blueteamsec

542 readers
17 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
426
1
SystemBC – Bringing the Noise (blog.lumen.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
427
1
Deserialization Vulnerability in GoAnywhere MFT's License Servlet (www.fortra.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
428
3
Chypnosis: Stealthy Secret Extraction using Undervolting-based Static Side-channel Attacks (arxiv.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
429
3
EDR-Freeze: EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state. (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
430
1
Thalha Jubair DOJ complaint - alleged Scattered Spider (www.documentcloud.org)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
431
4
From Abstract Terms to Acumen: SEO Poisoning (medium.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
432
4
Domain Fronting is Dead. Long Live Domain Fronting! (www.praetorian.com)
submitted 1 month ago by digicat to c/blueteamsec
3 comments fedilink
433
0
Hunting for SnakeDisk (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
434
0
Hunting for PyPI Packages Delivering SilentSync RAT (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
435
0
That's How Adversaries Disable Warning Messages (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
436
0
Another Legitimate Web Service Abused by APT28 (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
437
0
That's How Bloody Wolf Abuses WMI for Discovery (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
438
1
That's How Adversaries Abuse WMI for Software Discovery (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
439
-2
That's How Adversaries Modify Registry to Weaken Security (www.knowyouradversary.ru)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
440
2
GOLD SALEM’s Warlock operation joins busy ransomware landscape (news.sophos.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
441
3
Blog: Beyond Sandbox Domains: Rendering Untrusted Web Content with SafeContentFrame (bughunters.google.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
442
2
ByteCaster: Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)! ☢️ (github.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
443
0
‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker (www.bloomberg.com)
submitted 1 month ago by digicat to c/blueteamsec
1 comments fedilink
444
5
Unmasking Akira: The ransomware tactics you can’t afford to ignore (zensec.co.uk)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
445
3
NCSC Summary: week ending September 21st (ctoatncsc.substack.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
446
3
Threat Actor Profile: APT27 (www.dexpose.io)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
447
1
EarlyExceptionHandling: Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
448
2
Microsoft Vulnerable Driver Block Lists in CSV and JSON for SIEM lookups - Microsoft removed the list and started distributing them as JSON - this gets you back to where we were (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
449
1
raw-gadget: USB Raw Gadget — a low-level interface for the Linux USB Gadget subsystem (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
450
1
release-tampering-pocs: Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025 (github.com)
submitted 1 month ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›