blueteamsec

544 readers

11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

476

Modus Operandi of Subtle Snail (catalyst.prodaft.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

477

Malicious Listener for Ivanti Endpoint Mobile Management Systems (www.cisa.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

478

DIGITAL FRONTLINES : INDIA UNDER MULTI-NATION HACKTIVIST ATTACK - CYFIRMA (www.cyfirma.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

479

obex: Obex – Blocking unwanted DLLs in user mode (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

480

United Kingdom National Charged in Connection with Multiple Cyber Attacks, Including on Critical Infrastructure (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

481

Teenagers charged over Transport for London cyber attack (www.bbc.co.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

482

External attack surface management (EASM) buyer's guide (www.ncsc.gov.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

483

MySonicWall Cloud Backup File Incident (www.sonicwall.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

484

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens (dirkjanm.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

485

VMScape: Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud Environments – Computer Security Group (comsec.ethz.ch)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

486

YASA-Engine: YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, designed to support multiple programming languages. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

487

Bi-Level Game-Theoretic Planning of Cyber Deception for Cognitive Arbitrage (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

488

Dissecting DCOM partie 1 (www.synacktiv.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

489

npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and More (safedep.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

490

Mapping the Infrastructure and Malware Ecosystem of MuddyWater (www.group-ib.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

491

Founder of One of World’s Largest Hacker Forums Resentenced to Three Years in Prison (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

492

Europol lists Spanish head of Russian cyber terrorism network among its most wanted | Sur in English (www.surinenglish.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

493

BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes (gitlab-com.gitlab.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

494

Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware (blogs.infoblox.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

495

Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm | IBM (www.ibm.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

496

The Dangers of Storing Unencrypted Passwords (www.huntress.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

497

Autonomous Timeline Analysis and Threat Hunting | Black Hat USA talk (elie.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

498

Windows local privilege escalation through the bitpixie vulnerability (blog.syss.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

499

Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization – Computer Security Group (comsec.ethz.ch)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

500

hermes-dec: A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink