blueteamsec

431 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

151

3

GOLD BLADE remote DLL sideloading attack deploys RedLoader (news.sophos.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

152

5

Spear Phishing Campaign Delivers VIP Keylogger via Email Attachment - AutoIt script is utilized to deliver and execute the malicious payload. (www.seqrite.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

153

4

Telemetry and Privacy Analysis of Trae IDE: A Deep Dive into ByteDance's VSCode Fork (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

154

2

Auto-Color Backdoor: the threat actor had exploited CVE-2025-31324 - Over the course of three days, a threat actor gained access to the customer’s network, attempted to download suspicious files (www.darktrace.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

155

4

RansomFS: an example of using canary files and directories, chained with different threshold engines to map a PID to its malicious behaviour and trigger a response when this threshold is breached. (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

156

3

Privacy Enhancing Technologies Symposium videos (youtube.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

157

2

Mistwalker: Create Entra Global Admin accounts from On-Prem (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

158

2

PENGUIN (Personalized EmulatioN Generated Using Instrumented Analysis) takes a target centric approach to rehosting using a precise and tailored specification of the rehosting process (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

159

12

Critical Vulnerability in AI Vibe Coding platform Base44 Allowing Unauthorized Access to Private Applications (www.wiz.io)

submitted 1 week ago by digicat to c/blueteamsec

3 comments fedilink

160

2

Revisiting UNC3886 Tactics to Defend Against Present Risk - an APT group that has historically targeted including telco, gov tech and defense, with a recent attack against Singapore (www.trendmicro.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

161

4

PyPI Users Email Phishing Attack - The Python Package Index Blog (blog.pypi.org)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

162

5

Governor Walz Activates Minnesota National Guard Following Saint Paul Cyberattack (mn.gov)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

163

2

Consumer Beware! Exploring Data Brokers' CCPA Compliance (arxiv.org)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

164

2

Important Security Update - "statement to inform you of an isolated security incident involving a malware-infected version of our Configuration Tool for the OP1w 4k v2 mouse." (www.endgamegear.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

165

3

United States files a civil complaint in the Northern District of Texas seeking the forfeiture of over $1.7 million worth of cryptocurrency seized by Dallas FBI (www.justice.gov)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

166

4

MSSQLHound: PowerShell collector for adding MSSQL attack paths to BloodHound with OpenGraph (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

167

6

Is AWS Recycling your Access Keys? (www.hunters.security)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

168

4

Rooting the TP-Link Tapo C200 Rev.5 (quentinkaiser.be)

submitted 1 week ago by digicat to c/blueteamsec

1 comments fedilink

169

1

AntiDebug: Windows anti-debugging sandbox (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

170

1

Cyber Deception: State of the art, Trends and Open challenges (arxiv.org)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

171

6

theProtector: Linux Bash Script for the Paranoid Admin on a Budget - real-time monitoring and active threat response (github.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

172

1

An important update (and apology) on our PoisonSeed blog (expel.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

173

0

NachoVPN: Now With More VPN (And SYSTEM Shells) - Part 1 (blog.amberwolf.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink

174

3

obfus.h: Macro-header for compile-time C obfuscation (tcc, win x86/x64) (github.com)

submitted 1 week ago by digicat to c/blueteamsec

1 comments fedilink

175

1

Under the Hood of AFD.sys Part 1: Investigating Undocumented Interfaces - "NtCreateFile to craft a raw TCP socket via AFD.sys on Windows 11, completely skipping Winsock" (leftarcode.com)

submitted 1 week ago by digicat to c/blueteamsec

0 comments fedilink