blueteamsec

680 readers
13 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2401
2
Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2402
1
[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2403
6
Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2404
2
Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2405
2
Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2406
5
IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)
submitted 7 months ago by digicat to c/blueteamsec
1 comments fedilink
2407
5
Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2408
4
Release QUANTUMSTRAND beta 1 - designed to revolutionize how analysts interact with strings in binary files - qs focuses on providing deep context (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2409
4
Inside the Lab-Dookhtegan Hack: How Iranian Ships Lost Their Voice at Sea (blog.narimangharib.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2410
2
v0.7 -> v0.8 | Adaptix Framework (adaptix-framework.gitbook.io)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2411
1
Secretary Noem Terminates Inept FEMA Employees After Uncovering Massive Cyber Failures, Demands Accountability | Homeland Security (www.dhs.gov)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2412
1
How attackers adapt to built-in macOS protection - good overview but by Kaspersky who have interest (securelist.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2413
1
DeviceToken: Request device ticket/token using the device's MSA (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2414
2
TrapFlagForSyscalling: Bypass user-land hooks by syscall tampering via the Trap Flag (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2415
3
RtlHijack: Alternative Read and Write primitives using Rtl* functions the unintended way. (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2416
2
ADSyncDump-BOF: The ADSyncDump BOF is a port of Dirk-Jan Mollema's adconnectdump.py / ADSyncDecrypt into a Beacon Object File (BOF) with zero dependencies. (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2417
1
漫步安卓物理内存：CVE-2025-21479 提权实录 - A Walk Through Android Physical Memory: CVE-2025-21479 Privilege Escalation (dawnslab.jd.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2418
2
EnumEDRs: Enumerate active EDR's on the system (github.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2419
1
RDP Forensics Part 2: Fingerprinting Attacks with Timezone, OS Type, and Monitor Display Resolution (medium.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2420
1
RDP Forensics Part 1: Fingerprinting Attacks with Keyboard Layout Data (medium.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2421
2
APT Sidewinder - "the HuntSQL query to track POST requests to "paknavy[.]org[.]pk" and found 25 Unique Webpages" (pastebin.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2422
2
The Trap of Troubleshooting: Analysis of Lazarus (APT-Q-1)'s Recent Attacks Using ClickFix (mp.weixin.qq.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2423
2
Ransomware Damage Recovery｜National Police Agency - Phobos/8Base Decryption Tool (www.npa.go.jp)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2424
4
Security incident post-mortem - "resulted in $14 million in unauthorized withdrawals from 9 user accounts.this attack was perpetrated by UNC4899, a North Korean state-sponsored actor" (woox.io)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
2425
2
Operation HanKook Phantom: APT37 Spear-Phishing Campaign (www.seqrite.com)
submitted 7 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›