blueteamsec

556 readers
9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
626
2
pipe-intercept: Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
627
2
CTO at NCSC Summary: week ending September 28th (ctoatncsc.substack.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
628
3
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices (blog.talosintelligence.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
629
8
Netherlands: Two teenagers arrested in spying case linked to Russia - " walked past the offices of Europol, Eurojust and the Canadian embassy in The Hague carrying a "wi-fi sniffer" (www.bbc.co.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
630
5
IMDS Abused: Hunting Rare Behaviors to Uncover Exploits - we uncovered exploitation in the wild of a previously unknown zero-day vulnerability from insecure use of pandoc. (www.wiz.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
631
4
The PLA Goes Back to School: Mapping New Developments in China’s Military Cyber Education System (margin.re)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
632
3
Bookworm to Stately Taurus Using the Unit 42 Attribution Framework (unit42.paloaltonetworks.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
633
3
XCSSET evolves again: Analyzing the latest updates to XCSSET’s inventory (www.microsoft.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
634
4
Ollama Drama: Investigating the Prevalence of Ollama Open Instances (censys.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
635
4
First Malicious MCP in the Wild: The Postmark Backdoor That's Stealing Your Emails (www.koi.security)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
636
3
Hunting For PsExec.exe abuse (medium.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
637
2
crates.io: Malicious crates faster_log and async_println | Rust Blog (blog.rust-lang.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
638
1
RedNovember Targets Government, Defense, and Technology Organizations (assets.recordedfuture.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
639
10
Tea continued - Unauthenticated access to 150+ Firebase databases, storage buckets and secrets (ice0.blog)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
640
1
ED 25-03: Identify and Mitigate Potential Compromise of Cisco Devices (www.cisa.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
641
2
DeceptiveDevelopment: From primitive crypto theft to sophisticated AI-based deception (www.welivesecurity.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
642
2
Inside Salt Typhoon: China’s State-Corporate Advanced Persistent Threat - DomainTools Investigations | DTI (dti.domaintools.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
643
1
NCSC warns of persistent malware campaign targeting Cisco devices (www.ncsc.gov.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
644
2
Department of War Announces New Cybersecurity Risk Management Construct (www.war.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
645
4
Who is Salt Typhoon Really? Unraveling the Attribution Challenge (nattothoughts.substack.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
646
1
Project Rain:L1TF - This blog provides a detailed overview of the L1TF vulnerability, a CPU vulnerability on some Intel CPUs (Skylake and older) (bughunters.google.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
647
1
COLDRIVER Adds BAITSWITCH and SIMPLEFIX (www.zscaler.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
648
2
Threat Intelligence Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors (cloud.google.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
649
3
Linux Kernel Runtime Guard (LKRG) 1.0 (Nullcon Berlin 2025) (www.openwall.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
650
5
Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware (blog.lastpass.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›