: Adversary Simulation Framework (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2042

5

gpoParser: gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2043

3

APT-C-36（盲眼鹰）组织在新攻击活动中升级对抗手段 - APT-C-36 (Blind Eagle) group escalates its tactics in new attack campaigns (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2044

3

深度：2025 年智能安全运营（ AI SOC）市场格局 - In-depth: The 2025 Intelligent Security Operations (AI SOC) Market Landscape (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2045

2

SAST结合大模型的逻辑漏洞识别探索 - proposes and implements an automated logical vulnerability auditing tool powered by an AI agent. By combining the deep analysis capabilities of traditional SAST with AI (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2046

4

All You Need Is MCP - LLMs Solving a DEF CON CTF Finals Challenge (wilgibbs.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2047

5

When Defenders Become the Attackers: The Elastic EDR 0-Day (RCE + DoS) (ashes-cybersecurity.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2048

3

There and Back Again: Detecting OT devices across protocol gateways (m.youtube.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2049

2

Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256) (labs.watchtowr.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2050

3

Phishing and scams: how fraudsters are deceiving users in 2025 (securelist.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink