blueteamsec

545 readers

22 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

726

4

TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents (www.trendmicro.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

727

9

Malvertising Campaign on Meta Expands to Android, Pushing Advanced Crypto-Stealing Malware to Users Worldwide (www.bitdefender.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

728

6

Loophole allows threat actors to claim VS Code extension names (www.reversinglabs.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

729

7

Anklage gegen ein mutmaßliches Mitglied einer deutschen „Anonymous“-Gruppierung - Charges against a suspected member of a German “Anonymous” group (www.berlin.de)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

730

5

Malicious versions of Nx and some supporting plugins were published (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

https://semgrep.dev/blog/2025/security-alert-nx-compromised-to-steal-wallets-and-credentials/

731

13

Taiwan traces Chinese hackers selling stolen data to trafficking ring - Focus Taiwan (focustaiwan.tw)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

732

5

DPRK IT WORKERS UNVEILED (theravenfile.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

733

2

ENISA to operate the EU Cybersecurity Reserve with EUR 36 million | ENISA (enisa.europa.eu)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

734

4

Endpointmanager Aug 2025 zero-day - The Sangoma FreePBX Security Team is aware of a potential exploit affecting some systems with the administrator control panel exposed to the public internet (community.freepbx.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

735

5

No Ranges, No Bounties, No Contests: Forging Offensive Capabilities in China’s 2000s Hacker Scene (open.substack.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

736

3

MystRodX: The Covert Dual-Mode Backdoor Threat (blog.xlab.qianxin.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

737

2

Threat Actors Deploy Sinobi Ransomware via Compromised SonicWall SSL VPN Credentials (www.esentire.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

738

2

ShadowSilk: A Cross-Border Binary Union for Data Exfiltration (www.group-ib.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

739

4

Velociraptor incident response tool abused for remote access (news.sophos.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

740

3

Storm-0501’s evolving techniques lead to cloud-based ransomware (www.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

741

1

U.S.-ROK-Japan Joint Statement on DPRK Information Technology Workers - United States Department of State (www.state.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

742

3

One Step Ahead: Stark Industries Solutions Preempts EU Sanctions (www.recordedfuture.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

743

2

Treasury Sanctions Fraud Network Funding DPRK Weapons Programs (home.treasury.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

744

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

745

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

746

2

Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group (chollima-group.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

747

3

UK and allies expose China-based technology companies for enabling global cyber campaign against critical networks (www.ncsc.gov.uk)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

748

4

Detecting and countering misuse of AI - "We identified and investigated a sophisticated Chinese threat actor who systematically leveraged Claude to enhancecyber operations targeting Vietnam" (www.anthropic.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

749

10

BruteForceAI: Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

750

4

Widespread Data Theft Targets Salesforce Instances via Salesloft Drift | Google Cloud Blog (cloud.google.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink