blueteamsec

477 readers
20 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
3
CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
9
‘Unrestrained’ Chinese Cyberattackers May Have Stolen Data From Almost Every American (www.nytimes.com)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
6
Contagious Interview | North Korean Threat Actors Reveal Plans and Ops by Abusing Cyber Intel Platforms (www.sentinelone.com)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
4
2
Leveraging Raw Disk Reads to Bypass EDR (medium.com)
submitted 4 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
1
auth0/auth0-customer-detections (github.com)
submitted 5 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
6
8
Not Safe for Work: Tracking and Investigating Stealerium and Phantom Infostealers (www.proofpoint.com)
submitted 17 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
6
ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690) (cloud.google.com)
submitted 17 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
8
6
TTP-Threat-Feeds: Threat feeds designed to extract adversarial TTPs and IOCs, using: ✨AI✨ (github.com)
submitted 17 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
6
Joint guidance on a shared vision of software bill of materials for cyber security - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 18 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
4
How to protect your cookies from theft (securelist.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
4
Investigating a Mysteriously Malformed Authenticode Signature (www.elastic.co)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
2
Fraction Loader: In-Memory Loader Project (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
2
Analyzing NotDoor: Inside APT28’s Expanding Arsenal (lab52.io)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
7
From bugs to bypasses: adapting vulnerability disclosure for AI safeguards (www.ncsc.gov.uk)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
7
The impact of the Salesloft Drift breach on Cloudflare and our customers (blog.cloudflare.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
16
5
Salesloft Drift Supply Chain Incident: Key Details and Zscaler’s (www.zscaler.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
8
Predators for Hire: A Global Overview of Commercial Surveillance Vendors (blog.sekoia.io)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
5
These FSB officers targeted U.S. critical infrastructure. (infosec.pub)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 
19
3
Android Droppers: The Silent Gatekeepers of Malware (www.threatfabric.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
20
4
Oracle WebLogic Vulnerability: CVE-2017-10271 - "multiple threat actors have continued to actively exploit this vulnerability in recent years, immediate remediation is strongly recommended" (s2w.inc)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
4
SAMLSmith: SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks. (github.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
22
2
Cyber kits keep allies in the hunt (www.defence.gov.au)
submitted 2 days ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
3
Rustで作成されたバイナリのリバースエンジニアリング調査レポートの公開 - Release of reverse engineering investigation report on binaries written in Rust (blogs.jpcert.or.jp)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
24
4
The Digital Roads to Government Services: Uncovering Consolidation and Exposure (pulse.internetsociety.org)
submitted 2 days ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
2
How to Hunt Botnets with FOFA (mp.weixin.qq.com)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›