blueteamsec

624 readers
29 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
226
3
Introducing RelayKing – Relay To Royalty (www.depthsecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
227
5
SonicWall Breach Led to Ransomware Attack on 74 US Banks (www.ctrlaltnod.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
228
2
Winsock no winsocks (gist.github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
229
2
Retro hunt results for binaries with the Claude refusal magic string by Florian (docs.google.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
230
3
The mystery behind a backslash: an anti-sandbox bypass technique for undisclosed APT32 samples (xz.aliyun.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
231
2
drvtrace: WinDbg plugin to trace module transitions from a debugged driver. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
232
3
Meet IClickFix: a widespread WordPress-targeting framework using the ClickFix tactic (blog.sekoia.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
233
2
RedKitten: AI-accelerated campaign targeting Iranian protests (harfanglab.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
234
1
CVE-2025-40551: SolarWinds WHD RCE (horizon3.ai)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
235
1
ErrTraffic Under the Hood: A look at the source code (ctrlaltintel.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
236
1
LABYRINTH CHOLLIMA Evolves into Three Adversaries (www.crowdstrike.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
237
1
North Korean Threat Actor Targets Financial Sector in the Nordics (www.truesec.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
238
3
Introducing IDE-SHEPHERD: Your shield against threat actors lurking in your IDE (securitylabs.datadoghq.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
239
2
Trust Infrastructure: The Evolution of Dark Forum Security and Its Economics (ptsecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
240
2
Konni’s New Arsenal: Unmasking GSRAT in North Korea-linked APT Operation (jsac.jpcert.or.jp)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
241
25
A LinkedIn Job Offer Tried to Install Malware on My Machine (codecrank.ai)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
242
5
Windows event logs were cleared, but resurrected in another file! (dfir.ru)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
243
3
OpenMalleableC2: Open Source Implementation of Cobalt Strike's Malleable C2 (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
244
3
chronix: A self-hosted, real-time collaborative workspace for offensive security assessments. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
245
2
cleanldap: BOF to perform stealthy LDAP queries over AD WS (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
246
3
Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan (www.welivesecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
247
2
Malware Analysis Space: Revisiting MoonBounce: Research Notes (malwareanalysisspace.blogspot.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
248
2
Threat Bulletin: Critical eScan Supply Chain Compromise | Malicious updates were distributed through eScan’s legitimate update infrastructure, resulting in the deployment of multi-stage malware (www.morphisec.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
249
2
Can’t stop, won’t stop: TA584 innovates initial access (www.proofpoint.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
250
2
Disrupting the World's Largest Residential Proxy Network (cloud.google.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›