blueteamsec

465 readers
40 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
276
2
Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives (blog.cloudflare.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
277
2
BSides Las Vegas - live streams - Mon, Tue and Wed (youtube.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
278
1
SQUID-2025:1 Buffer Overflow in URN Handling (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
279
1
Quantum networking technologies - "we provide an updated analysis of QKD as a security technology, and the development of QRNGs. We also consider the future of quantum networking technologies." (www.ncsc.gov.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
280
2
EntraGoat - A Deliberately Vulnerable Entra ID Environment (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
281
1
Tracing ToneShell: Mustang Panda's Evolving Tradecraft and Campaign Infrastructure (archive.ph)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
282
1
APT36 Targets Indian Infrastructure with Desktop Lures and Poseidon Backdoor (hunt.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
283
2
Protecting the Evidence in Real-Time with KQL Queries - "monitoring for attempts to modify the corresponding registry keys can help us generate early alerts and detect potential tampering." (detect.fyi)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
284
1
DHS Launches Over $100 Million in Funding to Strengthen Communities’ Cyber Defenses | CISA (www.cisa.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
285
1
PlayPraetor's evolving threat: How Chinese-speaking actors globally scale an Android RAT (www.cleafy.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
286
0
How to automatically disable users in AWS Managed Microsoft AD based on GuardDuty findings (aws.amazon.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
287
2
Investigating Suspicious Memory Activity: Tracing a SIEM Alert to a Cobalt Strike C2 (daniyyell.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
288
1
Memory Forensics Attack Simulation Dataset - " a curated memory forensics dataset designed to support research, detection engineering, and hands-on training in the fields of malware analysis, incident (daniyyell.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
289
1
암호화폐 거래소로 위장한 페이스북 광고에 의한 악성코드 유포 - Malware spread through Facebook ads disguised as cryptocurrency exchanges. (asec.ahnlab.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
290
1
malefic: IoM implant, C2 Framework and Infrastructure - use seen in the wild (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
291
1
White Paper for Cyberspace Mapping Techniques - from China (www.webray.com.cn)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
292
-1
白盒+LLM：京东操作类越权自动化检测实践 - using LLMs to find web vulns by gen'ing AST, generating graphs, function call graph (S)CG, a control flow graph (CFG), a data flow graph (DFG), a combined code property graph (mp.weixin.qq.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
293
2
The Discriminative Power of Cross-layer RTTs in Fingerprinting Proxy Traffic - NDSS Symposium (www.ndss-symposium.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
294
1
CypherBench: Towards Precise Retrieval over Full-scale Modern Knowledge Graphs in the LLM Era - needed to augment those LLMs (arxiv.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
295
0
大模型漏洞分析准确度提升的实践分享 - Practical Sharing on Improving the Accuracy of Vulnerability Analysis for Large Models - to triage public CVE to determine RCE - use translate as in Chinese (mp.weixin.qq.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
296
0
Run shellcode using LdrCallEnclave - Windows (gist.github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
297
0
FileJacking – Initial Access with File System API - "I observed no MotW bypass during the research. All functions that allowed writing to a file during the first modification immediately added MotW." (print3m.github.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
298
1
NachoVPN: Now With More VPN (And SYSTEM Shells) - Part 2 - Palo Alto GlobalProtect (blog.amberwolf.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
299
2
Famous Chollima APT Adversary Simulation (medium.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
300
1
Tracking Updates to Raspberry Robin (www.zscaler.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›