blueteamsec

544 readers

20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

901

3

NIST Releases Control Overlays for Securing AI Systems Concept Paper (csrc.nist.gov)

submitted 2 months ago* (last edited 2 months ago) by digicat to c/blueteamsec

0 comments fedilink

902

3

2025 State of the Internet: Digging into Residential Proxy Infrastructure (censys.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

903

2

Security Release for Matrix messaging - CVE-2025-49090 (matrix.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

904

3

Poland foiled cyberattack on big city's water supply, deputy PM says (www.reuters.com)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

905

2

🛡️ DEFCON Workshop: Putting EDRs in Their Place - 💀 Killing and Silencing EDR Agents Like an Adversary (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

906

3

Handala Hacker Exposed: Iran International Identifies Intelligence Ministry Operative Behind Cyber Attack (blog.narimangharib.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

907

5

BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets (techcommunity.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

908

4

Cybercrime in Australia 2024 (www.aic.gov.au)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

909

2

Foundations for OT Cybersecurity: Asset Inventory Guidance for Owners and Operators (www.cisa.gov)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

910

4

Launching Microsoft Secure Future Initiative (SFI) patterns and practices (www.microsoft.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

911

1

ATEAM - Azure Resource Attribution via Tenant ID Enumeration (www.netspi.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

912

1

Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication (specterops.io)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

913

2

kurasagi: Windows 11 24H2 Runtime PatchGuard Bypass (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

914

2

Mastering Apple's Endpoint Security for Advanced macOS Malware Detection (speakerdeck.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

915

3

From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion (media.defcon.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

916

4

Casus: Citrix kwetsbaarheid (Update 13-08-2025) - The NCSC has determined that several critical organizations in the Netherlands have been successfully attacked via a vulnerability in Citrix (www.ncsc.nl)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

917

4

Zero Click, One NTLM: Microsoft Security Patch Bypass (CVE-2025-50154) (cymulate.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

918

4

FortMajeure: Authentication Bypass in FortiWeb (CVE-2025-52970) (pwner.gg)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

919

5

FortiGuard Labs - Exploited in the wild - - An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSIEM (self.blueteamsec)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

920

2

Webshell Detection Script for Citrix Netscaler appliances (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

921

2

HKLM\SYSTEM\Setup\sMarTdEpLoY - The (Static) Keys to Abusing PDQ SmartDeploy (specterops.io)

submitted 2 months ago by digicat to c/blueteamsec

1 comments fedilink

922

4

Few and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was Not (nattothoughts.substack.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

923

2

BYOVD_read_write_primitive: Proof of Concepts code for Bring Your Own Vulnerable Driver techniques (github.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

924

2

UNC3886 Tactics, Techniques, and Procedures: Full Technical Breakdown (www.picussecurity.com)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink

925

4

Perry: A High-level Framework for Accelerating Cyber Deception Experimentation (arxiv.org)

submitted 2 months ago by digicat to c/blueteamsec

0 comments fedilink