blueteamsec

467 readers
18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
476
62
Polish Train Maker Is Suing the Hackers Who Exposed Its Anti-Repair Tricks (www.ifixit.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink
477
1
Cybersecurity Advisory: Scattered Spider (www.cisa.gov)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
478
1
Muddled Libra Threat Assessment: Further-Reaching, Faster, More Impactful (unit42.paloaltonetworks.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
479
3
Pixels of Deception: How VMDetector Loader Hides in Plain Sight (www.sonicwall.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
480
2
Gunra Ransomware Group Unveils Efficient Linux Variant (www.trendmicro.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
481
2
CTO at NCSC Summary: week ending July 27th (ctoatncsc.substack.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
482
2
SSDT Hooking via Alt Syscalls for ETW Evasion (fluxsec.red)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
483
4
Chinese hackers have seized control. How did we let this happen? (www.telegraph.co.uk)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
5 comments fedilink
484
3
Certiception-ADCS-trap: An ADCS honeypot to catch attackers in your internal network. (github.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
485
2
The AltSyscalls module is designed merely as the intercept mechanism for using Alternate Syscalls on Windows 11 (github.com)
submitted 4 weeks ago* (last edited 4 weeks ago) by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
486
3
A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch calc.exe, did it even happen (github.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
487
1
Following NoName057(16) DDoSia Project’s Targets (blog.sekoia.io)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
488
2
Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution (www.securityjoes.com)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
489
1
The Enemy Within: Threat Actors Target Subdomains of Trusted Global Brands in Mass Open Redirect Abuse. (www.silentpush.com)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
490
1
DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
491
1
A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation (cybergeeks.tech)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
492
1
Research: Zero-Day Shop (www.cyfirma.com)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
493
1
Confused about the drama with the new BreachForums? Reading this will either help you or make your head spin (www.databreaches.net)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
494
1
Bluepurple Pulse: week ending June 25th (bluepurple.binaryfirefly.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
495
1
Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives (research.checkpoint.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
496
1
Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries (symantec-enterprise-blogs.security.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
497
1
Dissecting TriangleDB, a Triangulation spyware implant (securelist.com)
submitted 2 years ago by udunadan@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
498
1
Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads (www.bitdefender.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
499
1
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities (www.recordedfuture.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
500
1
Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination (medium.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›