blueteamsec

557 readers
7 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
776
6
WSUS Is SUS: NTLM Relay Attacks in Plain Sight (trustedsec.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
777
3
Ransomware Tool Matrix/How To Contribute (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
778
3
Apple Threat Notification Campaign - "This alert lists all waves of notifications sent by Apple and known to CERT-FR, since March 5, 2025." (cert.ssi.gouv.fr)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
779
3
Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework (sec.okta.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
780
3
Technical Analysis of kkRAT (www.zscaler.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
781
3
[Research] LLVM based VMProtect Devirtualization: Part 1 (EN) (hackyboiz.github.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
782
2
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass (www.welivesecurity.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
783
3
Encouraging New Thinking on Offensive Cyber Operations (www.rusi.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
784
3
Training Specialist Models: Automating Malware Development (infosec.pub)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Avery-Training-Specialist-Models-Automating-Malware-Development-V2.pdf

https://huggingface.co/spaces/outflanknl/Dante-7B-Demo

785
4
Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework (sec.okta.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
786
9
OPSEC: Read the Code Before It Burns Your Op (blacksnufkin.github.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
787
8
Apple CarPlay Hacking Risks: CVE-2025-24132 Explained (www.oligo.security)
submitted 2 months ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
788
3
Securing Sideways: Thwarting Lateral Movement by Implementing Active Directory Tiering (papers.ssrn.com)
submitted 2 months ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
789
8
Badsecrets Report: identifies the use of known or very weak cryptographic secrets across a variety of web frameworks/platforms. (www.shadowserver.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
790
7
Frankenstein Variant of the ToneShell Backdoor Targeting Myanmar (intezer.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
791
7
EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company (www.bitdefender.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
792
1
Akira Ransomware Group Utilizing SonicWall Devices for Initial Access (www.rapid7.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
793
1
Salt Typhoon: New Joint Advisory Offers a Beacon Through the Storm but Stirs Up New Questions (open.substack.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
794
7
KittyLoader: KittyLoader is a highly evasive loader written in C / Assembly (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
795
3
Effective Versioning Strategies for Detection-as-Code (blog.nviso.eu)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
796
6
Make Attackers Cry: Outsmart Them With Deception (www.fastly.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
797
3
Detecting Password-Spraying with a Honeypot Account (trustedsec.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
798
1
Uncovering ALVIVA HOLDING: Links to Russian Shell Companies and Cybercrime (theravenfile.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
799
9
You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) (labs.watchtowr.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
800
2
Unknown Malware Using Azure Functions as C2 (dmpdump.github.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›