blueteamsec

474 readers

14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

[email protected]

1

3

CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

2

2

The Digital Roads to Government Services: Uncovering Consolidation and Exposure (pulse.internetsociety.org)

submitted 5 hours ago by [email protected] to c/[email protected]

0 comments fedilink

3

2

Breaking Boundaries - Kubernetes Namespaces and multi-tenancy (blog.amberwolf.com)

submitted 9 hours ago by [email protected] to c/[email protected]

0 comments fedilink

4

2

Three Lazarus RATs coming for your cheese (blog.fox-it.com)

submitted 11 hours ago by [email protected] to c/[email protected]

0 comments fedilink

5

1

Sindoor Dropper: New Phishing Campaign (www.nextron-systems.com)

submitted 9 hours ago by [email protected] to c/[email protected]

0 comments fedilink

6

4

Proposals to update the Telecommunications Security Code of Practice 2022 (www.gov.uk)

submitted 19 hours ago by [email protected] to c/[email protected]

0 comments fedilink

7

2

A Primer on Forensic Investigation of Salesforce Security Incidents (www.salesforce.com)

submitted 22 hours ago by [email protected] to c/[email protected]

1 comments fedilink

8

2

CHERI Myths: I don’t need CHERI if I have safe languages (cheriot.org)

submitted 22 hours ago by [email protected] to c/[email protected]

0 comments fedilink

9

2

CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)

submitted 22 hours ago by [email protected] to c/[email protected]

0 comments fedilink

10

3

Bypassing TLS Verification on Nintendo Switch (reversing.live)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

11

2

Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

12

6

Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

13

5

IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)

submitted 2 days ago by [email protected] to c/[email protected]

1 comments fedilink

14

11

Copilot Broke Your Audit Log, but Microsoft Won’t Tell You (pistachioapp.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

15

1

[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

16

8

Canary tokens: Learn all about the unsung heroes of security at Grafana Labs (grafana.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

17

5

Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

18

2

Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

19

2

Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

20

4

Release QUANTUMSTRAND beta 1 - designed to revolutionize how analysts interact with strings in binary files - qs focuses on providing deep context (github.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

21

4

Inside the Lab-Dookhtegan Hack: How Iranian Ships Lost Their Voice at Sea (blog.narimangharib.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

22

4

Security incident post-mortem - "resulted in $14 million in unauthorized withdrawals from 9 user accounts.this attack was perpetrated by UNC4899, a North Korean state-sponsored actor" (woox.io)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

23

7

Citrix forgot to tell you CVE-2025–6543 has been used as a zero day since May 2025 (doublepulsar.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

24

8

WhatsApp - "could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability .. may have been exploited" (www.whatsapp.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

25

4

Uncovering Compromised Hosts using SSH Public Keys (www.usenix.org)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink