blueteamsec

538 readers

7 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

3

CTO at NCSC Summary: week ending November 2nd (ctoatncsc.substack.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink

2

2

Scaling Security Testing by Addressing the Reachability Gap (gpsapia.github.io)

submitted 54 minutes ago by digicat to c/blueteamsec

0 comments fedilink

3

1

Graph Api Overwhelm (www.alphaf0x.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

4

2

RDSEED Failure on AMD “Zen 5” Processors (www.amd.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

5

2

Remote access, real cargo: cybercriminals targeting trucking and logistics (www.proofpoint.com)

submitted 4 hours ago by digicat to c/blueteamsec

0 comments fedilink

6

2

Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody (krebsonsecurity.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

7

2

SilentButDeadly: SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform (WFP). (github.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

8

1

Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure (research.checkpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

9

11

Is Your Bluetooth Chip Leaking Secrets via RF Signals? (eprint.iacr.org)

submitted 2 days ago by digicat to c/blueteamsec

4 comments fedilink

10

10

Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware (socket.dev)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

11

4

Bypassing WiFi Client Isolation (pulsesecurity.co.nz)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

12

3

Attacking macOS XPC Helpers: Protocol Reverse Engineering and Interface Analysis (tonygo.tech)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

13

2

The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

14

2

You are worker #41: Lophiid Honeypot Caught an Automated AI Attack Swarm (medium.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

15

2

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

16

3

BOF_Spawn: Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames (github.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

17

3

A Defender's Guide to Privileged Account Monitoring | Google Cloud Blog (cloud.google.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

18

1

Identity Management for Agentic AI by OpenID (openid.net)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

1

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates (expel.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

1

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

21

1

Tracking Lateral Movement: PowerShell Remoting, WMIC, Explicit Credentials, NTLM Relay Attacks, Credential Theft and Reuse (Event IDs) (medium.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

22

1

Tracking Lateral Movement — Named Pipes, Scheduler, Services, Registry, and DCOM (Event IDs) (medium.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

23

2

Open VSX security update, October 2025 (blogs.eclipse.org)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

24

5

EDR-Redir V2: Blind EDR With Fake Program Files (www.zerosalarium.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

25

4

Decrypted: Midnight Ransomware - Midnight ransomware echoes Babuk’s tactics but stumbles in its code. Gen researchers explain how those mistakes make decryption and recovery possible (www.gendigital.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink