blueteamsec

633 readers

19 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2376

6

ToolShell: a story of five vulnerabilities in Microsoft SharePoint (securelist.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2377

1

Microsoft Probing If Chinese Hackers Learned SharePoint Flaws Through Alert - Microsoft Corp. is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese ha (archive.ph)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2378

1

Intelligent Prediction: How Large Language Models Revolutionize Subdomain Discovery Technology (mp-weixin-qq-com.translate.goog)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2379

2

Detecting the Most Popular MITRE Persistence Method – Registry Run Keys / Startup Folder (www.nextron-systems.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2380

10

Microsoft Used China-Based Support for Multiple U.S. Agencies, Potentially Exposing Sensitive Data (www.propublica.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2381

1

Reforging Sliver: How Simple Code Edits Can Outmaneuver EDR (fortbridge.co.uk)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2382

2

Process Injection using Return-Oriented Programming (ieeexplore.ieee.org)

submitted 6 months ago by digicat to c/blueteamsec

1 comments fedilink

2383

62

Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks (www.ifixit.com)

submitted 6 months ago by digicat to c/blueteamsec

2 comments fedilink

2384

1

Cybersecurity Advisory: Scattered Spider (www.cisa.gov)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2385

1

Muddled Libra Threat Assessment: Further-Reaching, Faster, More Impactful (unit42.paloaltonetworks.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2386

3

Pixels of Deception: How VMDetector Loader Hides in Plain Sight (www.sonicwall.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2387

2

Gunra Ransomware Group Unveils Efficient Linux Variant (www.trendmicro.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2388

2

CTO at NCSC Summary: week ending July 27th (ctoatncsc.substack.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2389

2

SSDT Hooking via Alt Syscalls for ETW Evasion (fluxsec.red)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2390

4

Chinese hackers have seized control. How did we let this happen? (www.telegraph.co.uk)

submitted 6 months ago by digicat to c/blueteamsec

5 comments fedilink

2391

3

Certiception-ADCS-trap: An ADCS honeypot to catch attackers in your internal network. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2392

2

The AltSyscalls module is designed merely as the intercept mechanism for using Alternate Syscalls on Windows 11 (github.com)

submitted 6 months ago* (last edited 6 months ago) by digicat to c/blueteamsec

0 comments fedilink

2393

3

A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch calc.exe, did it even happen (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2394

1

Following NoName057(16) DDoSia Project’s Targets (blog.sekoia.io)

submitted 2 years ago by campuscodi to c/blueteamsec

0 comments fedilink

2395

3

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution (www.securityjoes.com)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

2396

9

The Enemy Within: Threat Actors Target Subdomains of Trusted Global Brands in Mass Open Redirect Abuse. (www.silentpush.com)

submitted 2 years ago by campuscodi to c/blueteamsec

2 comments fedilink

2397

12

DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)

submitted 2 years ago by campuscodi to c/blueteamsec

0 comments fedilink

2398

6

A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation (cybergeeks.tech)

submitted 2 years ago by campuscodi to c/blueteamsec

0 comments fedilink

2399

5

Research: Zero-Day Shop (www.cyfirma.com)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

2400

6

Confused about the drama with the new BreachForums? Reading this will either help you or make your head spin (www.databreaches.net)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink