blueteamsec

626 readers
34 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
301
2
CTO at NCSC Summary: week ending January 25th (ctoatncsc.substack.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
302
3
A Shared Arsenal: Identifying Common TTPs Across RATs (www.splunk.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
303
1
LNKファイルを介して実行されるマルウェアMoonPeak – MoonPeak malware executed via LNK files (sect.iij.ad.jp)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
304
1
Oracle RCE Vulnerability CVSS 10.0 - affecting Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS (www.oracle.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
 
 
305
1
Scattered Spider Attacks | Infrastructure and TTP Analysis (www.team-cymru.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
306
3
Inside Iran’s APT Network: Profiling the Most Active Iranian State‑Linked Threat Actors (falconfeeds.io)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
307
1
IDA_Plugin_IID_to_String: A plugin for IDA that converts IID/GUID data structures to string and adds comments where the IID is referenced (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
308
3
Break LLM Workflows with Claude's Refusal Magic String (hackingthe.cloud)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
309
1
Analysis of Single Sign-On Abuse on FortiOS (www.fortinet.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
310
1
Before the Headlines: Northwave’s Early LOLDrivers Research (www.magicsword.io)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
311
1
Attackers are leveraging SEO poisoning and abusing online repositories to target users looking for legitimate tools. Associated ZIP archives contain BAT files that impersonate various applications (github.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
312
3
Cyberattack Targeting Poland’s Energy Grid Used a Wiper (www.zetter-zeroday.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
313
1
Weaponized in China, Deployed in India: The SyncFuture Espionage Targeted Campaign (www.esentire.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
314
4
Phishing kits adapt to the script of callers (www.okta.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
315
0
Venezuelan Nationals Convicted in ATM Jackpotting Scheme to Be Deported (www.justice.gov)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
316
2
Attack on *stan: Your malware, my C2 (ctrlaltintel.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
317
1
NIST Special Publication (SP) 800-82 Rev. 4 (Draft), Pre-Draft Call for Comments: Guide to Operational Technology (OT) Security (csrc.nist.gov)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
318
3
Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass) (labs.watchtowr.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
319
3
Cisco Security Advisory: Cisco Unified Communications Products Remote Code Execution Vulnerability - "The Cisco PSIRT is aware of attempted exploitation of this vulnerability in the wild" (sec.cloudapps.cisco.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
320
3
KONNI Adopts AI to Generate PowerShell Backdoors (research.checkpoint.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
 
 

BE

321
3
ShadowRelay: новый модульный бэкдор в госсекторе — ShadowRelay – a unique backdoor in the public sector (rt-solar.ru)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
322
3
ClearFake gets more evasive with new living off the land (LOTL) techniques (expel.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
323
3
Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts (arcticwolf.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
324
2
Task Failed Successfully - Microsoft’s “Immediate” Retirement of MDT (specterops.io)
submitted 3 weeks ago by digicat to c/blueteamsec
1 comments fedilink
325
1
Adventures in Primary Group Behavior, Reporting, and Exploitation (trustedsec.com)
submitted 3 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›