blueteamsec

463 readers
43 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
201
3
Internet Organised Crime Threat Assessment (IOCTA) – Strategic, policy and tactical updates on the fight against cybercrime | Europol (www.europol.europa.eu)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
202
2
Dissecting the CastleBot Malware-as-a-Service operation (www.ibm.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
203
6
CastleLoader: a versatile malware loader, has infected 469 devices since May 2025, leveraging Cloudflare-themed ClickFix phishing and fake GitHub repositories to deliver information stealers and RATs (blog.polyswarm.io)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
204
6
Leak Reveals the Workaday Lives of North Korean IT Scammers (www.wired.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
205
3
Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks (www.seqrite.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
206
2
BeaconatorC2: BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
207
3
Final Competition Winners Announcement - AI Cyber Challenge - "competitors’ systems discovered 54 unique synthetic vulnerabilities in the Final Competition’s 70 challenges. Of those, they patched 43." (aicyberchallenge.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
208
2
From Phishing Sites to SilverFox: A Practical Infrastructure Expansion Analysis (medium.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
209
2
Weaponization of religious symbols, Mimo gang exploits Microsoft SharePoint RCE vulnerability to deliver 4L4MD4r ransomware (ti.qianxin.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
210
2
APT-C-09（摩诃草）组织基于Mythic C2框架的新型攻击样本分析 - Analysis of new attack samples from the APT-C-09 (Maha Grass) organization based on the Mythic C2 framework (mp.weixin.qq.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
211
2
1Panel panel RCE arbitrary command execution (mp.weixin.qq.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
212
2
Detection Engineering Framework - A comprehensive framework for Security Operations Center (SOC) use case development, detection engineering, implementation, and management. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
213
2
2025年中网络安全漏洞威胁态势研究报告 - 2025 Cybersecurity Vulnerability Threat Landscape Research Report (static01-www.qianxin.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
214
11
ICE Washington, D.C. leads international takedown of BlackSuit ransomware infrastructure (www.ice.gov)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
4 comments fedilink
215
2
CTO at NCSC Summary: week ending August 10th (ctoatncsc.substack.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
216
5
Should you trust your zero trust? Bypassing Zscaler posture checks (www.synacktiv.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
217
2
ChromeAlone: A tool to transform Chromium browsers into a C2 Implant (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
218
4
oauthseeker: A malicious OAuth application that can be leveraged for both internal and external phishing attacks targeting Microsoft Azure and Office365 users. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
219
4
Shared secret: EDR killer in the kill chain (news.sophos.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
220
3
Greedy Bear —Massive Crypto Wallet Attack Spans Across Multiple Vectors (blog.koi.security)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
221
3
ED 25-02: Mitigate Microsoft Exchange Vulnerability | CISA - Emergency Directive (www.cisa.gov)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
222
1
New Infection Chain and ConfuserEx-Based Obfuscation for DarkCloud Stealer (unit42.paloaltonetworks.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
223
2
fustercluck: POC tool to abuse Windows server failover clusters (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
224
2
Breaking ETW flows with Trace Tainter (blog.sektor7.net)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
225
1
Exploiting Retbleed in the real world (bughunters.google.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›