blueteamsec

633 readers
16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2076
5
FortiGuard Labs - Exploited in the wild - - An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSIEM (self.blueteamsec)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2077
2
Webshell Detection Script for Citrix Netscaler appliances (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2078
2
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy (specterops.io)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2079
4
Few and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was Not (nattothoughts.substack.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2080
2
BYOVD_read_write_primitive: Proof of Concepts code for Bring Your Own Vulnerable Driver techniques (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2081
2
UNC3886 Tactics, Techniques, and Procedures: Full Technical Breakdown (www.picussecurity.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2082
4
Perry: A High-level Framework for Accelerating Cyber Deception Experimentation (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2083
3
Detection-Engineering-Framework: A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2084
2
LLMDYara: LLMs-Driven Automated YARA Rules Generation with Explainable File Features and DNAHash (i.blackhat.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2085
6
Securing the supply chain at scale: Starting with 71 important open source projects (github.blog)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2086
10
Attackers are using legit Microsoft services for phishing (pushsecurity.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2087
2
Curly COMrades: A New Threat Actor Targeting Geopolitical Hotbeds (www.bitdefender.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2088
2
Ransomware Landscape in H1 2025: Statistics and Key Issues (medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2089
2
New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises (www.trendmicro.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2090
4
Turning Camera Surveillance on its Axis (claroty.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2091
3
Shedding Light on PoisonSeed’s Phishing Kit (blog.nviso.eu)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2092
3
NTDS.dit Dumping with Shadow Snapshot Method via WMI (No Code Execution) (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2093
2
Extraction of Synology encrypted archives (www.synacktiv.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2094
2
针对Web3&Cryptocurrency领域GitHub项目定向钓鱼检测技术方案 - Targeted Phishing Detection Technology for GitHub Projects in the Web3 & Cryptocurrency Field (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2095
3
Certify 2.0 - AD CS attack tooling (specterops.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2096
3
Heracles Attack - Chosen Plaintext Attack on AMD SEV-SNP (to appear at ACM CCS 2025) (heracles-attack.github.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2097
5
Go Get 'Em: Updates to Volexity Golang Tooling (www.volexity.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2098
2
Sanctum: Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2099
2
Justice Department Announces Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations (www.justice.gov)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2100
2
Shade BIOS: Unleashing the Full Stealth of UEFI Malware - proof of concept (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
 
 

Slides - https://blackhat.com/us-25/briefings/schedule/#shade-bios-unleashing-the-full-stealth-of-uefi-malware-45786

view more: ‹ prev next ›