blueteamsec

544 readers

17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

601

2

H1 2025 Malware and Vulnerability Trends (www.recordedfuture.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

602

5

APT37: Rust Backdoor & Python Loader (www.zscaler.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

603

4

npm debug and chalk packages compromised (www.aikido.dev)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

604

1

Windows Internals: Secure Calls - The Bridge Between The NT Kernel and Secure Kernel (connormcgarr.github.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

605

4

Salt Typhoon and UNC4841: New Domains; Urges Defenders to Check Telemetry and Log Data (www.silentpush.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

606

1

«Плановое мероприятие»: в «КазМунайГазе» отрицают атаку российских хакеров - "Planned event": KazMunaiGas denies attack by Russian hackers - mistook a "planned security check" for a cyberattack. (orda.kz)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

607

6

From CVE Entries to Verifiable Exploits: An Automated Multi-Agent Framework for Reproducing CVEs (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

608

2

Microsoft Azure services disrupted by Red Sea cable cuts (www.bbc.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

609

7

Reverse engineering of Apple's iOS 0-click CVE-2025-43300: 2 bytes that make size matter (blog.quarkslab.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

610

2

Update on Mandiant Drift and Salesloft Application Investigations (trust.salesloft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

611

3

Bells Ringing in Dar es Salaam | Chollima Group (chollima-group.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

612

13

Qantas cyber attack: Chief executive punished with $278k pay cut (www.nzherald.co.nz)

submitted 2 months ago by digicat to c/blueteamsec

2 comments fedilink

613

4

Retrieving kernel process object addresses by exploiting a driver providing R/W to physical memory (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

614

4

A Playbook for Winning the Cyber War | Intelligence, National Security, and Technology Program | CSIS (www.csis.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

615

5

VulnRepairEval: An Exploit-Based Evaluation Framework for Assessing Large Language Model Vulnerability Repair Capabilities (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

616

2

dittobytes: Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

617

1

BugCheck 0xD1: Potential race condition in Teredo cleanup during flow teardown (medium.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

618

3

New Botnet Emerges from the Shadows: NightshadeC2 (www.esentire.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

619

3

The Czech National Cyber and Information Security Agency issues warning about data transfer to and remote administration from China (nukib.gov.cz)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

620

1

Salesloft Third-Party Drift Integration Partners FAQ (9:00PM ET) (trust.salesloft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

621

4

Critical SAP S/4HANA code injection vulnerability (CVE-2025-42957) exploited in the wild (securitybridge.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

622

4

The GhostAction Campaign: 3,325 Secrets Stolen Through Compromised GitHub Workflows (blog.gitguardian.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

623

2

DRMD: Deep Reinforcement Learning for Malware Detection under Concept Drift (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

624

2

The Art of Hide and Seek: Making Pickle-Based Model Supply Chain Poisoning Stealthy Again (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

625

3

Breaking Diffusion with Cache: Exploiting Approximate Caches in Diffusion Models (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink