blueteamsec

557 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1026
4
Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1027
4
THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1028
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1029
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1030
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1031
3
A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1032
2
APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1033
2
StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1034
2
AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1035
2
rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1036
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1037
2
Silent Harvest: Extracting Windows Secrets Under the Radar (sud0ru.ghost.io)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1038
2
Hunting for Malware Networks (dti.domaintools.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1039
4
Slice: SAST + LLM Interprocedural Context Extractor (noperator.dev)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1040
4
phishurl-list: Phishing URL dataset from JPCERT/CC (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1041
3
Evolving Mule Tactics in the META Region (www.group-ib.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1042
4
When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) - a reminder that Docker is not a security boundary (blog.qwertysecurity.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1043
4
AppLockerInspector: Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks. (github.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1044
4
Detailed Analysis of Phrack’s APT Down: The North Korea Files (s2w.inc)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1045
4
Weaponizing image scaling against production AI systems (blog.trailofbits.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1046
4
Scam Farms Marque and Reprisal Authorization Act of 2025 - authorize the President to issue letters of marque and reprisal with respect to acts of aggression against the United States (www.congress.gov)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
1047
5
"Scamlexity": When Agentic AI Browsers Get Scammed (guard.io)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1048
5
CVE-2025–41688: Bypassing Restrictions in an OT Remote Access Device (medium.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1049
5
MCP vulnerability case study: SQL injection in the Postgres MCP server (securitylabs.datadoghq.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
1050
4
MURKY PANDA: Trusted-Relationship Cloud Threat (www.crowdstrike.com)
submitted 3 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›