blueteamsec

633 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2251

1

Beyond the Patch: SharePoint Exploits and the Hidden Threat of IIS Module Persistence (www.splunk.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2252

1

Hunting for Secrets in Plain Sight: Leveraging Internal Logging and Monitoring Services (www.praetorian.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2253

1

UNC2891 Bank Heist: Physical ATM Backdoor & Linux Forensic Evasion Evasion (www.group-ib.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2254

1

CTO at NCSC Summary: week ending August 3rd (ctoatncsc.substack.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2255

1

#OFTW v3.0 - 'Objective for the We' v3.0 - London, July 2025 - slides and videos (objective-see.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2256

8

Plague: A Newly Discovered PAM-Based Backdoor for Linux (www.nextron-systems.com)

submitted 6 months ago by digicat to c/blueteamsec

9 comments fedilink

2257

1

From Georgia to Ukraine: Seventeen Years of Russian Cyber Capabilities at War - Modern War Institute (mwi.westpoint.edu)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2258

0

Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities (info.greynoise.io)

submitted 6 months ago* (last edited 6 months ago) by digicat to c/blueteamsec

1 comments fedilink

2259

-2

Warren is an open-source security alert management system that automates the tedious parts of alert triage. It ingests alerts from your existing tools, enriches them with AI and threat intelligence (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

https://zenn.dev/mizutani/articles/secmon-warren

2260

5

Illumina Inc. to Pay $9.8M to Resolve False Claims Act Allegations Arising from Cybersecurity Vulnerabilities in Genomic Sequencing Systems (www.justice.gov)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2261

3

Naming country linked to UNC3886 attack not in Singapore’s best interest at this point in time: Shanmugam (www.channelnewsasia.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2262

4

Exploiting the Synology TC500 at Pwn2Own Ireland 2024 (blog.infosectcbr.com.au)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2263

2

Let’s Be Objective: A Deep Dive into 0bj3ctivityStealer's Features (www.trellix.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2264

3

XWorm V6: 高度な回避機能と AMSI バイパス機能が明らかに - XWorm V6: Advanced Evasion and AMSI Bypass Capabilities Revealed (www.netskope.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2265

2

2025 GenAI Code Security Report: ASSESSING THE SECURITY OF USING LLMS FOR CODING (www.veracode.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2266

2

machofile: machofile is a module to parse Mach-O binary files (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2267

3

autoswagger: Autoswagger by Intruder - detect API auth weaknesses (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2268

3

ICANN writes letter to Web Commerce Communications Limited dba WebNic.cc for not dealing with DNS domain abuse reports (www.icann.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2269

4

When Privileged Access Falls into the Wrong Hands: Chinese Companies in Microsoft’s MAPP Program (nattothoughts.substack.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2270

5

Microsegmentation in Zero Trust Part One: Introduction and Planning (www.cisa.gov)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2271

3

Microsoft OAuth App Impersonation Campaign Leads to MFA Phishing (www.proofpoint.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2272

6

More than 90 state, local governments targeted using Microsoft SharePoint vulnerability, group says (archive.ph)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2273

0

Introducing Unit 42’s Attribution Framework (unit42.paloaltonetworks.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2274

5

RingReaper: Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2275

1

Before ToolShell: Exploring Storm-2603’s Previous Ransomware Operations (research.checkpoint.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink