blueteamsec

542 readers
6 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
351
3
OmniProx: IP Rotation from different providers - Like FireProx but for GCP, Azure, Alibaba and CloudFlare (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
352
2
Gh0stKCP Protocol - transport protocol based on KCP, which runs on top of UDP. Gh0stKCP used to carry (C2) traffic by families such as PseudoManuscrypt and ValleyRAT/Winos4.0. (www.netresec.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
353
1
Automation of VHDX Investigations (labs.infoguard.ch)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
354
4
Malicious Teams Installers Drop Oyster Malware - abusing SEO poisoning and malvertising to lure users into downloading a fake Microsoft Teams installer. (blackpointcyber.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
 
 
355
2
SNMP RCE in Cisco IOS and IOS XE Software [CVE‑2025‑20352] (censys.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
356
2
Olymp Loader: A new Malware-as-a-Service written in Assembly (outpost24.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
357
2
the Dark Side of Dynamic DNS Providers (www.silentpush.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
358
2
SVG Phishing hits Ukraine with Amatera Stealer, PureMiner (www.fortinet.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
359
3
AIDR-Bastion: A comprehensive GenAI protection system designed to protect against malicious prompts, injection attacks, and harmful content. System incorporates multiple engines - supports Sigma (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
360
9
Cybersecurity Training Programs Don’t Prevent Employees from Falling for Phishing Scams (today.ucsd.edu)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
361
2
Gmail phishing posing as Google Careers (gist.github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
362
2
SetupHijack: SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows applications installer and update processes. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
363
3
Wyrm: The dragon in the dark. The best defence, is a good offense. A red team post exploitation framework for testing security controls during red team assessments. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
364
2
Analysis of a Ransomware Breach (aff-wg.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
365
4
Patching Firmware Secure Boot on DELL G115 Through Off-chip Extraction (blog.redcrowlab.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
366
2
Eye of the Storm: Analyzing DarkCloud's Latest Capabilities (www.esentire.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
367
7
docuseal: Open source DocuSign alternative. Create, fill, and sign digital documents ✍️ (github.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
368
3
WerDump: A Beacon Object File (BOF) for Havoc/CS to Bypass PPL and Dump Lsass (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
369
5
Pointer leaks through pointer-keyed data structures (googleprojectzero.blogspot.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
370
2
CTI Dataset Construction from Telegram (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
371
2
pipe-intercept: Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
372
2
CTO at NCSC Summary: week ending September 28th (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
373
3
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devices (blog.talosintelligence.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
374
8
Netherlands: Two teenagers arrested in spying case linked to Russia - " walked past the offices of Europol, Eurojust and the Canadian embassy in The Hague carrying a "wi-fi sniffer" (www.bbc.co.uk)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
375
5
IMDS Abused: Hunting Rare Behaviors to Uncover Exploits - we uncovered exploitation in the wild of a previously unknown zero-day vulnerability from insecure use of pandoc. (www.wiz.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›