blueteamsec

459 readers
52 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 19 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
1
Platform SSO configuration guide for macOS devices using Microsoft Intune - "configure Platform SSO to enable single sign-on (SSO) for your macOS devices using passwordless authentication, Microsoft E (learn.microsoft.com)
submitted 53 minutes ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
2
2025 Minimum Elements for a Software Bill of Materials (SBOM) - CISA is requesting public comment on its updated guidance on Software Bill of Materials (SBOM) (www.cisa.gov)
submitted 6 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
4
4
MC1133508 - Microsoft Teams Integration with Microsoft Defender for Office Tenant Allow/Block List for blocking domains | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
3
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
6
4
Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks (arxiv.org)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
3
Limiting Onmicrosoft Domain Usage for Sending Emails | Microsoft Community Hub (techcommunity.microsoft.com)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
8
3
The Masked Man in Cyber Attacks: Analysis of the DupeDog Software Framework (mp.weixin.qq.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
3
APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files (www.cyfirma.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
3
koney: Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates and uses eBPF to detect, log, and forward alerts (github.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
4
Sludge for Good: Slowing and Imposing Costs on Cyber Attackers (arxiv.org)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
3
[2505.21244] When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception (arxiv.org)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
2
GraphApiAuditEvents: The new Graph API Logs (kqlquery.com)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
3
Developing a Transit Cybersecurity Framework Community Profile: Project Update (Draft) (csrc.nist.gov)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
2
Think before you Click(Fix): Analyzing the ClickFix social engineering technique (www.microsoft.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
16
2
The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War (www.cloudsek.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
1
A new, cheaper Mac stealer emerges (moonlock.com)
submitted 8 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
16
The Great SSL Certificate Panic (redmonk.com)
submitted 17 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
4 comments fedilink
19
4
Bypassing Enrollment Restrictions to Break BYOD Barriers in Intune (temp43487580.github.io)
submitted 19 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
20
4
Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)
submitted 19 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
4
THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)
submitted 19 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
22
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 21 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 20 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
24
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 21 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
4
Slice: SAST + LLM Interprocedural Context Extractor (noperator.dev)
submitted 23 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›