blueteamsec

628 readers
31 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
626
1
ColdFusion++ Christmas Campaign: Catching a Coordinated Callback Calamity (www.labs.greynoise.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
627
1
Linux.Detection.CVE202514847.MongoBleed :: Velociraptor (docs.velociraptor.app)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
628
1
FindExposedMongoDB.kql - Find Internet exposed assets, onboard to MDE and mongoDB installed. Based on common network port or TVM data (gist.github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
629
2
MalwareTracesGenerator: Generate malware traces for detection tests (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
630
9
‘All brakes are off’: Russia’s attempt to rein in illicit market for leaked data backfires (www.theguardian.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
631
3
CTO at NCSC Summary: week ending December 28th (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
632
2
HP Aruba Privileged Escalation Dec 2025 (thecontractor.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
633
3
Continuously hardening ChatGPT Atlas against prompt injection attacks - "However, prompt injection remains an open challenge for agent security, and one we expect to continue working on for years" (openai.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
634
3
Ransomware cyber attack on Romanian Waters (www.dnsc.ro)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
635
3
Mapping “Fly”, a threat actor with links to Russian Market’s infrastructure (www.intrinsec.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
636
3
Annual Report to Congress: Military and Security Developments Involving the People's Republic of China 2025 - "Throughout 2024, PLA cyber actors almost certainly maintained and developed further" (media.defense.gov)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
637
5
Reviving Discarded Vulnerabilities: Exploiting Previously Unexploitable Linux Kernel Bugs Through Control Metadata Fields (lujie.ac.cn)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
638
2
PCIe IDE Standard Vulnerabilities - Potential security vulnerabilities were found to be affecting PCIe Base Specification Revision 5.0 and onwards in a protocol mechanism (pcisig.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
639
6
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations (socket.dev)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
640
4
TRM Traces Stolen Crypto from 2022 LastPass Breach — On-chain Indicators Suggest Russian Cybercriminal Involvement (www.trmlabs.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
641
4
EmEditor 供应链事件细节披露：分发窃密特马席卷国内政企 - Details of the EmEditor supply chain incident revealed: Distribution of stolen MITBBS tokens sweeps across domestic government and enterprises. (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
642
5
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
643
5
CPLDCOMTrigger: CPL remote trigger - A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
644
6
CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit - A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive serve (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
645
3
Product Security Advisory and Analysis: Observed Abuse of FG-IR-19-283 | Fortinet Blog (www.fortinet.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
646
3
New Cloud Atlas APT campaign (securelist.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
647
4
Evasive Panda APT campaign overview (securelist.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
648
8
Justice Department Announces Seizure of Stolen-Password Database Used in Bank Account Takeover Fraud (www.justice.gov)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
649
4
Cybersecurity Staff Plead Guilty for Moonlighting as Hackers (www.bloomberg.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
650
10
DumpChromeSecrets: Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›