blueteamsec

544 readers
9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1101
-2
Warren is an open-source security alert management system that automates the tedious parts of alert triage. It ingests alerts from your existing tools, enriches them with AI and threat intelligence (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 

https://zenn.dev/mizutani/articles/secmon-warren

1102
5
Illumina Inc. to Pay $9.8M to Resolve False Claims Act Allegations Arising from Cybersecurity Vulnerabilities in Genomic Sequencing Systems (www.justice.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1103
3
Naming country linked to UNC3886 attack not in Singapore’s best interest at this point in time: Shanmugam (www.channelnewsasia.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1104
4
Exploiting the Synology TC500 at Pwn2Own Ireland 2024 (blog.infosectcbr.com.au)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1105
2
Let’s Be Objective: A Deep Dive into 0bj3ctivityStealer's Features (www.trellix.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1106
3
XWorm V6: 高度な回避機能と AMSI バイパス機能が明らかに - XWorm V6: Advanced Evasion and AMSI Bypass Capabilities Revealed (www.netskope.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1107
2
2025 GenAI Code Security Report: ASSESSING THE SECURITY OF USING LLMS FOR CODING (www.veracode.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1108
2
machofile: machofile is a module to parse Mach-O binary files (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1109
3
autoswagger: Autoswagger by Intruder - detect API auth weaknesses (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1110
3
ICANN writes letter to Web Commerce Communications Limited dba WebNic.cc for not dealing with DNS domain abuse reports (www.icann.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1111
4
When Privileged Access Falls into the Wrong Hands: Chinese Companies in Microsoft’s MAPP Program (nattothoughts.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1112
5
Microsegmentation in Zero Trust Part One: Introduction and Planning (www.cisa.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1113
3
Microsoft OAuth App Impersonation Campaign Leads to MFA Phishing (www.proofpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1114
6
More than 90 state, local governments targeted using Microsoft SharePoint vulnerability, group says (archive.ph)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1115
0
Introducing Unit 42’s Attribution Framework (unit42.paloaltonetworks.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1116
5
RingReaper: Linux post-exploitation agent that uses io_uring to stealthily bypass EDR detection by avoiding traditional syscalls. (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1117
1
Before ToolShell: Exploring Storm-2603’s Previous Ransomware Operations (research.checkpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1118
3
Attackers abusing Proofpoint & Intermedia link wrapping to deliver phishing payloads (www.cloudflare.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1119
2
CISA and USCG Issue Joint Advisory to Strengthen Cyber Hygiene in Critical Infrastructure (www.cisa.gov)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1120
1
What Comes After Detection Rules? Smarter Detection Strategies in ATT&CK (medium.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1121
3
Frozen in transit: Secret Blizzard’s AiTM campaign against diplomats (www.microsoft.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1122
1
Using LLMs as a reverse engineering sidekick (blog.talosintelligence.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1123
1
Email-Delivered RMM: Abusing PDFs for Silent Initial Access (labs.withsecure.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1124
1
How North Korea-Backed Lazarus Group Is Weaponizing Open Source to Target Developers (www.sonatype.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1125
4
M365 Email OSINT After the Lockdown: What Still Works in 2025 (dstreefkerk.github.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›