blueteamsec

679 readers

16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

2076

How do timing attacks work? The timing attacks I'm discussing here are specifically the ones where a vulnerable server is comparing strings a byte at a time (nickg.ca)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2077

Confucius Espionage: From Stealer to Backdoor (www.fortinet.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2078

WARMCOOKIE One Year Later: New Features and Fresh Insights (www.elastic.co)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2079

UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud (blog.talosintelligence.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2080

Security update: Incident related to Red Hat Consulting GitLab instance (www.redhat.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2081

CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) (cert.gov.ua)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2082

MC1130385 - Retirement of inline SVG images in Microsoft Outlook | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2083

New spyware campaigns target privacy-conscious Android users in the UAE (www.welivesecurity.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2084

Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations (cloud.google.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2085

Datzbro: RAT Hiding Behind Senior Travel Scams (www.threatfabric.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2086

Lunar Spider Expands their Web via FakeCaptcha (blog.nviso.eu)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2087

CharmingKitten: Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2088

Become an invisible admin in Active directory (iqunit.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2089

Indirect Memory Writing (unprotect.it)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2090

Part 4: Building Effective Detection Rules (sudo3rs.medium.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2091

ENISA Threat Landscape 2025 | ENISA (www.enisa.europa.eu)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2092

North Korea’s IT Workers expand beyond US big tech (www.okta.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2093

Exposing a Crypto Phishing Campaign Through Robots.txt (censys.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2094

404 Accountability not found: Spyware accountability through software liability (www.atlanticcouncil.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2095

Detour Dog: DNS Malware Powers Strela Stealer Campaigns (blogs.infoblox.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2096

Passkey : Community Draft of TR -03188 Passkey Server published for comment (www.bsi.bund.de)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2097

NIS raises natl. cyber alert level to 'caution' amid public service outage - Korea (m.koreaherald.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2098

Silent Smishing : The Hidden Abuse of Cellular Router APIs (blog.sekoia.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2099

Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite (unit42.paloaltonetworks.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2100

FlipSwitch: a Novel Syscall Hooking Technique (www.elastic.co)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink