blueteamsec

556 readers
11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
501
3
An Insider Look At The IRGC-linked APT35 Operations (www.cloudsek.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
502
4
Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign (cloud.google.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
503
2
Chinese Hackers Said to Target U.S. Law Firms (archive.ph)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
504
2
The ClickFix Factory: First Exposure of IUAM ClickFix Generator (unit42.paloaltonetworks.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
505
3
RondoDox: From Targeting Pwn2Own Vulnerabilities to Shotgunning Exploits (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
506
4
Ukraine's parliament backs creation of cyber forces in first reading (kyivindependent.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
507
8
Active Directory domain (join)own accounts revisited 2025 (www.shelltrail.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
508
2
The Evolution of Russian Physical-Cyber Espionage (www.trellix.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
509
3
China’s Vulnerability Research: What’s Different Now? (nattothoughts.substack.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
510
2
The Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors | Huntress (www.huntress.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
511
0
APT Meets GPT: Targeted Operations with Untamed LLMs (www.volexity.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
512
0
look mom HR application look mom no job (blog.himanshuanand.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
513
1
Strengthening national cyber resilience through observability and threat hunting (www.ncsc.gov.uk)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
514
2
sigma-rules-validator: Validates Sigma rules using the JSON schema - GitHub action (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
515
1
Mustang Panda Employ Publoader Through ClaimLoader: Yes.. another DLL Side-Loading Technique Delivery via Phishing - 0x0d4y Malware Reseach (0x0d4y.blog)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
516
3
Security Bulletin: Several Security Vulnerabilities have been discovered in IBM Security Verify Access and IBM Verify Identity Access products. (CVE-2025-36354, CVE-2025-36355, CVE-2025-363546) (www.ibm.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
517
1
surveyor: Advanced Windows kernel analysis and system profiling tool. Provides comprehensive visibility into kernel callbacks, ETW sessions, driver analysis, and system state through both userland API (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
518
1
BIETA: A Technology Enablement Front for China's MSS (www.recordedfuture.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
519
10
North Korea's crypto hackers have stolen over $2 billion in 2025 (www.elliptic.co)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
520
4
Building the Leading Open-Source Pentesting Agent: Architecture Lessons from XBOW Benchmark (medium.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
521
2
2025年度版：脅威ハンティング再考 - 2025 Edition: Threat Hunting Revisited (www.scientia-security.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
522
1
aws-iam-actions-list: A list of all known Amazon Web Services' IAM actions; and a way of updating that list. (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
523
1
The Evolution of Qilin RaaS (www.sans.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
524
1
SBI Crypto - SBI Crypto joined an expensive club nobody wants membership in: Japanese crypto companies that marketed security while hemorrhaging funds to North Korean hackers (rekt.news)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
525
4
CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability Tracked as CVE-2025-61882 (www.crowdstrike.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›