blueteamsec

540 readers
2 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
251
1
Mustang Panda Employ Publoader Through ClaimLoader: Yes.. another DLL Side-Loading Technique Delivery via Phishing - 0x0d4y Malware Reseach (0x0d4y.blog)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
252
3
Security Bulletin: Several Security Vulnerabilities have been discovered in IBM Security Verify Access and IBM Verify Identity Access products. (CVE-2025-36354, CVE-2025-36355, CVE-2025-363546) (www.ibm.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
253
1
surveyor: Advanced Windows kernel analysis and system profiling tool. Provides comprehensive visibility into kernel callbacks, ETW sessions, driver analysis, and system state through both userland API (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
254
1
BIETA: A Technology Enablement Front for China's MSS (www.recordedfuture.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
255
10
North Korea's crypto hackers have stolen over $2 billion in 2025 (www.elliptic.co)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
256
5
Building the Leading Open-Source Pentesting Agent: Architecture Lessons from XBOW Benchmark (medium.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
257
2
2025年度版：脅威ハンティング再考 - 2025 Edition: Threat Hunting Revisited (www.scientia-security.org)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
258
1
aws-iam-actions-list: A list of all known Amazon Web Services' IAM actions; and a way of updating that list. (github.com)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
259
1
The Evolution of Qilin RaaS (www.sans.org)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
260
1
SBI Crypto - SBI Crypto joined an expensive club nobody wants membership in: Japanese crypto companies that marketed security while hemorrhaging funds to North Korean hackers (rekt.news)
submitted 4 weeks ago by digicat to c/blueteamsec
0 comments fedilink
261
4
CrowdStrike Identifies Campaign Targeting Oracle E-Business Suite via Zero-Day Vulnerability Tracked as CVE-2025-61882 (www.crowdstrike.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
262
5
Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882) (labs.watchtowr.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
263
1
CN APT targets Serbian Government (strikeready.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
264
1
CVE-2025-61882: Detection for CVE-2025-61882 - Oracle E-Business zero-day (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
265
1
Oracle Security Alerts CVE-2025-61882 - October 4th 2025 - "This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network .. this vulnerability may result (www.oracle.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
266
3
Inside the Unified Log 3: Log storage and attrition (eclecticlight.co)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
267
2
XWorm V6: Exploring Pivotal Plugins (www.trellix.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
268
5
Exploiting Legitimate Remote Access Tools in Ransomware Campaigns (www.seqrite.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
269
2
Don’t Sweat the ClickFix Techniques: Variants & Detection Evolution | Huntress (www.huntress.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
270
2
Operation SouthNet: SideWinder Targets South Asia Maritime (hunt.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
271
2
Coordinated Grafana Exploitation Attempts on 28 September (www.greynoise.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
272
1
Defending against supply chain attacks like Chalk/Debug and the Shai-Hulud worm (aws.amazon.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
273
1
Using .LNK files as lolbins (www.hexacorn.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
274
3
North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network (www.chainalysis.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
275
3
OneDrive. Let's take this offline (malwaremaloney.blogspot.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›