blueteamsec

541 readers
2 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
276
3
Inside the Unified Log 3: Log storage and attrition (eclecticlight.co)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
277
2
XWorm V6: Exploring Pivotal Plugins (www.trellix.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
278
5
Exploiting Legitimate Remote Access Tools in Ransomware Campaigns (www.seqrite.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
279
2
Don’t Sweat the ClickFix Techniques: Variants & Detection Evolution | Huntress (www.huntress.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
280
2
Operation SouthNet: SideWinder Targets South Asia Maritime (hunt.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
281
2
Coordinated Grafana Exploitation Attempts on 28 September (www.greynoise.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
282
1
Defending against supply chain attacks like Chalk/Debug and the Shai-Hulud worm (aws.amazon.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
283
1
Using .LNK files as lolbins (www.hexacorn.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
284
3
North Korea IT Workers: Inside the DPRK’s Crypto Laundering Network (www.chainalysis.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
285
3
OneDrive. Let's take this offline (malwaremaloney.blogspot.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
286
1
NetworkHound: Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and comprehensive network discovery. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
287
1
Adding Determinism and Safety to Uber IAM Policy Changes (www.uber.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
288
1
Taming 2,500 compiler warnings with CodeQL, an OpenVPN2 case study (blog.trailofbits.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
289
1
GhostSocks: From Initial Access to Residential Proxy (synthient.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
290
3
0day .ICS attack in the wild - details an incident from April 2025 in September 2025 - "a then-zero-day exploit in Zimbra’s Collaboration Suite, CVE-2025-27915" (strikeready.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
291
1
Gepetto: IDA plugin which queries language models to speed up reverse-engineering (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
292
2
OntoLogX: Ontology-Guided Knowledge Graph Extraction from Cybersecurity Logs with Large Language Models (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
293
6
Update on a Security Incident Involving Third-Party Customer Service | Discord (discord.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
294
6
North Korean agents pretending to be IT guys have funneled up to $1 billion into Kim Jong Un’s nuclear program (archive.ph)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
295
1
shade: PoC shadow SaaS and insecure credential detection system using a browser extension. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
296
3
Secure Microsoft Entra ID: Real-World Strategies (blog.nviso.eu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
297
3
C2 Infra on Azure (0xdarkvortex.dev)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
298
1
Battering RAM Low-Cost Interposer Attacks on Confidential Computing (batteringram.eu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 

**> **

299
1
Invisible Ears at Your Fingertips: Acoustic Eavesdropping via Mouse Sensors (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
300
1
WireTap: Breaking Server SGX via DRAM Bus Interposition (wiretap.fail)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
 
 
view more: ‹ prev next ›