blueteamsec

557 readers
7 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
751
3
Analysis of APT-C-24 (Sidewinder) Recent LNK File Phishing Attacks (mp.weixin.qq.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
752
3
AI-Driven Deepfake Military ID Fraud Campaign by Kimsuky APT (www.genians.co.kr)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
753
3
Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days (www.willsroot.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
754
4
Sidewinder APT leverages Nepal protests to push mobile malware (strikeready.com)
submitted 2 months ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
755
4
Yurei the New Ransomware Group on the Scene (research.checkpoint.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
756
0
2025년 8월 APT 그룹 동향 보고서 - APT Group Trends Report for August 2025 (asec.ahnlab.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
757
1
2025년 8월 APT 공격 동향 보고서(국내) - APT Attack Trend Report for August 2025 (Domestic) (asec.ahnlab.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
758
3
Cyberspike Villager Cobalt Strike's AI-native Successor - "a Chinese-based pentesting framework that acts as an AI-powered framework in the style of Cobalt Strike" (www.straiker.ai)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
759
9
Insider threat of students leading to increasing number of cyber attacks in schools (ico.org.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
760
10
US Investment in Spyware Is Skyrocketing (www.wired.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
761
2
Ransomware Tool Matrix Update: Community Reports (blog.bushidotoken.net)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
762
6
Iran-linked hacker group doxes journalists and amplifies leaked information through AI chatbots (www.international.gc.ca)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
763
1
Cyber Criminal Groups UNC6040 and UNC63940 Compromising Salesforce Instances for Data Theft and Extortion (infosec.pub)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://www.ic3.gov/CSA/2025/250912.pdf

764
1
How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be (www.zetter-zeroday.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
765
1
Modular PIC C2 Agents (reprise) (rastamouse.me)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
766
3
Old But Gold, Dumping LSASS With Windows Error Reporting On Modern Windows 11 (www.zerosalarium.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
767
1
Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak (gfw.report)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
768
1
Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams (home.treasury.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
769
1
CTO at NCSC Summary: week ending September 14th.. (ctoatncsc.substack.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
770
4
Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization (www.splunk.com)
submitted 2 months ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
771
7
MC1150118 - Microsoft Defender for Office 365: New records in Streaming API and Sentinel EmailEvents table - "will store both current and historical email verdicts and locations" (mc.merill.net)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
772
3
External Sharing Security Checklist in Microsoft 365 (blog.admindroid.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
773
6
WSUS Is SUS: NTLM Relay Attacks in Plain Sight (trustedsec.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
774
3
Ransomware Tool Matrix/How To Contribute (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
775
3
Apple Threat Notification Campaign - "This alert lists all waves of notifications sent by Apple and known to CERT-FR, since March 5, 2025." (cert.ssi.gouv.fr)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›