blueteamsec

669 readers

3 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

201

1

BitChat cache poisoning and replay in Bluetooth mesh (barghest.asia)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

202

1

Endgame Harvesting: Inside ACRStealer’s Modern Infrastructure (blog.gdatasoftware.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

203

4

CastleRAT attack first to abuse Deno JavaScript runtime to evade enterprise security (www.threatdown.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

204

1

High Severity Vulnerabilities in Fortinet Products (www.csa.gov.sg)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

205

1

Critical Vulnerabilities in Aruba Networking AOS-CX (www.csa.gov.sg)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

206

1

Unmasking SilverFox’s New Trends: Decoding Evasion Tactics, Domain Impersonation, and Mass-Generated Fake Software (medium.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

207

1

가짜 FileZilla 사이트를 이용한 악성코드 유포 - Malware distribution using fake FileZilla sites (blog.alyac.co.kr)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

208

1

KB4831: Vulnerabilities Resolved in Veeam Backup & Replication 13.0.1.2067 - low priv user can do cred extraction / authed user can do RCE (www.veeam.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

209

1

Evil evolution: ClickFix and macOS infostealers (www.sophos.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

210

3

CO-PILOT, DISENGAGE AUTOPHISH: The New Phishing Surface Hiding Inside AI Email Summaries (permiso.io)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

211

5

A Slopoly start to AI-enhanced ransomware attacks | IBM (www.ibm.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

212

1

Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia (unit42.paloaltonetworks.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

213

1

Operation CamelClone: Multi-Region Espionage Campaign Targets Government and Defense Entities Amidst Regional Tensions (www.seqrite.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

214

3

Bypassing EDR in a Crystal Clear Way (lorenzomeacci.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

215

1

redStack: Boot-to-Breach red team lab on AWS. Mythic, Sliver, and Havoc C2 behind a production-style Apache redirector. Deployed via Terraform. (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

216

2

MDE-troubleshooter.ps1 - designed to assist you in analyzing issues related to Defender for Endpoint on your local endpoint. It offers a centralized view of the security configuration, log files, etc. (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

217

0

EntraOps: Community project to classify, identify and protect your privileges based on Enterprise Access Model (EAM) (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

218

1

LnkMeMaybe - A Review of CVE-2026-25185 (trustedsec.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

219

1

Building a Full-Featured DuckDB Kernel for Jupyter — With a Database Explorer You’ll Actually Use (medium.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

220

1

Measuring AI Agents' Progress on Multi-Step Cyber Attack Scenarios (arxiv.org)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

221

2

Contagious Interview: Malware delivered through fake developer job interviews (www.microsoft.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

222

3

oss-security - Re: Multiple vulnerabilities in AppArmor (www.openwall.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

223

1

Malware Insights: MacOS Phexia Campaign (cookie.engineer)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

224

1

CVE-2026-24291: Exploit code for LPE in Windows clients and servers (github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink

225

1

AppsFlyer SDK compromised 2026-03-10 (gist.github.com)

submitted 2 weeks ago by digicat to c/blueteamsec

0 comments fedilink