blueteamsec

552 readers
11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
126
2
Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities (www.cisa.gov)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
127
3
Israel National Digital Agency researchers have uncovered an ongoing, sophisticated espionage campaign by SpearSpecter, conducted by Iranian threat actors (govextra.gov.il)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
128
1
Be KVM, Do Fraud - discovering KVMs (blog.grumpygoose.io)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
129
2
Saeros: Open source HIDS tailored for Microsoft Active Directory and Workstations (github.com)
submitted 1 week ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
130
1
SAMDump: Extracts SAM and SYSTEM using Volume Shadow Copy (VSS) API with multiple exfiltration options and XOR obfuscation (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
131
2
GhostX Platform – Offensive Security Module Version: 1.0 (Internal Training – Military & Public Security Use) - Knownsec 404 Team / GhostX R&D - AI generated from the leaks (0x0.st)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

src: https://x.com/hackerfantastic/status/1988682933503430879

132
2
CTO at NCSC Summary: week ending November 16th (ctoatncsc.substack.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
133
1
UNC5174 Windows Malware Snowlight (sect.iij.ad.jp)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
134
1
Ryūjin - Writing a Bin2Bin Obfuscator from Scratch for Windows PE x64 and Fully Deobfuscating It (keowu.re)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
135
9
Amazon Inspector detects over 150,000 malicious packages linked to token farming campaign (aws.amazon.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
136
0
Leveraging Large Models to Assist Automated BYOVD-Driven Vulnerability Discovery (mp.weixin.qq.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
137
2
git-fsmonitor: This is a proof-of-work for abusing "fsmonitor" against IDE. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
138
1
Rehabilitating Registry Tradecraft with RegRestoreKey (www.preludesecurity.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
139
1
ZeroCrumb: Dumping App Bound Protected Credentials & Cookies Without Privileges. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
140
1
flowsint: A modern platform for visual, flexible, and extensible graph-based investigations. For cybersecurity analysts and investigators. (github.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
141
1
When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446) (labs.watchtowr.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
142
1
You win some, you CheckSum: New Kerberos delegation vulnerability discovered—attackers could impersonate, escalate privileges and stay hidden (www.silverfort.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
143
0
Rust in Android: move fast and fix things (security.googleblog.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
144
6
‘World-class’ hacker arrested in Phuket rumoured to be GRU officer Aleksey Lukashev (www.thephuketnews.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
145
1
Contagious Interview Actors Now Utilize JSON Storage Services for Malware Delivery (blog.nviso.eu)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
146
1
A dual strategy: legal action and new legislation to fight scammers (blog.google)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
147
5
Australian spy chief says Chinese hackers probing telecoms, key facilities (www.reuters.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
148
6
Increase in Lumma Stealer Activity Coincides with Use of Adaptive Browser Fingerprinting Tactics (www.trendmicro.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
149
1
Analysis of Encryption Structure of Yurei Ransomware Go-based Builder - ASEC (asec.ahnlab.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
150
1
Payroll Pirates: The Widespread Malvertising Network (cyberint.com)
submitted 2 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›