blueteamsec

631 readers
52 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1151
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1152
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1153
2
JA4+ Plugin for Wireshark (github.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 
1154
2
SoK: Honeypots & LLMs, More Than the Sum of Their Parts? (arxiv.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1155
2
警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击 - Beware! The APT-C-08 (Manlinghua) group has launched its first cyberattack using the WinRAR vulnerability CVE-2025-6218. (mp.weixin.qq.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1156
3
What’s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) (labs.watchtowr.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1157
2
Data-Structure Injection (DSI) in AI Agents (labs.zenity.io)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1158
2
CTO at NCSC Summary: week ending November 9th (ctoatncsc.substack.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1159
3
BSI TR -03185-2 Secure Software Lifecycle for Open Source Software (www.bsi.bund.de)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1160
5
Site Unseen: Enumerating and Attacking Active Directory Sites (www.synacktiv.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1161
2
SesameOp: Novel backdoor uses OpenAI Assistants API for command and control (www.microsoft.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1162
4
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices (unit42.paloaltonetworks.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1163
2
Lazarus Group targets Aerospace and Defense with new Comebacker variant | Enki White Hat (www.enki.co.kr)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1164
1
How CHERIoT uses Sealing (cheriot.org)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1165
2
CyberUK tech talks call for papers (www.cyberuk.uk)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1166
13
Meta is earning a fortune on a deluge of fraudulent ads, documents show (archive.ph)
submitted 3 months ago by digicat to c/blueteamsec
1 comments fedilink
1167
2
New Kimsuky Malware “EndClient RAT”: First Technical Report and IOCs (www.0x0v1.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1168
7
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy (www.security.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1169
6
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation (research.checkpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1170
3
Close Those Ports: Exploring Splashtop RMM and Relays (blog.axelarator.net)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1171
1
Malicious Infrastructure Finds Stability with aurologic GmbH (assets.recordedfuture.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1172
3
Spoofed numbers blocked in crackdown on scammers (www.gov.uk)
submitted 3 months ago by digicat to c/blueteamsec
1 comments fedilink
1173
1
Cloud Backup Security Incident Investigation Complete and Strengthened Cyber Resilience (www.sonicwall.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1174
3
Crossed wires: a case study of Iranian espionage and attribution (www.proofpoint.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
1175
2
This Research Investigates purely focuses on the Networks used by the Clop Ransomware Group during their infiltration at different victims. (theravenfile.com)
submitted 3 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›