blueteamsec

628 readers

35 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

676

1

Insider Threat Detection Using GCN and Bi-LSTM with Explicit and Implicit Graph Representations (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

https://ieeexplore.ieee.org/document/11311570

677

1

open-klara: Open KLara Project - a community-driven fork of the original KLara project by Kaspersky Lab, aimed at helping Threat Intelligence researchers hunt for new malware using Yara. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

678

3

VectoredOverloading in Rust -This is an PoC of implementing that Kidkadi aka VectoredOverloading in Rust. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

679

1

Announcing hardware-accelerated BitLocker (techcommunity.microsoft.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

680

2

Ukrainian National Pleads Guilty to Conspiracy to Use Nefilim Ransomware to Attack Companies in the United States and Other Countries (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

681

1

Advent Of Configuration Extraction – Part 4: Turning capa Into A Configuration Extractor For TinyShell variant (blog.sekoia.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

682

1

yaraast: A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation - 0.7 release (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

683

1

MacSync Stealer Evolves: From ClickFix to Code-Signed Swift Malware (www.jamf.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

684

3

Cornwall libraries remove Humphrey books over phishing web links (www.bbc.co.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

685

4

DriverFixer0428 macOS Credential Stealer (www.lunchm0n3y.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

686

1

【重要】EmEditor インストーラーのダウンロード導線に関するセキュリティインシデントのお知らせ – EmEditor (テキストエディタ) - ""We regret that we have confirmed that the download on the EmEditor official may have been tampered with by a 3rd party" (jp.emeditor.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

687

4

Protecting Tokens and Assertions from Forgery, Theft, and Misuse (www.cisa.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

688

2

UNG0801: Tracking Threat Clusters obsessed with AV Icon Spoofing targeting Israel | Seqrite (www.seqrite.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

689

2

Kingest0r: Utility tool to ingest CSV files into Kusto (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

690

1

Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack (klezvirus.github.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

691

2

How are Prefetch created? (y0sh1mitsu.github.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

692

2

Operation Artemis: Analysis of HWP-Based DLL Side Loading Attacks (www.genians.co.kr)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

693

2

TokenFlare: Serverless AITM Simulation Framework for Entra ID and M365 (github.com)

submitted 1 month ago by digicat to c/blueteamsec

1 comments fedilink

694

2

Operation PCPcat: Hunting a Next.js Credential Stealer That's Already Compromised 59K Servers (beelzebub.ai)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

695

1

Ukrainian National Pleads Guilty to Conspiracy to Use Nefilim Ransomware to Attack Companies in the United States and Other Countries (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

696

2

BOF_ExecuteAssembly: Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

697

1

EDR-GhostLocker: AppLocker-Based EDR Neutralization (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

698

1

oss-sec: [CVE-2025-14282] dropbear: privilege escalation via unix domain socket forwardings (seclists.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

699

1

BRIDG-ICS: AI-Grounded Knowledge Graphs for Intelligent Threat Analytics in Industry~5.0 Cyber-Physical Systems (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

700

1

An Adaptive Multi-Layered Honeynet Architecture for Threat Behavior Analysis via Deep Learning (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink