blueteamsec

628 readers
31 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
651
10
DumpChromeSecrets: Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
652
3
Oplichter aangehouden die met behulp van deepfake tientallen bankrekeningen opende en misbruikte -Fraudster arrested who used deepfake to open and misuse dozens of bank accounts (www.politie.nl)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
653
4
Living on the Edge: Evicting threat actors from perimeter appliances (www.youtube.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://bsidesfrankfurt.org/files/SECUINFRA-BSidesFRA25-Publish.pdf

654
4
Mapping Deception with BloodHound OpenGraph (specterops.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
655
4
Merry Christmas Blueteamsec β„οΈπŸŽ„πŸŽ…πŸ€ΆπŸŽ„β„οΈ (self.blueteamsec)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 

Annual thanks to everyone who reads and contributes here. Without you this community would not be what it is..

Cyber defence is a team sport.

Have a lovely one..

656
1
The Reflexive Game: Why Deception Operates on Minds (deceptiq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
657
4
574 arrests and USD 3 million recovered in coordinated cybercrime operation across Africa (www.interpol.int)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
658
5
Webrat, disguised as exploits, is spreading via GitHub repositories (securelist.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
659
1
Tom Cotton to Sean Cairncross on open source software security and Russian/Chinese contributions (www.cotton.senate.gov)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
660
6
NPM Package With 56K Downloads Caught Stealing WhatsApp Messages (www.koi.ai)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
661
3
certgraveyard_yara: Automated YARA rule generation from the Cert Central compromised certificate database. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
662
2
NIST Revises IR 8286 Suite of Reports | CSRC (csrc.nist.gov)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
663
15
mediatek? more like media-REKT, amirite. - 19 vulns in Wi-Fi (blog.coffinsec.com)
submitted 1 month ago by digicat to c/blueteamsec
3 comments fedilink
664
1
State-sponsored hacking group LNK malware threat analysis intelligence report (FSI Intelligence Report) (www.fsec.or.kr)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
665
1
Remote Code Execution via Expression Injection - An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
666
3
PQC-Scanner: A PQC network scanner to search for certificates which has been compiled into a exe to run on Windows as well as a Python Script. Essentially a quantum vulnerability assessment tool (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
667
1
List all Intune remediation scripts containing a specific string in detection or remediation (www.systanddeploy.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
668
2
Configure Azure file shares for Entra joined Windows devices and cloud identities (inthecloud247.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
669
4
All about Microsoft Intune | Starting with admin tasks in Microsoft Intune (petervanderwoude.nl)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
670
2
Azure Workbooks data sources - Azure Monitor - Workbooks now have support for querying from Azure Data Explorer clusters with the powerful Kusto query language (learn.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
671
2
Code Orange: Fail Small β€” our resilience plan following recent incidents (blog.cloudflare.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
672
1
Insider Threat Detection Using GCN and Bi-LSTM with Explicit and Implicit Graph Representations (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://ieeexplore.ieee.org/document/11311570

673
1
open-klara: Open KLara Project - a community-driven fork of the original KLara project by Kaspersky Lab, aimed at helping Threat Intelligence researchers hunt for new malware using Yara. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
674
3
VectoredOverloading in Rust -This is an PoC of implementing that Kidkadi aka VectoredOverloading in Rust. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
675
1
Announcing hardware-accelerated BitLocker (techcommunity.microsoft.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: β€Ή prev next β€Ί