blueteamsec

542 readers

24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

digicat

476

npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and More (safedep.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

477

Mapping the Infrastructure and Malware Ecosystem of MuddyWater (www.group-ib.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

478

Founder of One of World’s Largest Hacker Forums Resentenced to Three Years in Prison (www.justice.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

479

Europol lists Spanish head of Russian cyber terrorism network among its most wanted | Sur in English (www.surinenglish.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

480

BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes (gitlab-com.gitlab.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

481

Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware (blogs.infoblox.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

482

Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm | IBM (www.ibm.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

483

The Dangers of Storing Unencrypted Passwords (www.huntress.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

484

Autonomous Timeline Analysis and Threat Hunting | Black Hat USA talk (elie.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

485

Windows local privilege escalation through the bitpixie vulnerability (blog.syss.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

486

Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization – Computer Security Group (comsec.ethz.ch)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

487

hermes-dec: A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

488

APT28 Operation Phantom Net Voxel (blog.sekoia.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

489

Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels (www.proofpoint.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

490

Spyware industry pockets EU subsidies while snooping on its citizens (www.ftm.eu)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

491

A new RevengeHotels campaign targets Latin America (securelist.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

492

S1ngularity/nx attackers strike again - "since then an additional 147 packages have been infected with malware including packages from CrowdStrike." (www.aikido.dev)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

493

AWSDoor: Persistence on AWS (www.riskinsight-wavestone.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

494

fwd:cloudsec conference videos (youtube.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

495

Artificial Intelligence for Post-Exploitation | Cobalt Strike (www.cobaltstrike.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

496

The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU (blog.xlab.qianxin.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

497

Technical Analysis of SmokeLoader Version 2025 (www.zscaler.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

498

Introducing the AWS Infrastructure Canarytoken (blog.thinkst.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

499

CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning | Research - AI at Meta (ai.meta.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

500

Magecart Skimmer Analysis: From One Tweet to a Campaign (blog.himanshuanand.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink