blueteamsec

474 readers

15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

[email protected]

76

3

One Step Ahead: Stark Industries Solutions Preempts EU Sanctions (www.recordedfuture.com)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

77

3

UK and allies expose China-based technology companies for enabling global cyber campaign against critical networks (www.ncsc.gov.uk)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

78

0

PoolFlip: A Multi-Agent Reinforcement Learning Security Environment for Cyber Defense (arxiv.org)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

79

2

Treasury Sanctions Fraud Network Funding DPRK Weapons Programs (home.treasury.gov)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

80

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

81

2

Managing cryptographic keys and secrets (www.cyber.gov.au)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

82

4

Widespread Data Theft Targets Salesforce Instances via Salesloft Drift | Google Cloud Blog (cloud.google.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

83

4

Multiple vulnerabilities have been discovered in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway). (support.citrix.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

84

4

AI-powered ransomware named PromptLock - uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts on the fly (threadreaderapp.com)

submitted 6 days ago by [email protected] to c/[email protected]

1 comments fedilink

85

2

Dubai, Crypto, Moonstone Sleet, and the Pivot Odyssey | Chollima Group (chollima-group.io)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

86

4

Automating Detection Documentation and Changelog Generation (blog.nviso.eu)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

87

3

TAG-144’s Persistent Grip on South American Organizations (www.recordedfuture.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

88

3

Zip Slip: 압축 해제 과정에서 발생하는 Path Traversal 취약점 - Zip Slip: Path Traversal Vulnerability Occurring During the Decompression Process (asec.ahnlab.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

89

1

U.S.-ROK-Japan Joint Statement on DPRK Information Technology Workers - United States Department of State (www.state.gov)

submitted 5 days ago by [email protected] to c/[email protected]

0 comments fedilink

90

3

MSIXBuilder: MSIX Building Made Easy for Defenders (github.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

91

3

ZipLine Phishing Campaign Targets U.S. Manufacturing (research.checkpoint.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

92

3

Belarus-Linked DSLRoot Proxy Network Deploys Hardware in U.S. Residences, Including Military Homes (infrawatch.app)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

93

3

ScreenConnect Super Admin Credential Phishing Campaign Targets IT Leaders (www.mimecast.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

94

3

PRC-Nexus Espionage Campaign Hijacks Web Traffic to Target Diplomats (cloud.google.com)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

95

2

Inline Style Exfiltration: leaking data with chained CSS conditionals (portswigger.net)

submitted 6 days ago by [email protected] to c/[email protected]

0 comments fedilink

96

5

Detecting ManualFinder/PDF Editor Malware Campaign with KQL (www.lindensec.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

97

3

Exploring Microsoft Sentinel: Deploying a SOC Lab for Threat Hunting. (vedanttapdiya.medium.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

98

3

LLM4Binary (LLM4Binary) - Reverse Engineering: Decompiling Binary Code with Large Language Models - model continues to be updated latest was June, 2025 which was 6.7b v1.6 - a 6.7 billion-parameter (huggingface.co)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

https://github.com/albertan017/LLM4Decompile

99

3

Chrome-App-Bound-Encryption-Decryption: Fully decrypt App-Bound Encrypted (ABE) cookies, passwords & payment methods from Chromium-based browsers (Chrome, Brave, Edge) - all in user mode, no admin (github.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink

100

5

Raising security with organization-wide YubiKey (FIDO2) in Entra ID (www.huntandhackett.com)

submitted 1 week ago by [email protected] to c/[email protected]

0 comments fedilink