blueteamsec

633 readers

10 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1951

3

MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive (mc.merill.net)

submitted 6 months ago by digicat to c/blueteamsec

1 comments fedilink

1952

3

Limiting Onmicrosoft Domain Usage for Sending Emails | Microsoft Community Hub (techcommunity.microsoft.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1953

2

Think before you Click(Fix): Analyzing the ClickFix social engineering technique (www.microsoft.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1954

2

The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War (www.cloudsek.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1955

1

A new, cheaper Mac stealer emerges (moonlock.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1956

4

The Masked Man in Cyber Attacks: Analysis of the DupeDog Software Framework (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1957

4

APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files (www.cyfirma.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1958

3

koney: Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates and uses eBPF to detect, log, and forward alerts (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1959

3

[2505.21244] When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception (arxiv.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1960

4

Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks (arxiv.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1961

3

Developing a Transit Cybersecurity Framework Community Profile: Project Update (Draft) (csrc.nist.gov)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1962

4

Sludge for Good: Slowing and Imposing Costs on Cyber Attackers (arxiv.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1963

16

The Great SSL Certificate Panic (redmonk.com)

submitted 6 months ago by digicat to c/blueteamsec

4 comments fedilink

1964

4

Bypassing Enrollment Restrictions to Break BYOD Barriers in Intune (temp43487580.github.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1965

4

Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1966

4

THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1967

2

CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1968

3

Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1969

4

Certifiably robust malware detectors by design (arxiv.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1970

3

A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1971

2

APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1972

2

StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1973

2

AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1974

2

rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

1975

3

The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink