blueteamsec

628 readers
30 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
726
1
Making CloudFlare Workers Work for Red Teams (blog.zsec.uk)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
727
2
CTO at NCSC Summary: week ending December 21st - nearly Christmas edition ❄️🎄🎅🤶🎄❄️ (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
728
2
APT-C-36（盲眼鹰）利用Hijackloader开展攻击活动 - APT-C-36 (Blind Hawk) uses Hijackloader to carry out attacks. (mp.weixin.qq.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
729
9
Russia is responsible for destructive and disruptive cyberattacks against Denmark (www.fe-ddis.dk)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
730
1
Unmasking the Evolving Iranian Prince of Persia (www.safebreach.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
731
6
Amazon Caught North Korean IT Worker By Tracing Keystroke Data (www.bloomberg.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
732
2
GachiLoader: Defeating Node.js Malware with API Tracing GachiLoader: Defeating Node.js Malware (research.checkpoint.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
733
2
LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan (www.welivesecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
734
2
Black Hole of Trust: SEO Poisoning in Silver Fox’s Space Odyssey (www.nccgroup.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
735
1
BlueDelta’s Persistent Campaign Against UKR.NET (www.recordedfuture.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
736
2
Inside DPRK Operations: New Lazarus and Kimsuky Infrastructure Uncovered Across Global Campaigns (hunt.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
737
2
Understanding MFA Bypass: Trends, Tactics, and Solutions (noorstream.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
738
1
HubSpot users targeted by active phishing campaign (evalian.co.uk)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
739
1
ResidentBat: Operational Report & Advisory on KGB spyware in Belarus in 2025 (resident.ngo)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
740
1
Exclusive: RSF uncovers new spyware from Belarus (rsf.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
741
1
React2Shell used as initial access vector for Weaxor ransomware deployment (www.s-rminform.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
742
1
Access granted: phishing with device code authorization for account takeover (www.proofpoint.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
743
1
UAT-9686 actively targets Cisco Secure Email Gateway and Secure Email and Web Manager (blog.talosintelligence.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
744
1
ConsentFix: A New way to Phish for Tokens (newtonpaul.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
745
1
The Post-Compromise Gap: Why Mature Keep Winning (deceptiq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
746
7
Inside GhostPoster: How a PNG Icon Infected 50,000 Firefox Users (www.koi.ai)
submitted 2 months ago by digicat to c/blueteamsec
1 comments fedilink
747
2
FreeBSD: Remote code execution via ND6 Router Advertisements (www.freebsd.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
748
1
BlindEagle Deploys Caminho and DCRAT (www.zscaler.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
749
7
Iran-linked hackers dox Israelis, offer cash bounties (www.jpost.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
750
2
史上最疯：独家揭秘感染全球180万Android设备的巨型僵尸网络Kimwolf | The craziest thing in history: Exclusive reveal of the giant botnet Kimwolf that infected 1.8 million Android devices worldwide (blog.xlab.qianxin.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›