blueteamsec

632 readers
22 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1576
2
Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat - DomainTools Investigations | DTI (dti.domaintools.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1577
1
NCSC warns of persistent malware campaign targeting Cisco devices (www.ncsc.gov.uk)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1578
2
Department of War Announces New Cybersecurity Risk Management Construct (www.war.gov)
submitted 4 months ago by digicat to c/blueteamsec
1 comments fedilink
1579
4
Who is Salt Typhoon Really? Unraveling the Attribution Challenge (nattothoughts.substack.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1580
1
Project Rain:L1TF - This blog provides a detailed overview of the L1TF vulnerability, a CPU vulnerability on some Intel CPUs (Skylake and older) (bughunters.google.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1581
1
COLDRIVER Adds BAITSWITCH and SIMPLEFIX (www.zscaler.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1582
2
Threat Intelligence Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors (cloud.google.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1583
3
Linux Kernel Runtime Guard (LKRG) 1.0 (Nullcon Berlin 2025) (www.openwall.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1584
5
Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware (blog.lastpass.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1585
2
Ransomware Rising - Digital Front Lines (digitalfrontlines.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1586
2
Security advisory: command injection vulnerability (CVE-2025-59689) – email as a vector (docs.libraesva.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1587
2
How RainyDay, Turian and a new PlugX variant abuse DLL search order hijacking (blog.talosintelligence.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1588
2
The Evolution of RomCom (www.attackiq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1589
2
NodeJS backdoors delivering proxyware and monetization schemes (medium.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1590
2
Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign (unit42.paloaltonetworks.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1591
2
Our plan for a more secure npm supply chain (github.blog)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1592
4
BYOVD to the next level (part 1) — exploiting a vulnerable driver (CVE-2025-8061) - Quarkslab's blog (blog.quarkslab.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1593
6
U.S. Secret Service dismantles imminent telecommunications threat in New York tristate area (www.secretservice.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1594
6
The Phantom Extension: Backdooring chrome through uncharted pathways (www.synacktiv.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1595
5
m0leCon 2025 (www.youtube.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1596
3
YiBackdoor: Linked to IcedID and Latrodectus | ThreatLabz (www.zscaler.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1597
4
CISA Shares Lessons Learned from an Incident Response Engagement (www.cisa.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1598
5
firezone: Enterprise-ready zero-trust access platform built on WireGuard®. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1599
1
[위협 분석] 성범죄자 고지 정보를 위장한 Kimsuky 공격 | 로그프레소 - Kimsuky Attack Disguised as Sex Offender Notification Information (logpresso.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1600
1
Defending Against the Evolving OAuth Attack Landscape (aadinternals.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›