blueteamsec

556 readers
9 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
401
3
Effective practices: Cyber response and recovery capabilities (www.bankofengland.co.uk)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
402
2
From Chaos to Capability: Building the US Market for Offensive Cyber (sergeybratus.gitlab.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
403
9
Spyware maker NSO Group blocked from WhatsApp | TechCrunch (techcrunch.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
404
3
How to use chaos engineering in incident response | Amazon Web Services (aws.amazon.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
405
3
Malicious package with AdaptixC2 framework agent found in npm registry (securelist.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
406
2
WOOT'25 videos (www.youtube.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
407
3
Unmasking the Invisible: Hunting and Defeating EDR-Evading Threats Like BRICKSTORM - "YARA signatures, or suspicious file paths on a vCenter server) were found in a customer's backups" (zerolabs.rubrik.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
408
4
Extortion and ransomware drive over half of cyberattacks - "Just 20 ASNs—only 0.04%— account for more than 80% of malicious password spray activity" (cdn-dynmedia-1.microsoft.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
409
1
Secure Parsing and Serializing with Separation Logic Applied to CBOR, CDDL, and COSE (www.microsoft.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
410
5
Diffing 7-Zip for CVE-2025-11001 (pacbypass.github.io)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
411
1
KNighter: Transforming Static Analysis with LLM-Synthesized Checkers (arxiv.org)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
412
1
Shifts in the Underground: The Impact of Water Kurita’s (Lumma Stealer) Doxxing (www.trendmicro.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
413
2
DefenderWrite: Abusing Whitelisted Programs for Arbitrary Writes (www.zerosalarium.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
414
2
Lessons from the BlackBasta Ransomware Attack on Capita (blog.bushidotoken.net)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
415
3
CTO at NCSC Summary: week ending October 19th.. (ctoatncsc.substack.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
416
2
BeaverTail and OtterCookie evolve with a new Javascript module (blog.talosintelligence.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
417
1
OtterCandy, malware used by WaterPlum | セキュリティナレッジ | NTTセキュリティ・ジャパン株式会社 (jp.security.ntt)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
418
2
New Group on the Block: UNC5142 Leverages EtherHiding to Distribute Malware | Google Cloud Blog (cloud.google.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
419
2
DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains | Google Cloud Blog (cloud.google.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
420
4
Training Solo - the first systematic analysis of self-training Spectre-v2 attacks that break the core assumption behind domain isolation—even when implemented perfectly. (www.vusec.net)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
421
2
yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) (labs.watchtowr.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
422
4
StealthServer: A Dual-Platform Backdoor from a South Asian APT Group (blog.xlab.qianxin.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
423
3
Operation Silk Lure: Scheduled Tasks Weaponized for DLL Side-Loading (drops ValleyRAT) (www.seqrite.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
424
2
Mysterious Elephant APT: TTPs and tools (securelist.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
425
12
How I Almost Got Hacked By A 'Job Interview' (blog.daviddodda.com)
submitted 1 month ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›