blueteamsec

474 readers
12 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
1
3
CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)
submitted 3 days ago by [email protected] to c/[email protected]
0 comments fedilink
2
2
Breaking Boundaries - Kubernetes Namespaces and multi-tenancy (blog.amberwolf.com)
submitted 4 hours ago by [email protected] to c/[email protected]
0 comments fedilink
3
1
Sindoor Dropper: New Phishing Campaign (www.nextron-systems.com)
submitted 4 hours ago by [email protected] to c/[email protected]
0 comments fedilink
4
2
Three Lazarus RATs coming for your cheese (blog.fox-it.com)
submitted 5 hours ago by [email protected] to c/[email protected]
0 comments fedilink
5
4
Proposals to update the Telecommunications Security Code of Practice 2022 (www.gov.uk)
submitted 14 hours ago by [email protected] to c/[email protected]
0 comments fedilink
6
2
A Primer on Forensic Investigation of Salesforce Security Incidents (www.salesforce.com)
submitted 16 hours ago by [email protected] to c/[email protected]
1 comments fedilink
7
2
CHERI Myths: I don’t need CHERI if I have safe languages (cheriot.org)
submitted 16 hours ago by [email protected] to c/[email protected]
0 comments fedilink
8
2
CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)
submitted 17 hours ago by [email protected] to c/[email protected]
0 comments fedilink
9
3
Bypassing TLS Verification on Nintendo Switch (reversing.live)
submitted 1 day ago by [email protected] to c/[email protected]
0 comments fedilink
10
2
Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)
submitted 1 day ago by [email protected] to c/[email protected]
0 comments fedilink
11
6
Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
12
5
IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)
submitted 2 days ago by [email protected] to c/[email protected]
1 comments fedilink
13
11
Copilot Broke Your Audit Log, but Microsoft Won’t Tell You (pistachioapp.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
14
1
[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)
submitted 1 day ago by [email protected] to c/[email protected]
0 comments fedilink
15
8
Canary tokens: Learn all about the unsung heroes of security at Grafana Labs (grafana.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
16
5
Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
17
2
Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
18
2
Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
19
4
Release QUANTUMSTRAND beta 1 - designed to revolutionize how analysts interact with strings in binary files - qs focuses on providing deep context (github.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
20
4
Inside the Lab-Dookhtegan Hack: How Iranian Ships Lost Their Voice at Sea (blog.narimangharib.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
21
4
Security incident post-mortem - "resulted in $14 million in unauthorized withdrawals from 9 user accounts.this attack was perpetrated by UNC4899, a North Korean state-sponsored actor" (woox.io)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
22
7
Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 (doublepulsar.com)
submitted 3 days ago by [email protected] to c/[email protected]
0 comments fedilink
23
4
Uncovering Compromised Hosts using SSH Public Keys (www.usenix.org)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
24
8
WhatsApp - "could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability .. may have been exploited" (www.whatsapp.com)
submitted 3 days ago by [email protected] to c/[email protected]
0 comments fedilink
25
3
RtlHijack: Alternative Read and Write primitives using Rtl* functions the unintended way. (github.com)
submitted 2 days ago by [email protected] to c/[email protected]
0 comments fedilink
view more: next ›