blueteamsec

556 readers
25 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
426
5
SecRL: Benchmarking LLM agents on Cyber Threat Investigation. (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
427
5
Chinese Hackers Blamed for Severe Breach at US Cyber Firm F5 (archive.ph)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
428
1
Windows ARM64 Internals: Deconstructing Pointer Authentication (www.preludesecurity.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
429
2
Supply Chain Risk in VSCode Extension Marketplaces (www.wiz.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
430
2
Threat Hunting Methodology: F5 Security Incident (K000154696) (medium.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
431
4
Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
432
1
LOLMIL: Living Off the Land Models and Inference Libraries (dreadnode.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
433
2
NightMARE on 0xelm Street, a guided tour — Elastic Security Labs (www.elastic.co)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
434
0
GhostBat RAT: Inside The Resurgence Of RTO-Themed Android Malware (cyble.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
435
4
Singularity: Deep Dive into a Modern Stealth Linux Kernel Rootkit (blog.kyntra.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
436
7
BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices (eclypsium.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
437
3
K000154696: F5 Security Incident (my.f5.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
438
2
Jewelbug: Chinese APT Group Widens Reach to Russia (www.security.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
439
4
F5 breach SEC disclosure (www.sec.gov)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
440
3
Confirmed compromise of F5 network (www.ncsc.gov.uk)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
441
1
The UK's Information Commissioner’s Office has fined Capita plc and Capita Pension Solutions Ltd a combined £14m following a cyber attack in April 2023 which saw hackers gain access to over 6m people’ (ico.org.uk)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
442
1
Eavesdropping on Internal Networks via Unencrypted Satellites (satcom.sysnet.ucsd.edu)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
443
1
"Протидія російським ДРГ": UAC-0239 здійснює кібератаки з використанням фреймворку OrcaC2 та стілеру FILEMESS (CERT-UA#17691) - "Countering Russian DRGs": UAC-0239 carries out cyberattacks (cert.gov.ua)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
444
1
When the monster bytes: tracking TA585 and its arsenal (www.proofpoint.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
445
2
Gov't seeks police probe of KT for allegedly obstructing data breach investigation - The Korea Times (www.koreatimes.co.kr)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
446
1
SOE-phisticated Persistence: Inside Flax Typhoon's ArcGIS Compromise (reliaquest.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
447
2
Defrosting PolarEdge’s Backdoor (blog.sekoia.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
448
3
RULEZET - an open source website for all the different rules (YARA, Suricata, and many others) — a place to allow comments, reviews, bundling, and integration with MISP (rulezet.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
449
1
Securing the Future: Changes to Internet Explorer Mode in Microsoft Edge (microsoftedge.github.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
450
1
Tracking ClickFix Infrastructure (www.aitmfeed.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›