blueteamsec

554 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
351
1
rpc2efs: Unauthenticated start EFS service on remote Windows host (make PetitPotam great again) (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
352
1
PostEx-Arsenal: Arsenal of modules to beacon postex formats like BOF/Shellcode including: dotnet in memory execution, dumps (wifi, clipboard, screenshot, slack, office), PE in memory execution etc (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
353
2
From Dream Job to Malware: DreamLoaders in Lazarus’ Recent Campaign (lab52.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
354
6
NetRunner: A .NET assembly tracer using Harmony for runtime method interception. (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
355
10
Exploitation of Windows Server Update Services Remote Code Execution Vulnerability (CVE-2025-59287) (www.huntress.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
356
2
Proceedings of the 2025 ACM Internet Measurement Conference (dl.acm.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
357
5
What We Learned Inside a North Korean Internet Server: How Well Do You Know Your Partners? (www.38north.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
358
2
Advancing Security in Software-Defined Vehicles: A Comprehensive Survey and Taxonomy (papers.ssrn.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
359
7
Fil-C: Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil (fil-c.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
360
2
Unmasking MuddyWater’s New Malware Toolkit Driving International Espionage (www.group-ib.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
361
3
CTO at NCSC Summary: week ending October 26th (ctoatncsc.substack.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
362
2
Analysis of APT-C-08 (Manlinghua)'s recent phishing attacks using application files (mp.weixin.qq.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
363
3
Decoy Databases: Analyzing Attacks on Public Facing Databases (gsmaragd.github.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
364
7
Could the XZ backdoor have been detected with better Git and Debian packaging practices? (optimizedbyotto.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
365
4
CSA Releases An Addendum To Support System Owners In Securing Agentic AI System (www.csa.gov.sg)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
366
9
Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers (brave.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
367
3
LockBit Returns — and It Already Has Victims (blog.checkpoint.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
368
3
Stealth BGP Hijacks with uRPF Filtering (www.usenix.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
369
2
Tunneling WireGuard over HTTPS using Wstunnel (kroon.email)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
370
3
TARmageddon (CVE-2025-62518): RCE Vulnerability Highlights the Challenges of Open Source Abandonware (edera.dev)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
371
11
How Hacked Card Shufflers Allegedly Enabled a Mob-Fueled Poker Scam That Rocked the NBA (www.wired.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
372
3
PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation (www.sentinelone.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
373
3
The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
374
4
Catching Credential Guard Off Guard (specterops.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
375
6
Stealing Microsoft Teams access tokens in 2025 (blog.randorisec.fr)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›