blueteamsec

465 readers
41 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
301
2
RoKRAT Shellcode and Steganographic Threats: Analysis and EDR Response Strategies (www.genians.co.kr)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
302
3
ChoiceJacking: Compromising Mobile Devices through Malicious Chargers like a Decade ago (www.usenix.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
303
1
APT36: A PHISHING CAMPAIGN TARGETING INDIAN GOVERNMENT ENTITIES - loud noises .. (www.cyfirma.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
304
2
Cinese arrestato per spionaggio, no ai domiciliari - Chinese man arrested for espionage, no house arrest 33-year-old computer scientist Zewei Xu was arrested on a U.S. warrant. (www.rainews.it)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
305
2
CobaltStrikeBeaconCppSource: Out-of-the-box CobaltStrike Beacon source code use C++ (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
306
1
SLOW#TEMPEST Cobalt Strike Loader (dmpdump.github.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
307
1
July 2025 Uptick in Akira Ransomware Activity Targeting SonicWall SSL VPN (arcticwolf.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
308
2
External Excel workbook links to blocked file types will be disabled by default - Starting October 2025, external workbook links to blocked file types will be disabled by default. (mc.merill.net)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
309
3
User-mode Accessors - a set of DDIs designed to safely access and manipulate user-mode memory from kernel-mode code. These DDIs address common security vulnerabilities and programming errors (learn.microsoft.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
310
3
The Operational Blueprint of Kimsuky APT for Cyber Espionage (www.aryaka.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
311
11
North Korea sent me abroad to be a secret IT worker. My wages funded the regime (www.bbc.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
312
2
U.S. Senate Confirms Sean Cairncross as the National Cyber Director (www.whitehouse.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
313
2
Exposing and Circumventing SNI-based QUIC Censorship of the Great Firewall of China (gfw.report)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
314
4
INSIDE QILIN RANSOMWARE AFFILIATE’s PANEL - loud noises! (theravenfile.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
315
2
Bootkitting Windows Sandbox (secret.club)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
316
7
From Laptops to Laundromats: How DPRK IT Workers Infiltrated the Global Remote Economy (dti.domaintools.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
317
3
NETGEAR Devices Hidden Page List (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
318
2
Leveraging ETW for Advanced Threat Detection (www.nextron-systems.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
319
2
Attack Graph Model Design Requirements and Examples (specterops.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
320
2
PyPitfall: Dependency Chaos and Software Supply Chain Vulnerabilities in Python (arxiv.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
321
3
Why continuous profiling is the fourth pillar of observability (www.datadoghq.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
322
3
Let’s get Digital! Updated Digital Identity Guidelines are Here! NIST (www.nist.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
323
3
Advisory on North Korean information technology (IT) workers - mid-July Canadian government (rcmp.ca)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
324
3
hashcat v7.0.0 (hashcat.net)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
325
3
Dreigingslandschap Vitale Infrastructuur (2025) - Threat Landscape Critical Infrastructure (2025) (www.nctv.nl)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›