blueteamsec

431 readers

20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

1

1

CTO at NCSC Summary: week ending August 3rd (ctoatncsc.substack.com)

submitted 4 days ago by digicat to c/blueteamsec

0 comments fedilink

2

1

Gen 7 SonicWall Firewalls – SSLVPN Recent Threat Activity (www.sonicwall.com)

submitted 18 minutes ago by digicat to c/blueteamsec

0 comments fedilink

3

1

US offers up to $10 million for information on Iranian cyber group (www.iranintl.com)

submitted 19 minutes ago by digicat to c/blueteamsec

0 comments fedilink

4

1

Оновлений інструментарій UAC-0099: MATCHBOIL, MATCHWOK, DRAGSTARE - Updated UAC-0099 toolkit: MATCHBOIL, MATCHWOK, DRAGSTARE (cert.gov.ua)

submitted 20 minutes ago by digicat to c/blueteamsec

0 comments fedilink

5

1

Lying in Wait: New Report Finds High-Risk Contributors Connected to Adversarial Nation-States in Open Source Software Ecosystems - Strider Intel (www.striderintel.com)

submitted 21 minutes ago by digicat to c/blueteamsec

0 comments fedilink

6

1

Project Ire autonomously identifies malware at scale - "The prototype, Project Ire, automates what is considered the gold standard in malware classification: fully reverse engineering a software file (www.microsoft.com)

submitted 24 minutes ago by digicat to c/blueteamsec

0 comments fedilink

7

3

paltergeist: Cyber deception with generative cloud-native traps (github.com)

submitted 10 hours ago by digicat to c/blueteamsec

0 comments fedilink

8

3

Nemesis 2.0 - "we focused on building the best possible file enrichment and triage platform for offensive operations." (specterops.io)

submitted 11 hours ago by digicat to c/blueteamsec

0 comments fedilink

9

3

Breaking NVIDIA Triton: CVE-2025-23319 - A Vulnerability Chain Leading to AI Server Takeover (www.wiz.io)

submitted 12 hours ago by digicat to c/blueteamsec

0 comments fedilink

10

2

elfspirit: ELF static analysis and injection framework that parse, manipulate, patch and camouflage ELF files. (github.com)

submitted 12 hours ago by digicat to c/blueteamsec

0 comments fedilink

11

6

Exorcism: The first open source runtime windows batch and command line deobfuscator (github.com)

submitted 17 hours ago by digicat to c/blueteamsec

0 comments fedilink

12

1

Tracking Candiru’s DevilsTongue Spyware in Multiple Countries (www.recordedfuture.com)

submitted 12 hours ago by digicat to c/blueteamsec

0 comments fedilink

13

4

Ghost in the Zip | New PXA Stealer and Its Telegram-Powered Ecosystem (www.sentinelone.com)

submitted 17 hours ago by digicat to c/blueteamsec

0 comments fedilink

14

1

Demystifying threat intelligence in digital advertising - includes their own pyramid of pain (www.tagtoday.net)

submitted 13 hours ago by digicat to c/blueteamsec

0 comments fedilink

15

3

From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira (thedfirreport.com)

submitted 17 hours ago by digicat to c/blueteamsec

0 comments fedilink

16

2

Perplexity is using stealth, undeclared crawlers to evade website no-crawl directives (blog.cloudflare.com)

submitted 19 hours ago by digicat to c/blueteamsec

0 comments fedilink

17

2

BSides Las Vegas - live streams - Mon, Tue and Wed (youtube.com)

submitted 20 hours ago by digicat to c/blueteamsec

0 comments fedilink

18

2

EntraGoat - A Deliberately Vulnerable Entra ID Environment (github.com)

submitted 21 hours ago by digicat to c/blueteamsec

0 comments fedilink

19

1

IOCTL_VOLSNAP_DELETE_SNAPSHOT: Querying And Deleting Shadow Copies Using The IOCTL_VOLSNAP_QUERY_NAMES_OF_SNAPSHOTS & IOCTL_VOLSNAP_DELETE_SNAPSHOT IOCTLs (github.com)

submitted 19 hours ago by digicat to c/blueteamsec

0 comments fedilink

20

1

SQUID-2025:1 Buffer Overflow in URN Handling (github.com)

submitted 20 hours ago by digicat to c/blueteamsec

0 comments fedilink

21

2

Protecting the Evidence in Real-Time with KQL Queries - "monitoring for attempts to modify the corresponding registry keys can help us generate early alerts and detect potential tampering." (detect.fyi)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

22

2

Investigating Suspicious Memory Activity: Tracing a SIEM Alert to a Cobalt Strike C2 (daniyyell.com)

submitted 23 hours ago by digicat to c/blueteamsec

0 comments fedilink

23

1

Quantum networking technologies - "we provide an updated analysis of QKD as a security technology, and the development of QRNGs. We also consider the future of quantum networking technologies." (www.ncsc.gov.uk)

submitted 20 hours ago by digicat to c/blueteamsec

0 comments fedilink

24

2

White Paper for Cyberspace Mapping Techniques - from China (www.webray.com.cn)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink

25

2

The Discriminative Power of Cross-layer RTTs in Fingerprinting Proxy Traffic - NDSS Symposium (www.ndss-symposium.org)

submitted 1 day ago by digicat to c/blueteamsec

0 comments fedilink