blueteamsec

628 readers

33 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

776

2

How to detect Mythic activity with NDR-class solutions (securelist.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

777

2

Decompiling run-only AppleScripts (pberba.github.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

778

2

How data science can boost your detection engineering maintenance and keep you from herding sheep (medium.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

779

2

Peters & Cornyn Reintroduce Legislation to Protect Commercial Satellites from Cybersecurity Threats (www.hsgac.senate.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

780

2

Patch Wednesday: Root Cause Analysis with LLMs (www.akamai.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

781

3

Detecting malicious pull requests at scale with LLMs (www.datadoghq.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

782

2

MC1193689 - Microsoft baseline security mode for Office, SharePoint, Exchange, Teams, and Entra | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

783

3

Latrodectus BackConnect (www.netresec.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

784

2

BpfJailer: eBPF Mandatory Access Control (lpc.events)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

785

6

thirdeye: The Third Eye 👁⃤ - unmask protected windows from user mode (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

786

3

MicroSpark: Testing Voltage Glitches on Intel Microcode (download.vusec.net)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

787

3

wirebrowser: Wirebrowser is a debugging, interception, and memory-inspection toolkit powered by the Chrome DevTools Protocol (CDP). It unifies network manipulation, API testing, automation scripting, (github.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

788

3

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited (www.wiz.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

789

2

PyStoreRAT: A New AI-Driven Supply Chain Malware Campaign Targeting IT & OSINT Professionals (www.morphisec.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

790

1

Blog: Task Injection – Exploiting agency of autonomous AI agents (bughunters.google.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

791

6

Fake Leonardo DiCaprio Movie Torrent Drops Agent Tesla Through Layered PowerShell Chain (www.bitdefender.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

792

3

phantom-keylogger: Phantom Keylogger is an advanced, stealth-enabled keystroke and visual intelligence gathering system. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

793

2

unKover: Anti-Rootkit/Anti-Cheat Driver to uncover unbacked or hidden kernel code. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

794

1

OffsetInspect: PowerShell utility to map AV detection offsets in PowerShell scripts to their corresponding line numbers for static analysis and red-team tooling. (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

795

2

Holy Shuck! Weaponizing NTLM Hashes as a Wordlist (trustedsec.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

796

1

SCOMmand and Conquer - Attacking System Center Operations Manager (Part 1) (specterops.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

797

1

A look at an Android ITW DNG exploit (googleprojectzero.blogspot.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

798

1

APT15 Cyber Espionage: Campaigns and TTPs Analysis (www.picussecurity.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

799

1

APT-C-26（Lazarus）组织利用WinRAR漏洞部署Blank Grabber木马的技术分析 - Technical Analysis of APT-C-26 (Lazarus) Group's Deployment of the Blank Grabber Trojan Using a WinRAR Vulnerability (mp.weixin.qq.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

800

1

Multiple Threat Actors Exploit React2Shell (CVE-2025-55182) (cloud.google.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink