blueteamsec

550 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
2
CTO at NCSC Summary: week ending November 23rd (ctoatncsc.substack.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
3
New Tomiris tools and techniques: multiple reverse shells, Havoc, AdaptixC2 (securelist.com)
submitted 5 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
4
How Amazon uses AI agents to anticipate and counter cyber threats (www.amazon.science)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink
4
6
Former contractor admits to hacking employer in retaliation for termination (www.justice.gov)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
3
CustomC2ChannelTemplate: template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader. (github.com)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
6
3
ClickFix Gets Creative: Malware Buried in Images (www.huntress.com)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
3
Poland arrests Russian suspected of hacking Polish companies (www.reuters.com)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
8
2
Detecting Cobalt Strike HTTP(S) Beacons with a Simple Method (academy.bluraven.io)
submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
5
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks (socket.dev)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
3
Long Live Pass-The-Cert: Reviving the Classical Rendition of Lateral Movement across Entra ID joined Devices (www.alteredsecurity.com)
submitted 20 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
3
China Security Report (www.nids.mod.go.jp)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
3
The Mystery OAST Host Behind a Regionally Focused Exploit Operation (www.vulncheck.com)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
2
Custom Mach-O Image Loader with in-memory Mach-O loader (github.com)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
2
Field Notes on Malware: C2 Evasion Evolution and Detection Implications (deceptiq.com)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
3
Joint statement on malicious cyber activity targeting Canadian critical infrastructure - Canada.ca (www.canada.ca)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
16
3
A Tsunami Sweeping the Cyber Battlefield Analysis of SectorA01’s Hacking Activities (medium.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
2
The cyber threat to Canada’s water systems: Assessment and mitigation - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
1
Report Explanation| MSMT: The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (slowmist.medium.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
19
1
FlexibleFerret: macOS Malware Deploys in Fake Job Scams (www.jamf.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
20
3
Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine (arcticwolf.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
1
UNC5174 그룹의 Discord Bot 백도어 악성코드 - Discord Bot backdoor malware from the UNC5174 group (asec.ahnlab.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
22
1
KeyDrop Scans The Web for Publicly Exposed API Keys - Innovation at Consumer Reports (innovation.consumerreports.org)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
3
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications (www.cisa.gov)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
24
2
QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in an archive, named spam_log.7z, to VirusTotal from Taiwan (x.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
5
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations (blog.narimangharib.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›