blueteamsec

477 readers
14 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
201
5
When Safe Links Become Unsafe: How Raven AI Caught Attackers Weaponizing Cisco's URL Rewriting (ravenmail.io)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
202
1
Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises with Social Media Footprints (www.morphisec.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
203
1
Detailed Analysis of the Stealer-Traffer Ecosystem (medium.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
204
3
Patching for persistence: How DripDropper Linux malware moves through the cloud - " an adversary exploiting CVE-2023-46604 in Apache ActiveMQ to gain persistent access on cloud Linux systems" (redcanary.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
205
1
pyghidra-mcp: Headless Ghidra MCP Server for Project-Wide, Multi-Binary Analysis (clearbluejar.github.io)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
206
1
APT: Android, Phishing, microsoft (strikeready.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
207
2
SpeechRuntimeMove: Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
208
3
The Coordinated Embassy Hunt: Unmasking the DPRK-linked GitHub C2 Espionage Campaign (www.trellix.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
209
4
BlockEDRTraffic: Two tools written in C that block network traffic for blacklisted EDR processes, using either Windows Defender Firewall (WDF) or Windows Filtering Platform (WFP). (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
210
3
Deep dive into CVE-2025-29824 in Windows (bi.zone)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
211
12
Serial hacker who defaced official websites is sentenced (www.nationalcrimeagency.gov.uk)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
212
4
Escaping the Matrix: Client-Side Deanonymization Attacks on Privacy Sandbox APIs (spaceraccoon.dev)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
213
2
Hijacking multi-agent systems in your PajaMAS (blog.trailofbits.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
214
2
Dissecting PipeMagic: Inside the architecture of a modular backdoor framework (www.microsoft.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
215
0
LLMs vs. Geolocation: GPT-5 performs worse than other AI models - bellingcat (www.bellingcat.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
216
2
PipeMagic in 2025: How the backdoor operators’ tactics have changed (securelist.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
217
2
spearspray: Enhance Your Active Directory Password Spraying with User Intelligence. (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
218
5
DllShimmer: Weaponize DLL hijacking easily. Backdoor any function in any DLL. (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
219
3
sauron: Fast context enumeration for newly obtained Active Directory credentials. (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
220
3
dumping_lsass: The different ways to dump LSASS (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
221
7
Cisco Security Advisory: Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability (sec.cloudapps.cisco.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
222
5
Protecting You From Social Engineering Campaigns: An Update From Workday (blog.workday.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
223
4
hexstrike-ai: HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, etc. (github.com)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
224
4
ECC.fail - Mounting Rowhammer Attacks on DDR4 Servers with ECC Memory (ecc.fail)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
225
2
Hidden Links: Analyzing Secret Families of VPN Apps - The Citizen Lab (citizenlab.ca)
submitted 2 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
view more: ‹ prev next ›