blueteamsec

633 readers

16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2176

1

Disguises Zip Past Path Traversal - "Schizophrenic ZIP is an archive file that – after unzipping by two different software – may return two different files" (blog.isec.pl)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2177

1

Getting Code Execution on Apache Spark SQL (muffsec.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2178

2

"Court Summons" Phishing Lure Used in Cyberattacks on Ukrainian Government and Defence Sector (cip.gov.ua)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2179

1

Detection Engineering & Threat Hunting SIG (Special Interest Group) from FIRST (www.first.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2180

1

ft3: FT3: Fraud Tools, Tactics, and Techniques Framework - Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2181

2

Cisco Event Response: Vishing Attack Impacting Third-Party CRM System (sec.cloudapps.cisco.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2182

1

ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities (success.trendmicro.com)

submitted 6 months ago by digicat to c/blueteamsec

1 comments fedilink

2183

1

Gen 7 SonicWall Firewalls – SSLVPN Recent Threat Activity (www.sonicwall.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2184

0

US offers up to $10 million for information on Iranian cyber group (www.iranintl.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2185

1

Оновлений інструментарій UAC-0099: MATCHBOIL, MATCHWOK, DRAGSTARE - Updated UAC-0099 toolkit: MATCHBOIL, MATCHWOK, DRAGSTARE (cert.gov.ua)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2186

1

Lying in Wait: New Report Finds High-Risk Contributors Connected to Adversarial Nation-States in Open Source Software Ecosystems - Strider Intel (www.striderintel.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2187

1

Project Ire autonomously identifies malware at scale - "The prototype, Project Ire, automates what is considered the gold standard in malware classification: fully reverse engineering a software file (www.microsoft.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2188

3

paltergeist: Cyber deception with generative cloud-native traps (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2189

3

Nemesis 2.0 - "we focused on building the best possible file enrichment and triage platform for offensive operations." (specterops.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2190

1

Tracking Candiru’s DevilsTongue Spyware in Multiple Countries (www.recordedfuture.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2191

2

elfspirit: ELF static analysis and injection framework that parse, manipulate, patch and camouflage ELF files. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2192

3

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover (www.wiz.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2193

1

Demystifying threat intelligence in digital advertising - includes their own pyramid of pain (www.tagtoday.net)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2194

4

Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem (www.sentinelone.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2195

3

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira (thedfirreport.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2196

6

Exorcism: The first open source runtime windows batch and command line deobfuscator (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2197

1

IOCTL_VOLSNAP_DELETE_SNAPSHOT: Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2198

2

Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives (blog.cloudflare.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2199

2

BSides Las Vegas - live streams - Mon, Tue and Wed (youtube.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2200

1

SQUID-2025:1 Buffer Overflow in URN Handling (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink