blueteamsec

556 readers
9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
526
1
SBI Crypto - SBI Crypto joined an expensive club nobody wants membership in: Japanese crypto companies that marketed security while hemorrhaging funds to North Korean hackers (rekt.news)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
527
4
CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability Tracked as CVE-2025-61882 (www.crowdstrike.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
528
5
Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882) (labs.watchtowr.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
529
1
CN APT targets Serbian Government (strikeready.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
530
1
CVE-2025-61882: Detection for CVE-2025-61882 - Oracle E-Business zero-day (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
531
1
Oracle Security Alerts CVE-2025-61882 - October 4th 2025 - "This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network .. this vulnerability may result (www.oracle.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
532
3
Inside the Unified Log 3: Log storage and attrition (eclecticlight.co)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
533
2
XWorm V6: Exploring Pivotal Plugins (www.trellix.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
534
5
Exploiting Legitimate Remote Access Tools in Ransomware Campaigns (www.seqrite.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
535
2
Don’t Sweat the ClickFix Techniques: Variants & Detection Evolution | Huntress (www.huntress.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
536
2
Operation SouthNet: SideWinder Targets South Asia Maritime (hunt.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
537
2
Coordinated Grafana Exploitation Attempts on 28 September (www.greynoise.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
538
1
Defending against supply chain attacks like Chalk/Debug and the Shai-Hulud worm (aws.amazon.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
539
1
Using .LNK files as lolbins (www.hexacorn.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
540
3
North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network (www.chainalysis.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
541
3
OneDrive. Let's take this offline (malwaremaloney.blogspot.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
542
1
NetworkHound: Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
543
1
Adding Determinism and Safety to Uber IAM Policy Changes (www.uber.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
544
1
Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case study (blog.trailofbits.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
545
1
GhostSocks: From Initial Access to Residential Proxy (synthient.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
546
3
0day .ICS attack in the wild - details an incident from April 2025 in September 2025 - "a then-zero-day exploit in Zimbra’s Collaboration Suite, CVE-2025-27915" (strikeready.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
547
1
Gepetto: IDA plugin which queries language models to speed up reverse-engineering (github.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
548
2
OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Models (arxiv.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
549
6
Update on a Security Incident Involving Third-Party Customer Service | Discord (discord.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
550
6
North Korean agents pretending to be IT guys have funneled up to $1 billion into Kim Jong Un’s nuclear program (archive.ph)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›