blueteamsec

632 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1351
2
yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) (labs.watchtowr.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1352
4
StealthServer: A Dual-Platform Backdoor from a South Asian APT Group (blog.xlab.qianxin.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1353
3
Operation Silk Lure: Scheduled Tasks Weaponized for DLL Side-Loading (drops ValleyRAT) (www.seqrite.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1354
2
Mysterious Elephant APT: TTPs and tools (securelist.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1355
12
How I Almost Got Hacked By A 'Job Interview' (blog.daviddodda.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1356
3
Unknown hackers have been confirmed to have accessed the Onnara administrative network without authorization and accessed data (www.nis.go.kr:4016)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1357
0
TigerJack's Extensions Continue to Rob Developers Blind Across Different Marketplaces (www.koi.ai)
submitted 4 months ago by digicat to c/blueteamsec
2 comments fedilink
1358
5
SecRL: Benchmarking LLM agents on Cyber Threat Investigation. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1359
5
Chinese Hackers Blamed for Severe Breach at US Cyber Firm F5 (archive.ph)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1360
1
Windows ARM64 Internals: Deconstructing Pointer Authentication (www.preludesecurity.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1361
2
Supply Chain Risk in VSCode Extension Marketplaces (www.wiz.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1362
2
Threat Hunting Methodology: F5 Security Incident (K000154696) (medium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1363
4
Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits (www.trendmicro.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1364
1
LOLMIL: Living Off the Land Models and Inference Libraries (dreadnode.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1365
2
NightMARE on 0xelm Street, a guided tour — Elastic Security Labs (www.elastic.co)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1366
0
GhostBat RAT: Inside The Resurgence Of RTO-Themed Android Malware (cyble.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1367
4
Singularity: Deep Dive into a Modern Stealth Linux Kernel Rootkit (blog.kyntra.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1368
7
BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices (eclypsium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1369
3
K000154696: F5 Security Incident (my.f5.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1370
2
Jewelbug: Chinese APT Group Widens Reach to Russia (www.security.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1371
4
F5 breach SEC disclosure (www.sec.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1372
3
Confirmed compromise of F5 network (www.ncsc.gov.uk)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1373
1
The UK's Information Commissioner’s Office has fined Capita plc and Capita Pension Solutions Ltd a combined £14m following a cyber attack in April 2023 which saw hackers gain access to over 6m people’ (ico.org.uk)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1374
1
Eavesdropping on Internal Networks via Unencrypted Satellites (satcom.sysnet.ucsd.edu)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1375
1
"Протидія російським ДРГ": UAC-0239 здійснює кібератаки з використанням фреймворку OrcaC2 та стілеру FILEMESS (CERT-UA#17691) - "Countering Russian DRGs": UAC-0239 carries out cyberattacks (cert.gov.ua)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›