blueteamsec

554 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
376
3
Modern defensible architecture explained - updated Oct 25 (www.cyber.gov.au)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
377
4
Attacks Come to Those Who Wait: Long-Term Observations in an SSH Honeynet (gsmaragd.github.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
378
2
The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (msmt.info)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
379
3
UserAuthenticationMethod: Understanding M365 Sign-In Logs - Decoding UserAuthenticationMethod in Microsoft 365 audit logs: the bitfield mapping (blog.sekoia.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
380
2
Fast, Broad, and Elusive: How Vidar Stealer 2.0 Upgrades Infostealer Capabilities (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
381
2
Beyond credentials: weaponizing OAuth applications for persistent cloud access | Proofpoint US (www.proofpoint.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
382
3
ToolShell Used to Compromise Telecoms Company in Middle East (www.security.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
383
2
Cyberespionage campaign PassiveNeuron targets machines running Windows Server (securelist.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
384
4
The Rise of Collaborative Tactics Among China-aligned Cyber Espionage Campaigns (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
385
5
Wonka: Wonka is a sweet Windows tool that extracts Kerberos tickets from the Local Security Authority (LSA) cache. Like finding a ticket, but for security research and penetration testing! 🎫 (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
386
3
Beyond the Aliases: Decoding Chinese Threat Group Attribution and the Human Factor (open.substack.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
387
3
Why cyber resilience must be measured, not assumed (www.weforum.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
388
2
Salty Much: Darktrace’s view on a recent Salt Typhoon intrusion (www.darktrace.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
389
-1
O(N) the Money: Scaling Vulnerability Research with LLMs (noperator.dev)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
390
1
ChkTag: x86 Memory Safety (community.intel.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
391
4
CVE-2025-9133: Configuration Exposure via Authorization Bypass (rainpwn.blog)
submitted 1 month ago by decio@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
392
2
PATCHAGENT: A Practical Program Repair Agent Mimicking Human Expertise (www.usenix.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
393
3
InlineExecuteEx: A BOF that's a BOF Loader (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
394
4
PingOne Attack Paths (specterops.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
395
3
DetonatorAgent: Detonate malware on VMs and get logs & detection status (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
396
3
To Be (A Robot) or Not to Be: New Malware Attributed to Russia State-Sponsored COLDRIVER (cloud.google.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
397
3
Effective practices: Cyber response and recovery capabilities (www.bankofengland.co.uk)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
398
2
From Chaos to Capability: Building the US Market for Offensive Cyber (sergeybratus.gitlab.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
399
9
Spyware maker NSO Group blocked from WhatsApp | TechCrunch (techcrunch.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
400
3
How to use chaos engineering in incident response | Amazon Web Services (aws.amazon.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›