blueteamsec

463 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
126
4
Launching Microsoft Secure Future Initiative (SFI) patterns and practices (www.microsoft.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 
127
1
ATEAM - Azure Resource Attribution via Tenant ID Enumeration (www.netspi.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
128
1
Going for Broke(ring) – Offensive Walkthrough for Nested App Authentication (specterops.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
129
2
kurasagi: Windows 11 24H2 Runtime PatchGuard Bypass (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
130
2
Mastering Apple's Endpoint Security for Advanced macOS Malware Detection (speakerdeck.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
131
3
From Spoofing to Tunneling: New Red Team's Networking Techniques for Initial Access and Evasion (media.defcon.org)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
132
4
Casus: Citrix kwetsbaarheid (Update 13-08-2025) - The NCSC has determined that several critical organizations in the Netherlands have been successfully attacked via a vulnerability in Citrix (www.ncsc.nl)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
133
4
Zero Click, One NTLM: Microsoft Security Patch Bypass (CVE-2025-50154) (cymulate.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
134
4
FortMajeure: Authentication Bypass in FortiWeb (CVE-2025-52970) (pwner.gg)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
135
5
FortiGuard Labs - Exploited in the wild - - An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSIEM (infosec.pub)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
136
2
Webshell Detection Script for Citrix Netscaler appliances (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
137
2
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy (specterops.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
138
4
Few and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was Not (nattothoughts.substack.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
139
2
BYOVD_read_write_primitive: Proof of Concepts code for Bring Your Own Vulnerable Driver techniques (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
140
2
UNC3886 Tactics, Techniques, and Procedures: Full Technical Breakdown (www.picussecurity.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
141
4
Perry: A High-level Framework for Accelerating Cyber Deception Experimentation (arxiv.org)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
142
3
Detection-Engineering-Framework: A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
143
2
LLMDYara: LLMs-Driven Automated YARA Rules Generation with Explainable File Features and DNAHash (i.blackhat.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
144
6
Securing the supply chain at scale: Starting with 71 important open source projects (github.blog)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
145
10
Attackers are using legit Microsoft services for phishing (pushsecurity.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
146
2
Curly COMrades: A New Threat Actor Targeting Geopolitical Hotbeds (www.bitdefender.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
147
2
Ransomware Landscape in H1 2025: Statistics and Key Issues (medium.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
148
2
New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises (www.trendmicro.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
149
4
Turning Camera Surveillance on its Axis (claroty.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
150
3
Shedding Light on PoisonSeed’s Phishing Kit (blog.nviso.eu)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›