blueteamsec

633 readers
5 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2376
4
No[one|thing] will be left behind — Manual guide to patch your the exiled SharePoint/Exchange server (testbnull.medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2377
2
Root Cause Analysis of the CitrixBleed 2 (CVE-2025–5777) Vulnerability (medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2378
4
theProtector: Linux Bash Script for the Paranoid Admin on a Budget - real-time monitoring and active threat response (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2379
6
ToolShell: a story of five vulnerabilities in Microsoft SharePoint (securelist.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2380
1
Microsoft Probing If Chinese Hackers Learned SharePoint Flaws Through Alert - Microsoft Corp. is investigating whether a leak from its early alert system for cybersecurity companies allowed Chinese ha (archive.ph)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2381
1
Intelligent Prediction: How Large Language Models Revolutionize Subdomain Discovery Technology (mp-weixin-qq-com.translate.goog)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2382
2
Detecting the Most Popular MITRE Persistence Method – Registry Run Keys / Startup Folder (www.nextron-systems.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2383
10
Microsoft Used China-Based Support for Multiple U.S. Agencies, Potentially Exposing Sensitive Data (www.propublica.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2384
1
Reforging Sliver: How Simple Code Edits Can Outmaneuver EDR (fortbridge.co.uk)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2385
2
Process Injection using Return-Oriented Programming (ieeexplore.ieee.org)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2386
62
Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks (www.ifixit.com)
submitted 6 months ago by digicat to c/blueteamsec
2 comments fedilink
2387
1
Cybersecurity Advisory: Scattered Spider (www.cisa.gov)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2388
1
Muddled Libra Threat Assessment: Further-Reaching, Faster, More Impactful (unit42.paloaltonetworks.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2389
3
Pixels of Deception: How VMDetector Loader Hides in Plain Sight (www.sonicwall.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2390
2
Gunra Ransomware Group Unveils Efficient Linux Variant (www.trendmicro.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2391
2
CTO at NCSC Summary: week ending July 27th (ctoatncsc.substack.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2392
2
SSDT Hooking via Alt Syscalls for ETW Evasion (fluxsec.red)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2393
4
Chinese hackers have seized control. How did we let this happen? (www.telegraph.co.uk)
submitted 6 months ago by digicat to c/blueteamsec
5 comments fedilink
2394
3
Certiception-ADCS-trap: An ADCS honeypot to catch attackers in your internal network. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2395
2
The AltSyscalls module is designed merely as the intercept mechanism for using Alternate Syscalls on Windows 11 (github.com)
submitted 6 months ago* (last edited 6 months ago) by digicat to c/blueteamsec
0 comments fedilink
2396
3
A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch calc.exe, did it even happen (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2397
1
Following NoName057(16) DDoSia Project’s Targets (blog.sekoia.io)
submitted 2 years ago by campuscodi to c/blueteamsec
0 comments fedilink
2398
3
Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution (www.securityjoes.com)
submitted 2 years ago by campuscodi to c/blueteamsec
1 comments fedilink
2399
9
The Enemy Within: Threat Actors Target Subdomains of Trusted Global Brands in Mass Open Redirect Abuse. (www.silentpush.com)
submitted 2 years ago by campuscodi to c/blueteamsec
2 comments fedilink
2400
12
DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)
submitted 2 years ago by campuscodi to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›