blueteamsec

544 readers
23 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
851
3
Elastic response to blog ‘EDR 0-Day Vulnerability’ (www.elastic.co)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
852
5
When Safe Links Become Unsafe: How Raven AI Caught Attackers Weaponizing Cisco's URL Rewriting (ravenmail.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
853
1
Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises with Social Media Footprints (www.morphisec.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
854
1
Detailed Analysis of the Stealer-Traffer Ecosystem (medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
855
3
Patching for persistence: How DripDropper Linux malware moves through the cloud - " an adversary exploiting CVE-2023-46604 in Apache ActiveMQ to gain persistent access on cloud Linux systems" (redcanary.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
856
1
pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis (clearbluejar.github.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
857
1
APT: Android, Phishing, microsoft (strikeready.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
858
2
SpeechRuntimeMove: Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
859
3
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign (www.trellix.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
860
4
BlockEDRTraffic: Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows Filtering Platform (WFP). (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
861
3
Deep dive into CVE-2025-29824 in Windows (bi.zone)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
862
12
Serial hacker who defaced official websites is sentenced (www.nationalcrimeagency.gov.uk)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
863
4
Escaping the Matrix: Client-Side Deanonymization Attacks on Privacy Sandbox APIs (spaceraccoon.dev)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
864
2
Hijacking multi-agent systems in your PajaMAS (blog.trailofbits.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
865
2
Dissecting PipeMagic: Inside the architecture of a modular backdoor framework (www.microsoft.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
866
0
LLMs vs. Geolocation: GPT-5 performs worse than other AI models - bellingcat (www.bellingcat.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
867
2
PipeMagic in 2025: How the backdoor operators’ tactics have changed (securelist.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
868
2
spearspray: Enhance Your Active Directory Password Spraying with User Intelligence. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
869
5
DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
870
3
sauron: Fast context enumeration for newly obtained Active Directory credentials. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
871
3
dumping_lsass: The different ways to dump LSASS (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
872
7
Cisco Security Advisory: Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (sec.cloudapps.cisco.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
873
5
Protecting You From Social Engineering Campaigns: An Update From Workday (blog.workday.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
874
4
hexstrike-ai: HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, etc. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
875
4
ECC.fail - Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory (ecc.fail)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›