blueteamsec

543 readers

14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

376

2

Olymp Loader: A new Malware-as-a-Service written in Assembly (outpost24.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

377

2

the Dark Side of Dynamic DNS Providers (www.silentpush.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

378

2

SVG Phishing hits Ukraine with Amatera Stealer, PureMiner (www.fortinet.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

379

3

AIDR-Bastion: A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System incorporates multiple engines - supports Sigma (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

380

9

Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams (today.ucsd.edu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

381

2

Gmail phishing posing as Google Careers (gist.github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

382

2

SetupHijack: SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and update processes. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

383

3

Wyrm: The dragon in the dark. The best defence, is a good offense. A red team post exploitation framework for testing security controls during red team assessments. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

384

2

Analysis of a Ransomware Breach (aff-wg.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

385

4

Patching Firmware Secure Boot on DELL G115 Through Off-chip Extraction (blog.redcrowlab.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

386

2

Eye of the Storm: Analyzing DarkCloud's Latest Capabilities (www.esentire.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

387

7

docuseal: Open source DocuSign alternative. Create, fill, and sign digital documents ✍️ (github.com)

submitted 1 month ago by digicat to c/blueteamsec

1 comments fedilink

388

3

WerDump: A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

389

5

Pointer leaks through pointer-keyed data structures (googleprojectzero.blogspot.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

390

2

CTI Dataset Construction from Telegram (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

391

2

pipe-intercept: Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

392

2

CTO at NCSC Summary: week ending September 28th (ctoatncsc.substack.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

393

3

ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices (blog.talosintelligence.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

394

8

Netherlands: Two teenagers arrested in spying case linked to Russia - " walked past the offices of Europol, Eurojust and the Canadian embassy in The Hague carrying a "wi-fi sniffer" (www.bbc.co.uk)

submitted 1 month ago by digicat to c/blueteamsec

1 comments fedilink

395

5

IMDS Abused: Hunting Rare Behaviors to Uncover Exploits - we uncovered exploitation in the wild of a previously unknown zero-day vulnerability from insecure use of pandoc. (www.wiz.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

396

4

The PLA Goes Back to School: Mapping New Developments in China’s Military Cyber Education System (margin.re)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

397

3

Bookworm to Stately Taurus Using the Unit 42 Attribution Framework (unit42.paloaltonetworks.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

398

3

XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory (www.microsoft.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

399

4

Ollama Drama: Investigating the Prevalence of Ollama Open Instances (censys.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

400

4

First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails (www.koi.security)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink