blueteamsec

679 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2351

1

[2508.20866] AI Agentic Vulnerability Injection And Transformation with Optimized Reasoning (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2352

2

Let's evaluate "The Iranian Internet Outage from the Perspective of Cyberspace" from the perspective of real cyberspace. (mp.weixin.qq.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2353

0

LLM-TIKG: Threat intelligence knowledge graph construction utilizing large language model (www.sciencedirect.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2354

2

ReDAN: An Empirical Study on Remote DoS Attacks against NAT Networks (www.ndss-symposium.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2355

5

CTO at NCSC Summary: week ending September 7th (ctoatncsc.substack.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2356

2

Inside the Kimsuky Leak: How the “Kim” Dump Exposed North Korea’s Credential Theft Playbook (dti.domaintools.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2357

2

Threat Actors Abuse Simplified AI to Steal Microsoft 365 Credentials (www.catonetworks.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2358

0

MeetC2 a.k.a Meeting C2 (medium.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

**

2359

4

orsted: Orsted C2 Framework (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2360

12

Microsoft Used China-Based Engineers. - "internal work-tracking system that showed China-based employees recently fixing bugs for SharePoint “OnPrem,”" (www.propublica.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2361

2

ACM SIGCOMM 2025: Proceedings of the ACM SIGCOMM 2025 Conference (conferences.sigcomm.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2362

4

ACM SIGCOMM 2025: Proceedings of the Workshops (conferences.sigcomm.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2363

2

Operation BarrelFire: NoisyBear Targets Kazakhstan Oil & Gas (www.seqrite.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2364

4

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes (www.welivesecurity.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2365

1

From CastleLoader to CastleRAT: TAG-150 Advances Operations with Multi-Tiered Infrastructure (www.recordedfuture.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2366

2

Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 (blog.cloudflare.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2367

7

Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms (www.sentinelone.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2368

12

‘Unrestrained’ Chinese Cyberattackers May Have Stolen Data From Almost Every American (www.nytimes.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2369

2

Leveraging Raw Disk Reads to Bypass EDR (medium.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2370

2

auth0/auth0-customer-detections (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2371

6

ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690) (cloud.google.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2372

6

TTP-Threat-Feeds: Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨ (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2373

8

Not Safe for Work: Tracking and Investigating Stealerium and Phantom Infostealers (www.proofpoint.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2374

6

Joint guidance on a shared vision of software bill of materials for cyber security - Canadian Centre for Cyber Security (www.cyber.gc.ca)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2375

2

Fraction Loader: In-Memory Loader Project (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink