blueteamsec

463 readers
35 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
151
5
FortiGuard Labs - Exploited in the wild - - An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiSIEM (infosec.pub)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
152
2
Webshell Detection Script for Citrix Netscaler appliances (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
153
2
HKLM\SYSTEM\Setup\sMarTdEpLoY -  The (Static) Keys to Abusing PDQ SmartDeploy (specterops.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
154
4
Few and Far Between: During China’s Red Hacker Era, Patriotic Hacktivism Was Widespread—Talent Was Not (nattothoughts.substack.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
155
2
BYOVD_read_write_primitive: Proof of Concepts code for Bring Your Own Vulnerable Driver techniques (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
156
2
UNC3886 Tactics, Techniques, and Procedures: Full Technical Breakdown (www.picussecurity.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
157
4
Perry: A High-level Framework for Accelerating Cyber Deception Experimentation (arxiv.org)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
158
3
Detection-Engineering-Framework: A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
159
2
LLMDYara: LLMs-Driven Automated YARA Rules Generation with Explainable File Features and DNAHash (i.blackhat.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
160
6
Securing the supply chain at scale: Starting with 71 important open source projects (github.blog)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
161
10
Attackers are using legit Microsoft services for phishing (pushsecurity.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
162
2
Curly COMrades: A New Threat Actor Targeting Geopolitical Hotbeds (www.bitdefender.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
163
2
Ransomware Landscape in H1 2025: Statistics and Key Issues (medium.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
164
2
New Ransomware Charon Uses Earth Baxia APT Techniques to Target Enterprises (www.trendmicro.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
165
4
Turning Camera Surveillance on its Axis (claroty.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
166
3
Shedding Light on PoisonSeed’s Phishing Kit (blog.nviso.eu)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
167
3
NTDS.dit Dumping with Shadow Snapshot Method via WMI (No Code Execution) (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
168
2
Extraction of Synology encrypted archives (www.synacktiv.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
169
2
针对Web3&Cryptocurrency领域GitHub项目定向钓鱼检测技术方案 - Targeted Phishing Detection Technology for GitHub Projects in the Web3 & Cryptocurrency Field (mp.weixin.qq.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
170
3
Certify 2.0 - AD CS attack tooling (specterops.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
171
3
Heracles Attack - Chosen Plaintext Attack on AMD SEV-SNP (to appear at ACM CCS 2025) (heracles-attack.github.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
172
5
Go Get 'Em: Updates to Volexity Golang Tooling (www.volexity.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
173
2
Sanctum: Sanctum is an experimental proof-of-concept EDR, designed to detect modern malware techniques, above and beyond the capabilities of antivirus. Built in Rust. (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
174
2
Justice Department Announces Coordinated Disruption Actions Against BlackSuit (Royal) Ransomware Operations (www.justice.gov)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
175
2
Shade BIOS: Unleashing the Full Stealth of UEFI Malware - proof of concept (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

Slides - https://blackhat.com/us-25/briefings/schedule/#shade-bios-unleashing-the-full-stealth-of-uefi-malware-45786

view more: ‹ prev next ›