blueteamsec

632 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1701

1

Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams (home.treasury.gov)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1702

1

CTO at NCSC Summary: week ending September 14th.. (ctoatncsc.substack.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1703

4

Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization (www.splunk.com)

submitted 5 months ago by Diluvian to c/blueteamsec

1 comments fedilink

1704

7

MC1150118 - Microsoft Defender for Office 365: New records in Streaming API and Sentinel EmailEvents table - "will store both current and historical email verdicts and locations" (mc.merill.net)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1705

3

External Sharing Security Checklist in Microsoft 365 (blog.admindroid.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1706

6

WSUS Is SUS: NTLM Relay Attacks in Plain Sight (trustedsec.com)

submitted 5 months ago by digicat to c/blueteamsec

1 comments fedilink

1707

3

Ransomware Tool Matrix/How To Contribute (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1708

3

Apple Threat Notification Campaign - "This alert lists all waves of notifications sent by Apple and known to CERT-FR, since March 5, 2025." (cert.ssi.gouv.fr)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1709

3

Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework (sec.okta.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1710

3

Technical Analysis of kkRAT (www.zscaler.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1711

3

[Research] LLVM based VMProtect Devirtualization: Part 1 (EN) (hackyboiz.github.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1712

2

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass (www.welivesecurity.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1713

3

Encouraging New Thinking on Offensive Cyber Operations (www.rusi.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1714

3

Training Specialist Models: Automating Malware Development (self.blueteamsec)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Avery-Training-Specialist-Models-Automating-Malware-Development-V2.pdf

https://huggingface.co/spaces/outflanknl/Dante-7B-Demo

1715

4

Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework (sec.okta.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1716

9

OPSEC: Read the Code Before It Burns Your Op (blacksnufkin.github.io)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1717

8

Apple CarPlay Hacking Risks: CVE-2025-24132 Explained (www.oligo.security)

submitted 5 months ago by campuscodi to c/blueteamsec

0 comments fedilink

1718

3

Securing Sideways: Thwarting Lateral Movement by Implementing Active Directory Tiering (papers.ssrn.com)

submitted 5 months ago by Diluvian to c/blueteamsec

0 comments fedilink

1719

8

Badsecrets Report: identifies the use of known or very weak cryptographic secrets across a variety of web frameworks/platforms. (www.shadowserver.org)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1720

7

Frankenstein Variant of the ToneShell Backdoor Targeting Myanmar (intezer.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1721

7

EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company (www.bitdefender.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1722

1

Akira Ransomware Group Utilizing SonicWall Devices for Initial Access (www.rapid7.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1723

1

Salt Typhoon: New Joint Advisory Offers a Beacon Through the Storm but Stirs Up New Questions (open.substack.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1724

7

KittyLoader: KittyLoader is a highly evasive loader written in C / Assembly (github.com)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink

1725

3

Effective Versioning Strategies for Detection-as-Code (blog.nviso.eu)

submitted 5 months ago by digicat to c/blueteamsec

0 comments fedilink