blueteamsec

544 readers
27 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
876
2
Hidden Links: Analyzing Secret Families of VPN Apps - The Citizen Lab (citizenlab.ca)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
877
1
Атрибуция Exchange-кейлоггеров к группировке PhantomCore - Attribution of Exchange keyloggers to the PhantomCore group (from Russia) (habr.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
878
3
Hacking and Firewalls Under Siege: Russia’s Cyber Industry During the War on Ukraine (www.cna.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
879
6
Mobile Phishers Target Brokerage Accounts in ‘Ramp and Dump’ Cashout Scheme (krebsonsecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
880
4
Don’t Phish-let Me Down: FIDO Authentication Downgrade (www.proofpoint.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
881
3
Okta Evilginx phishlet (OIE) with MFA downgrade rewrites (gist.github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
882
4
'Blue Locker' Analysis: Ransomware Targeting Oil & Gas Sector in Pakistan (www.resecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
883
4
Pantheon Introduction: A Guide and Script Collection for Mythic Eventing (specterops.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
884
4
ControlSTUDIO: Adversary Simulation Framework (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
885
5
gpoParser: gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment. (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
886
3
APT-C-36（盲眼鹰）组织在新攻击活动中升级对抗手段 - APT-C-36 (Blind Eagle) group escalates its tactics in new attack campaigns (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
887
3
深度：2025 年智能安全运营（ AI SOC） 市场格局 - In-depth: The 2025 Intelligent Security Operations (AI SOC) Market Landscape (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
888
2
SAST结合大模型的逻辑漏洞识别探索 - proposes and implements an automated logical vulnerability auditing tool powered by an AI agent. By combining the deep analysis capabilities of traditional SAST with AI (mp.weixin.qq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
889
4
All You Need Is MCP - LLMs Solving a DEF CON CTF Finals Challenge (wilgibbs.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
890
5
When Defenders Become the Attackers: The Elastic EDR 0-Day (RCE + DoS) (ashes-cybersecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
891
3
There and Back Again: Detecting OT devices across protocol gateways (m.youtube.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
892
2
Should Security Solutions Be Secure? Maybe We're All Wrong - Fortinet FortiSIEM Pre-Auth Command Injection (CVE-2025-25256) (labs.watchtowr.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
893
3
Phishing and scams: how fraudsters are deceiving users in 2025 (securelist.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
894
3
LazarOps: APT Tactics Targeting the Developers Supply Chain (www.securityjoes.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
895
3
How XProtect’s detection rules have changed 2019-25 (eclecticlight.co)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
896
6
Russian hackers seized control of Norwegian dam, spy chief says (www.theguardian.com)
submitted 2 months ago by digicat to c/blueteamsec
1 comments fedilink
897
6
FACADE: Fast and Accurate Contextual Anomaly DEtection (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
898
6
SS7: Securing a Legacy Protocol in a Modern Threat Landscape, and how information sharing can help to mitigate - Security (www.gsma.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
899
3
CTO at NCSC Summary: week ending August 17th (ctoatncsc.substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
900
2
CrossC2 Expanding Cobalt Strike Beacon to Cross-Platform Attacks - (blogs.jpcert.or.jp)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›