blueteamsec

633 readers
16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2126
6
Leak Reveals the Workaday Lives of North Korean IT Scammers (www.wired.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2127
3
Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks (www.seqrite.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2128
2
BeaconatorC2: BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2129
3
Final Competition Winners Announcement - AI Cyber Challenge - "competitors’ systems discovered 54 unique synthetic vulnerabilities in the Final Competition’s 70 challenges. Of those, they patched 43." (aicyberchallenge.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2130
2
From Phishing Sites to SilverFox: A Practical Infrastructure Expansion Analysis (medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2131
2
Weaponization of religious symbols, Mimo gang exploits Microsoft SharePoint RCE vulnerability to deliver 4L4MD4r ransomware (ti.qianxin.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2132
2
APT-C-09（摩诃草）组织基于Mythic C2框架的新型攻击样本分析 - Analysis of new attack samples from the APT-C-09 (Maha Grass) organization based on the Mythic C2 framework (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2133
2
1Panel panel RCE arbitrary command execution (mp.weixin.qq.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2134
2
Detection Engineering Framework - A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2135
2
2025年中网络安全漏洞威胁态势研究报告 - 2025 Cybersecurity Vulnerability Threat Landscape Research Report (static01-www.qianxin.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2136
11
ICE Washington, D.C. leads international takedown of BlackSuit ransomware infrastructure (www.ice.gov)
submitted 6 months ago by digicat to c/blueteamsec
4 comments fedilink
2137
2
CTO at NCSC Summary: week ending August 10th (ctoatncsc.substack.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2138
5
Should you trust your zero trust? Bypassing Zscaler posture checks (www.synacktiv.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2139
2
ChromeAlone: A tool to transform Chromium browsers into a C2 Implant (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2140
4
oauthseeker: A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2141
4
Shared secret: EDR killer in the kill chain (news.sophos.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2142
3
Greedy Bear —Massive Crypto Wallet Attack Spans Across Multiple Vectors (blog.koi.security)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2143
3
ED 25-02: Mitigate Microsoft Exchange Vulnerability | CISA - Emergency Directive (www.cisa.gov)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2144
1
New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer (unit42.paloaltonetworks.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2145
2
fustercluck: POC tool to abuse Windows server failover clusters (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2146
2
Breaking ETW flows with Trace Tainter (blog.sektor7.net)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2147
1
Exploiting Retbleed in the real world (bughunters.google.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2148
1
Bittensor theft campaign via PyPI (about.gitlab.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2149
1
Active Exploitation of SonicWall VPNs (www.huntress.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2150
2
Trust but Verify: An Assessment of Vulnerability Tagging Services | USENIX (www.usenix.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›