blueteamsec

679 readers

13 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2326

2

H1 2025 Malware and Vulnerability Trends (www.recordedfuture.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2327

5

APT37: Rust Backdoor & Python Loader (www.zscaler.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2328

4

npm debug and chalk packages compromised (www.aikido.dev)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2329

1

Windows Internals: Secure Calls - The Bridge Between The NT Kernel and Secure Kernel (connormcgarr.github.io)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2330

4

Salt Typhoon and UNC4841: New Domains; Urges Defenders to Check Telemetry and Log Data (www.silentpush.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2331

1

«Плановое мероприятие»: в «КазМунайГазе» отрицают атаку российских хакеров - "Planned event": KazMunaiGas denies attack by Russian hackers - mistook a "planned security check" for a cyberattack. (orda.kz)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2332

6

From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

1 comments fedilink

2333

2

Microsoft Azure services disrupted by Red Sea cable cuts (www.bbc.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2334

7

Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter (blog.quarkslab.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2335

2

Update on Mandiant Drift and Salesloft Application Investigations (trust.salesloft.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2336

3

Bells Ringing in Dar es Salaam | Chollima Group (chollima-group.io)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2337

13

Qantas cyber attack: Chief executive punished with $278k pay cut (www.nzherald.co.nz)

submitted 7 months ago by digicat to c/blueteamsec

2 comments fedilink

2338

4

Retrieving kernel process object addresses by exploiting a driver providing R/W to physical memory (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2339

4

A Playbook for Winning the Cyber War | Intelligence, National Security, and Technology Program | CSIS (www.csis.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2340

5

VulnRepairEval: An Exploit-Based Evaluation Framework for Assessing Large Language Model Vulnerability Repair Capabilities (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2341

2

dittobytes: Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE. (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2342

1

BugCheck 0xD1: Potential race condition in Teredo cleanup during flow teardown (medium.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2343

3

New Botnet Emerges from the Shadows: NightshadeC2 (www.esentire.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2344

3

The Czech National Cyber and Information Security Agency issues warning about data transfer to and remote administration from China (nukib.gov.cz)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2345

1

Salesloft Third-Party Drift Integration Partners FAQ (9:00PM ET) (trust.salesloft.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2346

4

Critical SAP S/4HANA code injection vulnerability (CVE-2025-42957) exploited in the wild (securitybridge.com)

submitted 7 months ago by digicat to c/blueteamsec

1 comments fedilink

2347

4

The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows (blog.gitguardian.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2348

2

DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2349

2

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2350

3

Breaking Diffusion with Cache: Exploiting Approximate Caches in Diffusion Models (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

1 comments fedilink