blueteamsec

633 readers

15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2001

2

Behind the Curtain: How Lumma Affiliates Operate (www.recordedfuture.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2002

3

QuirkyLoader - A new malware loader delivering infostealers and RATs (www.ibm.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2003

4

Cybercriminals Abuse AI Website Creation App For Phishing (www.proofpoint.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2004

1

Advance Security Solutions offer $20mil for SMS/MMS 0day, $15 mil for iOS chains etc. (advance-sec.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2005

3

How a Czech Supply Chain Feeds the Global Spyware Machine - VSquare.org (vsquare.org)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2006

5

Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices (blog.talosintelligence.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2007

2

Guess Who Would Be Stupid Enough To Rob The Same Vault Twice? Pre-Auth RCE Chains in Commvault (labs.watchtowr.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2008

3

Elastic response to blog ‘EDR 0-Day Vulnerability’ (www.elastic.co)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2009

5

When Safe Links Become Unsafe: How Raven AI Caught Attackers Weaponizing Cisco's URL Rewriting (ravenmail.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2010

1

Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises with Social Media Footprints (www.morphisec.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2011

1

Detailed Analysis of the Stealer-Traffer Ecosystem (medium.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2012

3

Patching for persistence: How DripDropper Linux malware moves through the cloud - " an adversary exploiting CVE-2023-46604 in Apache ActiveMQ to gain persistent access on cloud Linux systems" (redcanary.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2013

1

pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis (clearbluejar.github.io)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2014

1

APT: Android, Phishing, microsoft (strikeready.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2015

2

SpeechRuntimeMove: Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2016

3

The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign (www.trellix.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2017

4

BlockEDRTraffic: Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows Filtering Platform (WFP). (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2018

3

Deep dive into CVE-2025-29824 in Windows (bi.zone)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2019

12

Serial hacker who defaced official websites is sentenced (www.nationalcrimeagency.gov.uk)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2020

4

Escaping the Matrix: Client-Side Deanonymization Attacks on Privacy Sandbox APIs (spaceraccoon.dev)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2021

2

Hijacking multi-agent systems in your PajaMAS (blog.trailofbits.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2022

2

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework (www.microsoft.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2023

0

LLMs vs. Geolocation: GPT-5 performs worse than other AI models - bellingcat (www.bellingcat.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2024

2

PipeMagic in 2025: How the backdoor operators’ tactics have changed (securelist.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink

2025

2

spearspray: Enhance Your Active Directory Password Spraying with User Intelligence. (github.com)

submitted 6 months ago by digicat to c/blueteamsec

0 comments fedilink