blueteamsec

465 readers
8 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
326
3
hashcat v7.0.0 (hashcat.net)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
327
3
Dreigingslandschap Vitale Infrastructuur (2025) - Threat Landscape Critical Infrastructure (2025) (www.nctv.nl)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
328
2
The 26th Annual Hawke Lecture: Counting and countering the cost of espionage - "Often it’s a combination of both, where cyber-espionage enables in-person espionage or in-person espionage begets cyber- (www.asio.gov.au)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
329
2
OpenImporter: Middleware utility for enriching and uploading data gathered with arbitrary collectors to more effectively map to existing Bloodhound database objects. (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
330
1
Beyond the Patch: SharePoint Exploits and the Hidden Threat of IIS Module Persistence (www.splunk.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
331
1
Hunting for Secrets in Plain Sight: Leveraging Internal Logging and Monitoring Services (www.praetorian.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
332
1
UNC2891 Bank Heist: Physical ATM Backdoor & Linux Forensic Evasion Evasion (www.group-ib.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
333
1
CTO at NCSC Summary: week ending August 3rd (ctoatncsc.substack.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
334
1
#OFTW v3.0 - 'Objective for the We' v3.0 - London, July 2025 - slides and videos (objective-see.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
335
8
Plague: A Newly Discovered PAM-Based Backdoor for Linux (www.nextron-systems.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
9 comments fedilink
336
1
From Georgia to Ukraine: Seventeen Years of Russian Cyber Capabilities at War - Modern War Institute (mwi.westpoint.edu)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
337
0
Early Warning Signals: When Attacker Behavior Precedes New Vulnerabilities (info.greynoise.io)
submitted 3 weeks ago* (last edited 3 weeks ago) by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
338
-2
Warren is an open-source security alert management system that automates the tedious parts of alert triage. It ingests alerts from your existing tools, enriches them with AI and threat intelligence (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://zenn.dev/mizutani/articles/secmon-warren

339
5
Illumina Inc. to Pay $9.8M to Resolve False Claims Act Allegations Arising from Cybersecurity Vulnerabilities in Genomic Sequencing Systems (www.justice.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
340
3
Naming country linked to UNC3886 attack not in Singapore’s best interest at this point in time: Shanmugam (www.channelnewsasia.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
341
4
Exploiting the Synology TC500 at Pwn2Own Ireland 2024 (blog.infosectcbr.com.au)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
342
2
Let’s Be Objective: A Deep Dive into 0bj3ctivityStealer's Features (www.trellix.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
343
3
XWorm V6: 高度な回避機能と AMSI バイパス機能が明らかに - XWorm V6: Advanced Evasion and AMSI Bypass Capabilities Revealed (www.netskope.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
344
2
2025 GenAI Code Security Report: ASSESSING THE SECURITY OF USING LLMS FOR CODING (www.veracode.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
345
2
machofile: machofile is a module to parse Mach-O binary files (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
346
3
autoswagger: Autoswagger by Intruder - detect API auth weaknesses (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
347
3
ICANN writes letter to Web Commerce Communications Limited dba WebNic.cc for not dealing with DNS domain abuse reports (www.icann.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
348
4
When Privileged Access Falls into the Wrong Hands: Chinese Companies in Microsoft’s MAPP Program (nattothoughts.substack.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
349
5
Microsegmentation in Zero Trust Part One: Introduction and Planning (www.cisa.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
350
3
Microsoft OAuth App Impersonation Campaign Leads to MFA Phishing (www.proofpoint.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›