blueteamsec

540 readers

10 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

3

CTO at NCSC Summary: week ending November 2nd (ctoatncsc.substack.com)

submitted 3 days ago by digicat to c/blueteamsec

0 comments fedilink

2

4

Chicago firm that resolves ransomware attacks had rogue workers carrying out their own hacks, FBI says (chicago.suntimes.com)

submitted 36 minutes ago by digicat to c/blueteamsec

0 comments fedilink

3

1

Curly COMrades: Evasion and Persistence via Hidden Hyper-V Virtual Machines (www.bitdefender.com)

submitted 27 minutes ago by digicat to c/blueteamsec

0 comments fedilink

4

2

Demystifying Zero Trust (www.ncsc.gov.uk)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

5

1

Inside the attack chain: Threat activity targeting Azure Blob Storage (www.microsoft.com)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

6

1

Using PAWs in OT environments (www.ncsc.gov.uk)

submitted 2 hours ago by digicat to c/blueteamsec

0 comments fedilink

7

3

Scaling Security Testing by Addressing the Reachability Gap (gpsapia.github.io)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

3

Remote access, real cargo: cybercriminals targeting trucking and logistics (www.proofpoint.com)

submitted 14 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

2

RDSEED Failure on AMD “Zen 5” Processors (www.amd.com)

submitted 13 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

1

Graph Api Overwhelm (www.alphaf0x.com)

submitted 12 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

2

Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody (krebsonsecurity.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

12

2

SilentButDeadly: SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using Windows Filtering Platform (WFP). (github.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

13

1

Drawn to Danger: Windows Graphics Vulnerabilities Lead to Remote Code Execution and Memory Exposure (research.checkpoint.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

14

11

Is Your Bluetooth Chip Leaking Secrets via RF Signals? (eprint.iacr.org)

submitted 2 days ago by digicat to c/blueteamsec

4 comments fedilink

15

10

Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware (socket.dev)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

16

4

Bypassing WiFi Client Isolation (pulsesecurity.co.nz)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

17

3

Attacking macOS XPC Helpers: Protocol Reverse Engineering and Interface Analysis (tonygo.tech)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

18

2

The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

19

2

You are worker #41: Lophiid Honeypot Caught an Automated AI Attack Swarm (medium.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

20

2

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

21

3

BOF_Spawn: Cobalt Strike BOF for beacon/shellcode injection using fork & run technique with Draugr synthetic stack frames (github.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

22

3

A Defender's Guide to Privileged Account Monitoring | Google Cloud Blog (cloud.google.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

23

1

Identity Management for Agentic AI by OpenID (openid.net)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

24

1

Certified OysterLoader: Tracking Rhysida ransomware gang activity via code-signing certificates (expel.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

25

1

Don’t take BADCANDY from strangers – How your devices could be implanted and what to do about it - Cisco (www.cyber.gov.au)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink