blueteamsec

554 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
226
1
Weaponizing Trust: ClickOnce Deployment with AppDomainManager Injection (malcrove.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
227
3
Runtime Android Object Instrumentation (knifecoat.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
228
1
DonPwner: Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
229
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
230
1
ESET APT Activity Report Q2 2025–Q3 2025 (www.welivesecurity.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
231
2
JA4+ Plugin for Wireshark (github.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 
232
2
SoK: Honeypots & LLMs, More Than the Sum of Their Parts? (arxiv.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
233
2
警惕！APT-C-08（蔓灵花）组织首次借WinRAR漏洞CVE-2025-6218实施网络攻击 - Beware! The APT-C-08 (Manlinghua) group has launched its first cyberattack using the WinRAR vulnerability CVE-2025-6218. (mp.weixin.qq.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
234
3
What’s That Coming Over The Hill? (Monsta FTP Remote Code Execution CVE-2025-34299) (labs.watchtowr.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
235
2
Data-Structure Injection (DSI) in AI Agents (labs.zenity.io)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
236
2
CTO at NCSC Summary: week ending November 9th (ctoatncsc.substack.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
237
3
BSI TR -03185-2 Secure Software Lifecycle for Open Source Software (www.bsi.bund.de)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
238
5
Site Unseen: Enumerating and Attacking Active Directory Sites (www.synacktiv.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
239
2
SesameOp: Novel backdoor uses OpenAI Assistants API for command and control (www.microsoft.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
240
4
LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices (unit42.paloaltonetworks.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
241
2
Lazarus Group targets Aerospace and Defense with new Comebacker variant | Enki White Hat (www.enki.co.kr)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
242
1
How CHERIoT uses Sealing (cheriot.org)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
243
2
CyberUK tech talks call for papers (www.cyberuk.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
244
13
Meta is earning a fortune on a deluge of fraudulent ads, documents show (archive.ph)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
245
2
New Kimsuky Malware “EndClient RAT”: First Technical Report and IOCs (www.0x0v1.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
246
7
China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy (www.security.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
247
6
How an Attacker Drained $128M from Balancer Through Rounding Error Exploitation (research.checkpoint.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
248
3
Close Those Ports: Exploring Splashtop RMM and Relays (blog.axelarator.net)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
249
1
Malicious Infrastructure Finds Stability with aurologic GmbH (assets.recordedfuture.com)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
250
3
Spoofed numbers blocked in crackdown on scammers (www.gov.uk)
submitted 3 weeks ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
view more: ‹ prev next ›