blueteamsec

557 readers
5 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
601
3
Attacking Assumptions Behind the Image Load Callbacks (diversenok.github.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
602
2
New LockBit 5.0 Targets Windows, Linux, ESXi (www.trendmicro.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
603
1
Smash and Grab: Aggressive Akira Campaign Targets SonicWall VPNs, Deploys Ransomware in an Hour or Less - "Threat actors in the present campaign successfully authenticated against accounts with the on (infosec.pub)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
604
2
Understanding your OT environment: the first step to stronger cyber security (www.ncsc.gov.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
605
2
MS-SQL 서버 공격 사례에서 확인된 XiebroC2 - XiebroC2 identified in MS-SQL server attack cases (asec.ahnlab.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
606
3
Resecurity | Trinity of Chaos: The LAPSUS$, ShinyHunters, and Scattered Spider Alliance Embarks on Global Cybercrime Spree (www.resecurity.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
607
3
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion (thedfirreport.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
608
1
Threat Hunting on potential APT35 Servers (www.stormshield.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
609
2
Port in a Storm: Iranian Cyber Operations and Chinese Strategic Interests in Middle Eastern Maritime Infrastructure (pure.royalholloway.ac.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
610
3
OmniProx: IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
611
2
Gh0stKCP Protocol - transport protocol based on KCP, which runs on top of UDP. Gh0stKCP used to carry (C2) traffic by families such as PseudoManuscrypt and ValleyRAT/Winos4.0. (www.netresec.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
612
1
Automation of VHDX Investigations (labs.infoguard.ch)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
613
4
Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer. (blackpointcyber.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
 
 
614
2
SNMP RCE in Cisco IOS and IOS XE Software [CVE‑2025‑20352] (censys.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
615
2
Olymp Loader: A new Malware-as-a-Service written in Assembly (outpost24.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
616
2
the Dark Side of Dynamic DNS Providers (www.silentpush.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
617
2
SVG Phishing hits Ukraine with Amatera Stealer, PureMiner (www.fortinet.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
618
3
AIDR-Bastion: A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System incorporates multiple engines - supports Sigma (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
619
9
Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams (today.ucsd.edu)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
620
2
Gmail phishing posing as Google Careers (gist.github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
621
2
SetupHijack: SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and update processes. (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
622
3
Wyrm: The dragon in the dark. The best defence, is a good offense. A red team post exploitation framework for testing security controls during red team assessments. (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
623
2
Analysis of a Ransomware Breach (aff-wg.org)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
624
4
Patching Firmware Secure Boot on DELL G115 Through Off-chip Extraction (blog.redcrowlab.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
625
2
Eye of the Storm: Analyzing DarkCloud's Latest Capabilities (www.esentire.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›