blueteamsec

557 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1001
5
The head of a hacking group that also targeted BTS's Jungkook and the president has been arrested and extradited by the Ministry of Justice - " repatriated Chinese national" (www.yna.co.kr)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://www.sportskeeda.com/us/k-pop/news-head-hacking-ring-reportedly-stole-8-4-billion-won-hybe-shares-bts-jungkook-arrested

1002
7
You don’t find ManualFinder, ManualFinder finds you - "we’re seeing activity where PUPs are dropping highly suspicious files, executing unexpected commands, and turning hosts into residential proxies" (expel.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1003
4
Detecting CVE-2025-43300: A Deep Dive into Apple's DNG Processing Vulnerability | Matt Suiche (www.msuiche.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1004
18
Phishing Emails Are Now Aimed at Users and AI Defenses - "Clearly written in the style of Grok, Gemini or ChatGPT style prompts,. nothing to do with luring the users. Instead.. n AI prompt-injection" (malwr-analysis.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1005
2
REcover: towards recovering object files from stripped binary executables (link.springer.com)
submitted 3 months ago* (last edited 3 months ago) by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://github.com/huku-/recover

1006
3
SynoScope is a python-based, lightweight, batteries-included analyzer that turns can provide valuable information regarding your DiskStation Manager (DSM) status within the undocumented Synology recov (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
1007
3
Countering EDRs With The Backing Of Protected Process Light (PPL) (www.zerosalarium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1008
3
Platform SSO configuration guide for macOS devices using Microsoft Intune - "configure Platform SSO to enable single sign-on (SSO) for your macOS devices using passwordless authentication, Microsoft E (learn.microsoft.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1009
3
2025 Minimum Elements for a Software Bill of Materials (SBOM) - CISA is requesting public comment on its updated guidance on Software Bill of Materials (SBOM) (www.cisa.gov)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1010
3
GraphApiAuditEvents: The new Graph API Logs (kqlquery.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1011
4
MC1133508 - Microsoft Teams Integration with Microsoft Defender for Office Tenant Allow/Block List for blocking domains | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1012
3
MC1137611 - Deception feature in Microsoft Defender for Endpoint will be retired from public preview | Microsoft 365 Message Center Archive (mc.merill.net)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
1013
3
Limiting Onmicrosoft Domain Usage for Sending Emails | Microsoft Community Hub (techcommunity.microsoft.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1014
2
Think before you Click(Fix): Analyzing the ClickFix social engineering technique (www.microsoft.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1015
2
The Ghost in the Machine: The Complete Dossier on TA-NATALSTATUS and the Cryptojacking Turf War (www.cloudsek.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1016
1
A new, cheaper Mac stealer emerges (moonlock.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1017
4
The Masked Man in Cyber Attacks: Analysis of the DupeDog Software Framework (mp.weixin.qq.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1018
4
APT36: Targets Indian BOSS Linux Systems with Weaponized AutoStart Files (www.cyfirma.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1019
3
koney: Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates and uses eBPF to detect, log, and forward alerts (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1020
3
[2505.21244] When to Deceive: A Cross-Layer Stackelberg Game Framework for Strategic Timing of Cyber Deception (arxiv.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1021
4
Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks (arxiv.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1022
3
Developing a Transit Cybersecurity Framework Community Profile: Project Update (Draft) (csrc.nist.gov)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1023
4
Sludge for Good: Slowing and Imposing Costs on Cyber Attackers (arxiv.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1024
16
The Great SSL Certificate Panic (redmonk.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
4 comments fedilink
1025
4
Bypassing Enrollment Restrictions to Break BYOD Barriers in Intune (temp43487580.github.io)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›