blueteamsec

632 readers
20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1501
2
CTO at NCSC Summary: week ending October 5th (ctoatncsc.substack.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1502
4
How do timing attacks work? The timing attacks I'm discussing here are specifically the ones where a vulnerable server is comparing strings a byte at a time (nickg.ca)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1503
1
Confucius Espionage: From Stealer to Backdoor (www.fortinet.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1504
1
WARMCOOKIE One Year Later: New Features and Fresh Insights (www.elastic.co)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1505
1
UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud (blog.talosintelligence.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1506
1
Security update: Incident related to Red Hat Consulting GitLab instance (www.redhat.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1507
1
CABINETRAT backdoor used by UAC-0245 for targeted cyberattacks against SOU (CERT-UA#17479) (cert.gov.ua)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1508
1
MC1130385 - Retirement of inline SVG images in Microsoft Outlook | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1509
1
New spyware campaigns target privacy-conscious Android users in the UAE (www.welivesecurity.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1510
1
Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations (cloud.google.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1511
1
Datzbro: RAT Hiding Behind Senior Travel Scams (www.threatfabric.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1512
2
Lunar Spider Expands their Web via FakeCaptcha (blog.nviso.eu)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1513
5
CharmingKitten: Exposing CharmingKitten's malicious activity for IRGC-IO devision Counterintelligence devision (1500) (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1514
4
Become an invisible admin in Active directory (iqunit.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1515
4
Indirect Memory Writing (unprotect.it)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1516
5
Part 4: Building Effective Detection Rules (sudo3rs.medium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1517
3
ENISA Threat Landscape 2025 | ENISA (www.enisa.europa.eu)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1518
7
North Korea’s IT Workers expand beyond US big tech (www.okta.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1519
1
Exposing a Crypto Phishing Campaign Through Robots.txt (censys.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1520
3
404 Accountability not found: Spyware accountability through software liability (www.atlanticcouncil.org)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1521
1
Detour Dog: DNS Malware Powers Strela Stealer Campaigns (blogs.infoblox.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1522
1
Passkey : Community Draft of TR -03188 Passkey Server published for comment (www.bsi.bund.de)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1523
1
NIS raises natl. cyber alert level to 'caution' amid public service outage - Korea (m.koreaherald.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1524
1
Silent Smishing : The Hidden Abuse of Cellular Router APIs (blog.sekoia.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1525
5
Phantom Taurus: A New Chinese Nexus APT and the Discovery of the NET-STAR Malware Suite (unit42.paloaltonetworks.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›