blueteamsec

552 readers
14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
201
5
Site Unseen: Enumerating and Attacking Active Directory Sites (www.synacktiv.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
202
2
SesameOp: Novel backdoor uses OpenAI Assistants API for command and control (www.microsoft.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
203
4
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices (unit42.paloaltonetworks.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
204
2
Lazarus Group targets Aerospace and Defense with new Comebacker variant | Enki White Hat (www.enki.co.kr)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
205
1
How CHERIoT uses Sealing (cheriot.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
206
2
CyberUK tech talks call for papers (www.cyberuk.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
207
13
Meta is earning a fortune on a deluge of fraudulent ads, documents show (archive.ph)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
208
2
New Kimsuky Malware “EndClient RAT”: First Technical Report and IOCs (www.0x0v1.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
209
7
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy (www.security.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
210
6
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation (research.checkpoint.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
211
3
Close Those Ports: Exploring Splashtop RMM and Relays (blog.axelarator.net)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
212
1
Malicious Infrastructure Finds Stability with aurologic GmbH (assets.recordedfuture.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
213
3
Spoofed numbers blocked in crackdown on scammers (www.gov.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
214
1
Cloud Backup Security Incident Investigation Complete and Strengthened Cyber Resilience (www.sonicwall.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
215
3
Crossed wires: a case study of Iranian espionage and attribution (www.proofpoint.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
216
2
This Research Investigates purely focuses on the Networks used by the Clop Ransomware Group during their infiltration at different victims. (theravenfile.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
217
2
Dissecting the Infection Chain: Technical Analysis of the Kimsuky JavaScript Dropper (blog.pulsedive.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
218
3
We share global infrastructure tracking techniques, tools to decrypt VShell communications, and insights into attacker behaviors to strengthen threat detection and incident response capabilities. (www.nviso.eu)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
219
3
NVISO analyzes VShell post-exploitation tool (www.nviso.eu)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
220
4
A Researcher Came Knocking, and Taught China a Lesson in How to Manage Vulnerabilities -- and Researchers (nattothoughts.substack.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
221
3
GTIG AI Threat Tracker: Advances in Threat Actor Usage of AI Tools (cloud.google.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
222
4
Russian Cybercrime & State Militarization: Marching Together in the Digital Age (analyst1.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
223
3
Defeating KASLR by Doing Nothing at All (googleprojectzero.blogspot.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
224
3
Treasury Sanctions DPRK Bankers and Institutions Involved in Laundering Cybercrime Proceeds and IT Worker Funds (home.treasury.gov)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
225
3
How RMM abuse fuelled Medusa & DragonForce attacks (zensec.co.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›