blueteamsec

542 readers

24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

451

release-tampering-pocs: Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec Europe 2025 (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

452

[0day] From Spotlight to Apple Intelligence (objective-see.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

453

Detecting enumeration in AWS (falconforce.nl)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

454

Potential Actor Token Abuse in Entra ID KQL (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

455

ShadowLeak: A Zero-Click, Service-Side Attack Exfiltrating Sensitive Data Using ChatGPT’s Deep Research Agent (www.radware.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

456

Using ASPM to Implement Application Runtime Security Observation in Large Securities Firms (mp.weixin.qq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

457

MPAF: Encrypted Traffic Classification With Multi-Phase Attribute Fingerprint (ieeexplore.ieee.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

458

FileFix in the wild! New FileFix campaign goes beyond POC and leverages steganography (www.acronis.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

459

More Fun With WMI (specterops.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

460

Keeping privacy when running queries: how to obfuscate your KQL results (www.michalos.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

461

疑似APT-C-00（海莲花）投递Havoc木马 - Suspected APT-C-00 (OceanLotus) delivering the Havoc Trojan (mp.weixin.qq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

462

Gamaredon X Turla collab (www.welivesecurity.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

463

Modus Operandi of Subtle Snail (catalyst.prodaft.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

464

Malicious Listener for Ivanti Endpoint Mobile Management Systems (www.cisa.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

465

DIGITAL FRONTLINES : INDIA UNDER MULTI-NATION HACKTIVIST ATTACK - CYFIRMA (www.cyfirma.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

466

obex: Obex – Blocking unwanted DLLs in user mode (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

467

United Kingdom National Charged in Connection with Multiple Cyber Attacks, Including on Critical Infrastructure (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

468

Teenagers charged over Transport for London cyber attack (www.bbc.co.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

469

External attack surface management (EASM) buyer's guide (www.ncsc.gov.uk)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

470

MySonicWall Cloud Backup File Incident (www.sonicwall.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

471

One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens (dirkjanm.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

472

VMScape: Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud Environments – Computer Security Group (comsec.ethz.ch)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

473

YASA-Engine: YASA is an open-source static program analysis project. Its core innovation lies in a unified intermediate representation called UAST, designed to support multiple programming languages. (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

474

Bi-Level Game-Theoretic Planning of Cyber Deception for Cognitive Arbitrage (arxiv.org)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

475

Dissecting DCOM partie 1 (www.synacktiv.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink