blueteamsec

557 readers
5 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
801
9
You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) (labs.watchtowr.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
802
2
Unknown Malware Using Azure Functions as C2 (dmpdump.github.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
803
4
Learn about ChillyHell, a modular Mac backdoor (www.jamf.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
804
3
NPM debug and chalk compromise 09-2025 KQL (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
805
2
Sh3ller: Sh3ller is a lightweight C2 framework in its simplest form. (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
806
2
From Vietnam to Volt Typhoon: How the PRC Refined Grey Zone Cyber Tactics before Targeting the West (papers.ssrn.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
807
8
Spyware installed on Kenyan filmmakers' phones in police custody - Committee to Protect Journalists (cpj.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
808
3
Mythical Beasts: Diving into the depths of the global spyware market (www.atlanticcouncil.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
809
2
Accounting for the Impact of Real-World Data and Costs in Autonomous Cyber Defence (ieeexplore.ieee.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
810
1
Ongoing active exploitation of SonicWall SSL VPNs in Australia (CVE-2024-40766) (cyber.gov.au)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
811
2
An Attacker’s Blunder Gave Us a Look Into Their Operations (www.huntress.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
812
2
r2con2025 October 24-25 (CFP Oct 14th) - 100% Online (rada.re)
submitted 2 months ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
813
10
Elections watchdog admits 'painful lessons learned' after Chinese hack (www.bbc.co.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
814
5
GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe (arcticwolf.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
815
2
“LockerGoga,” “MegaCortex,” and “Nefilim” Ransomware Administrator Charged with Ransomware Attacks (www.justice.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
816
4
Blog - Memory Integrity Enforcement: A complete vision for memory safety in Apple devices - Apple Security Research (security.apple.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
817
4
The Internet Coup: How a Chinese Company is Exporting the Great Firewall (interseclab.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
818
2
Unmasking The Gentlemen Ransomware: Tactics, Techniques, and Procedures Revealed (www.trendmicro.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
819
5
Stopping ransomware before it starts: Lessons from Cisco Talos Incident Response (blog.talosintelligence.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
820
8
MFTool: Direct access to NTFS volumes (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
821
6
Security means securing people where they are (blog.yossarian.net)
submitted 2 months ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
822
4
Blurring the Lines: Intrusion Shows Connection With Three Major Ransomware Gangs (thedfirreport.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
823
3
Autonomous NodeZero Breaches GOAD via AD Misconfigurations (horizon3.ai)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
824
1
FANCY BEAR GONEPOSTAL – Espionage Tool Provides Backdoor Access to Microsoft Outlook (www.kroll.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
825
1
Break The Protective Shell Of Windows Defender With The Folder Redirect Technique (www.zerosalarium.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›