blueteamsec

680 readers

9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2426

3

Founding: Founding is a generator that will create a loader encrypted or obfuscated with different execution types (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2427

11

Copilot Broke Your Audit Log, but Microsoft Won’t Tell You (pistachioapp.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2428

2

Using Auth0 Logs for Proactive Threat Detection (sec.okta.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2429

3

Backdoor in "AppSuite PDF Editor": A Detailed Technical Analysis (www.gdatasoftware.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2430

8

Canary tokens: Learn all about the unsung heroes of security at Grafana Labs (grafana.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2431

4

Uncovering Compromised Hosts using SSH Public Keys (www.usenix.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2432

3

Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) (blog.amberwolf.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2433

7

Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 (doublepulsar.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2434

3

CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2435

0

PoolFlip: A Multi-Agent Reinforcement Learning Security Environment for Cyber Defense (arxiv.org)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2436

1

Chasing the Silver Fox: Cat & Mouse in Kernel Shadows (research.checkpoint.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2437

2

Methodology for Characterizing Network Behavior of Internet of Things Devices (www.nist.gov)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2438

8

WhatsApp - "could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability .. may have been exploited" (www.whatsapp.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2439

5

Iran-Nexus Spear phishing Campaign Masquerades as Omani MFA to Target Global Governments (dreamgroup.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2440

2

Cache Me If You Can (Sitecore Experience Platform Cache Poisoning to RCE) (labs.watchtowr.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2441

3

Amazon disrupts watering hole campaign by Russia’s APT29 | Amazon Web Services (aws.amazon.com)

submitted 7 months ago* (last edited 7 months ago) by digicat to c/blueteamsec

1 comments fedilink

2442

3

Detecting Velociraptor misuse :: Velociraptor (docs.velociraptor.app)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2443

4

A Nightmare on EDR Street: WDAC's Revenge (beierle.win)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2444

7

ShadowSilk: A Cross-Border Binary Union for Data Exfiltration (www.group-ib.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2445

4

TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents (www.trendmicro.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2446

9

Malvertising Campaign on Meta Expands to Android, Pushing Advanced Crypto-Stealing Malware to Users Worldwide (www.bitdefender.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2447

6

Loophole allows threat actors to claim VS Code extension names (www.reversinglabs.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2448

7

Anklage gegen ein mutmaßliches Mitglied einer deutschen „Anonymous“-Gruppierung - Charges against a suspected member of a German “Anonymous” group (www.berlin.de)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

2449

5

Malicious versions of Nx and some supporting plugins were published (github.com)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink

https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/

2450

13

Taiwan traces Chinese hackers selling stolen data to trafficking ring - Focus Taiwan (focustaiwan.tw)

submitted 7 months ago by digicat to c/blueteamsec

0 comments fedilink