blueteamsec

543 readers

14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

326

A2AS | Agent-to-Agent Security | A2A Security (www.a2as.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

327

AI时代重塑安全：深入解析XBOW如何重塑渗透测试[万字长文] - Reshaping Security in the AI Era: An In-Depth Analysis of How XBOW Reshapes Penetration Testing (www.freebuf.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

328

CVE-2025-4275 - 不仅仅是基于 Insyde H2O 的 UEFI 固件 SecureBoot 绕过第 2 部分 - CVE-2025-4275 - More Than Insyde H2O Based UEFI Firmware SecureBoot Bypass Part 2 (mp.weixin.qq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

329

Broken Trust: Fixed Supermicro BMC Bug Gains a New Life in Two New Vulnerabilities (www.binarly.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

330

ai-captcha-bypass: AI Captcha Bypass (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

331

gULP v1.0.0 is here! (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

332

Adversarial Prompts Classification v0.1 (jupyter.securitybreak.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

333

sekken-enum: adws enumeration bof (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

334

CTO at NCSC Summary: week ending October 5th (ctoatncsc.substack.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

335

How do timing attacks work? The timing attacks I'm discussing here are specifically the ones where a vulnerable server is comparing strings a byte at a time (nickg.ca)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

336

Confucius Espionage: From Stealer to Backdoor (www.fortinet.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

337

WARMCOOKIE One Year Later: New Features and Fresh Insights (www.elastic.co)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

338

UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud (blog.talosintelligence.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

339

Security update: Incident related to Red Hat Consulting GitLab instance (www.redhat.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

340

CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) (cert.gov.ua)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

341

MC1130385 - Retirement of inline SVG images in Microsoft Outlook | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

342

New spyware campaigns target privacy-conscious Android users in the UAE (www.welivesecurity.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

343

Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations (cloud.google.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

344

Datzbro: RAT Hiding Behind Senior Travel Scams (www.threatfabric.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

345

Lunar Spider Expands their Web via FakeCaptcha (blog.nviso.eu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

346

CharmingKitten: Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

347

Become an invisible admin in Active directory (iqunit.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

348

Indirect Memory Writing (unprotect.it)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

349

Part 4: Building Effective Detection Rules (sudo3rs.medium.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

350

ENISA Threat Landscape 2025 | ENISA (www.enisa.europa.eu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink