blueteamsec

633 readers
19 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2301
3
Mimo gang weaponizes religious symbols to deliver 4L4MD4r ransomware using Microsoft SharePoint RCE vulnerability - reporting from China (mp-weixin-qq-com.translate.goog)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2302
1
Lionishackers: Analyzing a corporate database seller (outpost24.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2303
1
How a Cyber Alliance Took Down Russian Cybercrime (www.csis.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2304
10
US Senator Maria Cantwell (D-WA) demands that Google-owned incident response firm Mandiant hand over the Salt Typhoon-related security assessments of AT&T and Verizon (www.commerce.senate.gov)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 
2305
1
RABIDS: Modular malware framework to build custom payloads, designed for advanced adversary simulation and malware research (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2306
1
Information to Insights: Intrusion Analysis Methodology (www.huntress.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2307
1
DPAPI Backup Key Compromise Pt. 1: Some Forests Must Burn (specterops.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2308
2
LARVA-208 compromised the Steam game Chemia to distribute multiple malware families - Indicators of Compromise (github.com)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2309
1
MCPSpy: MCP Monitoring with eBPF (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2310
1
eBPF: Handling events in Userspace (h0x0er.github.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2311
1
Sentrilite – Open source, Lightweight, Real time, Kernel level System Observability and Audit tool (Powered by eBPF + AI) (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2312
1
DESCG: data encoding scheme classification with GNN in binary analysis (link.springer.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2313
1
Invisible Traces: Using Hybrid Fingerprinting to identify underlying LLMs in GenAI Apps (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2314
1
Explainable Vulnerability Detection in C/C++ Using Edge-Aware Graph Attention Networks (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://github.com/Radowan98/ExplainVulD

2315
1
PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2316
2
Umbral Stealer config extractor.ipynb - Config extractor of obfuscated umbral stealer samples and CLEANED (de4dot) samples writen in DotNet. hashes (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2317
2
TPwSav.sys Driver - Arbitrary Physical Memory Read and Write Primitive (zeifan.my)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2318
3
MaaS Appeal: An Infostealer Rises From The Ashes — NOVABLIGHT is a NodeJS-based Malware-as-a-Service (MaaS) information stealer developed and sold by a threat group that demonstrates French-language (www.elastic.co)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2319
2
Sealed Chain of Deception: Actors leveraging Node.JS to Launch JSCeal - The campaign leverages malicious advertisements to lure victims to install fake applications which impersonate ~ 50 common apps (research.checkpoint.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2320
3
GOLD BLADE remote DLL sideloading attack deploys RedLoader (news.sophos.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2321
5
Spear Phishing Campaign Delivers VIP Keylogger via Email Attachment - AutoIt script is utilized to deliver and execute the malicious payload. (www.seqrite.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2322
4
Telemetry and Privacy Analysis of Trae IDE: A Deep Dive into ByteDance's VSCode Fork (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2323
2
Auto-Color Backdoor: the threat actor had exploited CVE-2025-31324 - Over the course of three days, a threat actor gained access to the customer’s network, attempted to download suspicious files (www.darktrace.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2324
4
RansomFS: an example of using canary files and directories, chained with different threshold engines to map a PID to its malicious behaviour and trigger a response when this threshold is breached. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2325
3
Privacy Enhancing Technologies Symposium videos (youtube.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›