blueteamsec

557 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
651
1
NCSC warns of persistent malware campaign targeting Cisco devices (www.ncsc.gov.uk)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
652
2
Department of War Announces New Cybersecurity Risk Management Construct (www.war.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
653
4
Who is Salt Typhoon Really? Unraveling the Attribution Challenge (nattothoughts.substack.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
654
1
Project Rain:L1TF - This blog provides a detailed overview of the L1TF vulnerability, a CPU vulnerability on some Intel CPUs (Skylake and older) (bughunters.google.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
655
1
COLDRIVER Adds BAITSWITCH and SIMPLEFIX (www.zscaler.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
656
2
Threat Intelligence Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors (cloud.google.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
657
3
Linux Kernel Runtime Guard (LKRG) 1.0 (Nullcon Berlin 2025) (www.openwall.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
658
5
Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware (blog.lastpass.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
659
2
Ransomware Rising - Digital Front Lines (digitalfrontlines.io)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
660
2
Security advisory: command injection vulnerability (CVE-2025-59689) – email as a vector (docs.libraesva.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
661
2
How RainyDay, Turian and a new PlugX variant abuse DLL search order hijacking (blog.talosintelligence.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
662
2
The Evolution of RomCom (www.attackiq.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
663
2
NodeJS backdoors delivering proxyware and monetization schemes (medium.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
664
2
Operation Rewrite: Chinese-Speaking Threat Actors Deploy BadIIS in a Wide Scale SEO Poisoning Campaign (unit42.paloaltonetworks.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
665
2
Our plan for a more secure npm supply chain (github.blog)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
666
4
BYOVD to the next level (part 1) — exploiting a vulnerable driver (CVE-2025-8061) - Quarkslab's blog (blog.quarkslab.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
667
6
U.S. Secret Service dismantles imminent telecommunications threat in New York tristate area (www.secretservice.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
668
6
The Phantom Extension: Backdooring chrome through uncharted pathways (www.synacktiv.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
669
5
m0leCon 2025 (www.youtube.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
670
3
YiBackdoor: Linked to IcedID and Latrodectus | ThreatLabz (www.zscaler.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
671
4
CISA Shares Lessons Learned from an Incident Response Engagement (www.cisa.gov)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
672
5
firezone: Enterprise-ready zero-trust access platform built on WireGuard®. (github.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
673
1
[위협 분석] 성범죄자 고지 정보를 위장한 Kimsuky 공격 | 로그프레소 - Kimsuky Attack Disguised as Sex Offender Notification Information (logpresso.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
674
1
Defending Against the Evolving OAuth Attack Landscape (aadinternals.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
675
2
Cyber Threat Intelligence Communication & Reporting Techniques (bank-security.medium.com)
submitted 2 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›