blueteamsec

496 readers

25 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending September 14th.. (ctoatncsc.substack.com)

submitted 4 days ago by digicat to c/blueteamsec

0 comments fedilink

2

7

Founder of One of World’s Largest Hacker Forums Resentenced to Three Years in Prison (www.justice.gov)

submitted 10 hours ago by digicat to c/blueteamsec

0 comments fedilink

3

3

Hive0154, aka Mustang Panda, drops updated Toneshell backdoor and novel SnakeDisk USB worm | IBM (www.ibm.com)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

4

2

Vane Viper: Russia–Cyprus AdTech Nexus Delivering Malware (blogs.infoblox.com)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

5

1

Europol lists Spanish head of Russian cyber terrorism network among its most wanted | Sur in English (www.surinenglish.com)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

6

1

BeaverTail variant distributed via malicious repositories and ClickFix lure - GitLab Security Tech Notes (gitlab-com.gitlab.io)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

7

14

Spyware industry pockets EU subsidies while snooping on its citizens (www.ftm.eu)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

2

The Dangers of Storing Unencrypted Passwords (www.huntress.com)

submitted 19 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

2

Phoenix: Rowhammer Attacks on DDR5 with Self-Correcting Synchronization – Computer Security Group (comsec.ethz.ch)

submitted 22 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

2

hermes-dec: A reverse engineering tool for decompiling and disassembling the React Native Hermes bytecode (github.com)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

1

Autonomous Timeline Analysis and Threat Hunting | Black Hat USA talk (elie.net)

submitted 20 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

5

S1ngularity/nx attackers strike again - "since then an additional 147 packages have been infected with malware including packages from CrowdStrike." (www.aikido.dev)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

13

1

Windows local privilege escalation through the bitpixie vulnerability (blog.syss.com)

submitted 21 hours ago by digicat to c/blueteamsec

0 comments fedilink

14

1

APT28 Operation Phantom Net Voxel (blog.sekoia.io)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

15

1

Going Underground: China-aligned TA415 Conducts U.S.-China Economic Relations Targeting Using VS Code Remote Tunnels (www.proofpoint.com)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

16

1

A new RevengeHotels campaign targets Latin America (securelist.com)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

17

6

The Most Powerful Ever? Inside the 11.5Tbps-Scale Mega Botnet AISURU (blog.xlab.qianxin.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

18

2

AWSDoor: Persistence on AWS (www.riskinsight-wavestone.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

19

2

fwd:cloudsec conference videos (youtube.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

20

2

Artificial Intelligence for Post-Exploitation | Cobalt Strike (www.cobaltstrike.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

21

2

Technical Analysis of SmokeLoader Version 2025 (www.zscaler.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

22

2

Introducing the AWS Infrastructure Canarytoken (blog.thinkst.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

23

2

CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning | Research - AI at Meta (ai.meta.com)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

24

3

Magecart Skimmer Analysis: From One Tweet to a Campaign (blog.himanshuanand.com)

submitted 2 days ago by digicat to c/blueteamsec

0 comments fedilink

25

5

raw-disk-parser: A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs (github.com)

submitted 2 days ago by digicat to c/blueteamsec

1 comments fedilink