blueteamsec

554 readers
29 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
301
2
NTLMPasswordChanger: PowerShell tool that shows how to read and write NTLM OWF values via samlib.dll. (github.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
302
2
Exploiting Ghost SPNs and Kerberos Reflection for SMB Privilege Elevation (www.semperis.com)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
303
1
ShareHound: An OpenGraph Collector for Network Shares (specterops.io)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
304
2
Ukrainian National Extradited from Ireland in Connection with Conti Ransomware (www.justice.gov)
submitted 4 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
305
4
AdminSDHolder Misconceptions & Misconfigurations (specterops.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
306
3
A Guide to Understanding China’s Sophisticated Typhoon Cyber Campaigns (mccraryinstitute.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
307
1
UNC6384 Weaponizes ZDI-CAN-25373 Vulnerability to Deploy PlugX Against Hungarian and Belgian Diplomatic Entities (arcticwolf.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
308
2
BRONZE BUTLER exploits Japanese asset management software vulnerability (news.sophos.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
309
3
Ukrainian organizations still heavily targeted by Russian attacks (www.security.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
310
2
Suspected Nation-State Threat Actor Uses New Airstalk Malware in a Supply Chain Attack (unit42.paloaltonetworks.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
311
1
AL25-016 Internet-accessible industrial control systems (ICS) abused by hacktivists - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
312
2
Vulnerabilities in LUKS2 disk encryption for confidential VMs (blog.trailofbits.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
313
2
Creating a "Two-Face" Rust binary on Linux (www.synacktiv.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
314
2
APT-C-08（蔓灵花）近期使用application文件钓鱼攻击活动分析 - Analysis of Recent Phishing Attacks Using Application Files in APT-C-08 (Manlingflower) (mp.weixin.qq.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
315
2
ATT&CK v18: Detection Strategies, More Adversary Insights, (medium.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
316
2
HWP as an Attack Surface: What Hancom’s Hangul Word Processor Means for South Korea’s Cyber Posture as a US Ally (www.38north.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
317
2
US company with access to biggest telecom firms uncovers breach by nation-state hackers (www.reuters.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
318
1
Earth Estries alive and kicking (bartblaze.blogspot.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
319
3
TEE.fail: Breaking Trusted Execution Environments via DDR5 Memory Bus Interposition (tee.fail)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
320
1
New Loader Executing TorNet and PureHVNC – IIJ Security Diary (in English) (sect.iij.ad.jp)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
321
5
Hack-cessibility: When DLL Hijacks Meet Windows Helpers (trustedsec.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
322
3
UnderlayCopy: PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
323
4
How a hacking gang held Italy’s political elites to ransom (www.politico.eu)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
324
2
Threats of Unvalidated XPC Clients on macOS (afine.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
325
1
Creating and maintaining a definitive view of your operational technology architecture (www.cyber.gov.au)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›