blueteamsec

556 readers
9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
726
1
BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes (gitlab-com.gitlab.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
727
2
Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware (blogs.infoblox.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
728
3
Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm | IBM (www.ibm.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
729
2
The Dangers of Storing Unencrypted Passwords (www.huntress.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
730
1
Autonomous Timeline Analysis and Threat Hunting | Black Hat USA talk (elie.net)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
731
1
Windows local privilege escalation through the bitpixie vulnerability (blog.syss.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
732
2
Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization – Computer Security Group (comsec.ethz.ch)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
733
2
hermes-dec: A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
734
1
APT28 Operation Phantom Net Voxel (blog.sekoia.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
735
1
Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels (www.proofpoint.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
736
14
Spyware industry pockets EU subsidies while snooping on its citizens (www.ftm.eu)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
737
1
A new RevengeHotels campaign targets Latin America (securelist.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
738
5
S1ngularity/nx attackers strike again - "since then an additional 147 packages have been infected with malware including packages from CrowdStrike." (www.aikido.dev)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
739
2
AWSDoor: Persistence on AWS (www.riskinsight-wavestone.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
740
2
fwd:cloudsec conference videos (youtube.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
741
2
Artificial Intelligence for Post-Exploitation | Cobalt Strike (www.cobaltstrike.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
742
6
The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU (blog.xlab.qianxin.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
743
2
Technical Analysis of SmokeLoader Version 2025 (www.zscaler.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
744
2
Introducing the AWS Infrastructure Canarytoken (blog.thinkst.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
745
2
CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning | Research - AI at Meta (ai.meta.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
746
3
Magecart Skimmer Analysis: From One Tweet to a Campaign (blog.himanshuanand.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
747
2
病毒伪装搜狗输入法，正规签名内嵌恶意脚本 - The virus disguises itself as Sogou Input Method, embedding malicious scripts in legitimate signatures (mp.weixin.qq.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
748
5
raw-disk-parser: A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
749
2
sneaky_remap: A C and Go /proc/pid/maps cloak of invisibilty for shared object files (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
750
3
Analysis of APT-C-24 (Sidewinder) Recent LNK File Phishing Attacks (mp.weixin.qq.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›