blueteamsec

462 readers
22 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
51
2
GroupPolicyBackdoor: Group Policy Objects manipulation and exploitation framework (github.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
52
5
Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems (arxiv.org)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
53
1
UAC-0057 keeps applying pressure on Ukraine and Poland (harfanglab.io)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
54
1
APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse (hunt.io)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
55
5
Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure (www.ic3.gov)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
56
5
Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices (blog.talosintelligence.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
57
4
Cybercriminals Abuse AI Website Creation App For Phishing (www.proofpoint.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
58
3
A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor | Google Cloud Blog (cloud.google.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
59
12
Serial hacker who defaced official websites is sentenced (www.nationalcrimeagency.gov.uk)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
60
3
QuirkyLoader - A new malware loader delivering infostealers and RATs (www.ibm.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
61
3
How a Czech Supply Chain Feeds the Global Spyware Machine - VSquare.org (vsquare.org)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
62
5
When Safe Links Become Unsafe: How Raven AI Caught Attackers Weaponizing Cisco's URL Rewriting (ravenmail.io)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
63
2
Behind the Curtain: How Lumma Affiliates Operate (www.recordedfuture.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
64
2
Guess Who Would Be Stupid Enough To Rob The Same Vault Twice? Pre-Auth RCE Chains in Commvault (labs.watchtowr.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
65
3
Elastic response to blog ‘EDR 0-Day Vulnerability’ (www.elastic.co)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
66
4
BlockEDRTraffic: Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows Filtering Platform (WFP). (github.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
67
4
Escaping the Matrix: Client-Side Deanonymization Attacks on Privacy Sandbox APIs (spaceraccoon.dev)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
68
3
Patching for persistence: How DripDropper Linux malware moves through the cloud - " an adversary exploiting CVE-2023-46604 in Apache ActiveMQ to gain persistent access on cloud Linux systems" (redcanary.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
69
1
Advance Security Solutions offer $20mil for SMS/MMS 0day, $15 mil for iOS chains etc. (advance-sec.com)
submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
70
3
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign (www.trellix.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
71
3
Deep dive into CVE-2025-29824 in Windows (bi.zone)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
72
2
SpeechRuntimeMove: Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking (github.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
73
2
Hijacking multi-agent systems in your PajaMAS (blog.trailofbits.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
74
7
Cisco Security Advisory: Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (sec.cloudapps.cisco.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
75
5
DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL. (github.com)
submitted 5 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›