blueteamsec

550 readers
12 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
2
CTO at NCSC Summary: week ending November 23rd (ctoatncsc.substack.com)
submitted 5 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
2
Long Live Pass-The-Cert: Reviving the Classical Rendition of Lateral Movement across Entra ID joined Devices (www.alteredsecurity.com)
submitted 1 hour ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
5
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks (socket.dev)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
4
3
China Security Report (www.nids.mod.go.jp)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
2
Custom Mach-O Image Loader with in-memory Mach-O loader (github.com)
submitted 4 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
6
2
The Mystery OAST Host Behind a Regionally Focused Exploit Operation (www.vulncheck.com)
submitted 4 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
1
Field Notes on Malware: C2 Evasion Evolution and Detection Implications (deceptiq.com)
submitted 4 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
8
3
Joint statement on malicious cyber activity targeting Canadian critical infrastructure - Canada.ca (www.canada.ca)
submitted 15 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
3
A Tsunami Sweeping the Cyber Battlefield Analysis of SectorA01’s Hacking Activities (medium.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
2
The cyber threat to Canada’s water systems: Assessment and mitigation - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
1
Report Explanation| MSMT: The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (slowmist.medium.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
1
FlexibleFerret: macOS Malware Deploys in Fake Job Scams (www.jamf.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
1
UNC5174 그룹의 Discord Bot 백도어 악성코드 - Discord Bot backdoor malware from the UNC5174 group (asec.ahnlab.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
1
KeyDrop Scans The Web for Publicly Exposed API Keys - Innovation at Consumer Reports (innovation.consumerreports.org)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
3
Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine (arcticwolf.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
16
3
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications (www.cisa.gov)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
2
QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in an archive, named spam_log.7z, to VirusTotal from Taiwan (x.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
5
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations (blog.narimangharib.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
19
5
Cooking up trouble: How TamperedChef uses signed apps to deliver stealthy payloads (www.acronis.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
20
4
Russian-Linked StealC V2 Campaign Targeting Blender Users via Malicious .blend Files (www.morphisec.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
3
The Hidden Dangers of Calendar Subscriptions: 4 Million Devices at Risk (www.bitsight.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
22
2
Native Secure Enclaved backed ssh keys on MacOS (gist.github.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
2
Discreet Driver Loading in Windows (whiteknightlabs.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
24
2
Dissenting Statement of Commissioner Anna M. Gomez - Protecting the Nation’s Communications Systems from Cybersecurity Threats (docs.fcc.gov)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
0
Critical strike: China's hacking training grounds (PART 1) (substack.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›