blueteamsec

540 readers
15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
151
1
OtterCandy, malware used by WaterPlum | セキュリティナレッジ | NTTセキュリティ・ジャパン株式会社 (jp.security.ntt)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
152
2
New Group on the Block: UNC5142 Leverages EtherHiding to Distribute Malware | Google Cloud Blog (cloud.google.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
153
2
DPRK Adopts EtherHiding: Nation-State Malware Hiding on Blockchains | Google Cloud Blog (cloud.google.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
154
4
Training Solo - the first systematic analysis of self-training Spectre-v2 attacks that break the core assumption behind domain isolation—even when implemented perfectly. (www.vusec.net)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
155
2
yIKEs (WatchGuard Fireware OS IKEv2 Out-of-Bounds Write CVE-2025-9242) (labs.watchtowr.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
156
4
StealthServer: A Dual-Platform Backdoor from a South Asian APT Group (blog.xlab.qianxin.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
157
3
Operation Silk Lure: Scheduled Tasks Weaponized for DLL Side-Loading (drops ValleyRAT) (www.seqrite.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
158
2
Mysterious Elephant APT: TTPs and tools (securelist.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
159
12
How I Almost Got Hacked By A 'Job Interview' (blog.daviddodda.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
160
3
Unknown hackers have been confirmed to have accessed the Onnara administrative network without authorization and accessed data (www.nis.go.kr:4016)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
161
0
TigerJack's Extensions Continue to Rob Developers Blind Across Different Marketplaces (www.koi.ai)
submitted 2 weeks ago by digicat to c/blueteamsec
2 comments fedilink
162
5
SecRL: Benchmarking LLM agents on Cyber Threat Investigation. (github.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
163
5
Chinese Hackers Blamed for Severe Breach at US Cyber Firm F5 (archive.ph)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
164
1
Windows ARM64 Internals: Deconstructing Pointer Authentication (www.preludesecurity.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
165
2
Supply Chain Risk in VSCode Extension Marketplaces (www.wiz.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
166
2
Threat Hunting Methodology: F5 Security Incident (K000154696) (medium.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
167
4
Operation Zero Disco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits (www.trendmicro.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
168
1
LOLMIL: Living Off the Land Models and Inference Libraries (dreadnode.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
169
2
NightMARE on 0xelm Street, a guided tour — Elastic Security Labs (www.elastic.co)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
170
0
GhostBat RAT: Inside The Resurgence Of RTO-Themed Android Malware (cyble.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
171
4
Singularity: Deep Dive into a Modern Stealth Linux Kernel Rootkit (blog.kyntra.io)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
172
7
BombShell: The Signed Backdoor Hiding in Plain Sight on Framework Devices (eclypsium.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
173
3
K000154696: F5 Security Incident (my.f5.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
174
2
Jewelbug: Chinese APT Group Widens Reach to Russia (www.security.com)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
175
4
F5 breach SEC disclosure (www.sec.gov)
submitted 2 weeks ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›