blueteamsec

544 readers

10 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1001

3

SCENE 1: SoupDealer - Technical Analysis of a Stealth Java Loader Used in Phishing Campaigns Targeting Türkiye (www.malwation.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1002

2

クルド人グループによる日本の組織を狙ったサイバー攻撃 - Cyber attacks by Kurdish groups targeting Japanese organizations (jp.security.ntt)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1003

3

Microsoft Releases Guidance on High-Severity Vulnerability (CVE-2025-53786) in Hybrid Exchange Deployments (www.cisa.gov)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1004

2

BamboozlEDR: A comprehensive ETW (Event Tracing for Windows) event generation tool designed for testing and research purposes. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1005

3

Hidden Black Hands: How $1.46 Billion Disappeared in Silence - "This incident demonstrates the exceptionally targeted nature of Lazarus's attacks" (mp.weixin.qq.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1006

1

turnt: A tool designed for smuggling interactive command and control traffic through legitimate TURN servers hosted by reputable providers such as Zoom. (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1007

3

Trust Me, I’m a Legitimate Process: Verisimilitude and the Art of Hiding (nasbench.medium.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1008

1

Threat actors: “Please do not use Okta FastPass” (www.okta.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1009

2

From The Depths of the Shadows IRGC and Hacker Collectives Of The 12-Day War (securityscorecard.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1010

3

Cyber Assessment Framework v4.0 released in response to growing threat - UK (www.ncsc.gov.uk)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1011

1

ThrottleStop driver abused to terminate AV processes (securelist.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1012

1

UEFI Bootkit Hunting: Deep Search for Unique Code Behaviors - Chinese (mp.weixin.qq.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1013

1

Stored XSS in OpenVPN Dashboard widget (docs.netgate.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1014

1

yaraast: A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1015

1

GRITREP: Observed Malicious Driver Use Associated with Akira SonicWall Campaign (www.guidepointsecurity.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1016

3

Uncovering memory corruption in NVIDIA Triton (as a new hire) (blog.trailofbits.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1017

1

Project AK47: Uncovering a Link to the SharePoint Vulnerability Attacks (unit42.paloaltonetworks.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1018

3

Research: The Evolution of Chinese Smishing Syndicates and Digital Wallet Fraud (www.secalliance.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1019

1

Disguises Zip Past Path Traversal - "Schizophrenic ZIP is an archive file that – after unzipping by two different software – may return two different files" (blog.isec.pl)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1020

1

Getting Code Execution on Apache Spark SQL (muffsec.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1021

2

"Court Summons" Phishing Lure Used in Cyberattacks on Ukrainian Government and Defence Sector (cip.gov.ua)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1022

1

Detection Engineering & Threat Hunting SIG (Special Interest Group) from FIRST (www.first.org)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1023

1

ft3: FT3: Fraud Tools, Tactics, and Techniques Framework - Fraud Tools, Tactics, and Techniques (FT3) is Stripe's adaptation of ATT&CK-style security frameworks (github.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1024

2

Cisco Event Response: Vishing Attack Impacting Third-Party CRM System (sec.cloudapps.cisco.com)

submitted 3 months ago by digicat to c/blueteamsec

0 comments fedilink

1025

1

ITW CRITICAL SECURITY BULLETIN: Trend Micro Apex One™ (On-Premise) Management Console Command Injection RCE Vulnerabilities (success.trendmicro.com)

submitted 3 months ago by digicat to c/blueteamsec

1 comments fedilink