blueteamsec

474 readers

15 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

[email protected]

1

3

CTO at NCSC Summary: week ending August 31st (ctoatncsc.substack.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

2

2

Rustで作成されたバイナリのリバースエンジニアリング調査レポートの公開 - Release of reverse engineering investigation report on binaries written in Rust (blogs.jpcert.or.jp)

submitted 2 hours ago by [email protected] to c/[email protected]

0 comments fedilink

3

2

Oracle WebLogic Vulnerability: CVE-2017-10271 - "multiple threat actors have continued to actively exploit this vulnerability in recent years, immediate remediation is strongly recommended" (s2w.inc)

submitted 2 hours ago by [email protected] to c/[email protected]

0 comments fedilink

4

1

How to Hunt Botnets with FOFA (mp.weixin.qq.com)

submitted 2 hours ago by [email protected] to c/[email protected]

0 comments fedilink

5

4

SAMLSmith: SAMLSmith is a C# tool for generating custom SAML responses and implementing Silver SAML and Golden SAML attacks. (github.com)

submitted 3 hours ago by [email protected] to c/[email protected]

0 comments fedilink

6

1

How I Hunted ESC1 in Raw AD CS Database (medium.com)

submitted 3 hours ago by [email protected] to c/[email protected]

0 comments fedilink

7

1

diffrays: DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering. (github.com)

submitted 3 hours ago by [email protected] to c/[email protected]

0 comments fedilink

8

2

The Digital Roads to Government Services: Uncovering Consolidation and Exposure (pulse.internetsociety.org)

submitted 9 hours ago by [email protected] to c/[email protected]

0 comments fedilink

9

2

Breaking Boundaries - Kubernetes Namespaces and multi-tenancy (blog.amberwolf.com)

submitted 13 hours ago by [email protected] to c/[email protected]

0 comments fedilink

10

2

Three Lazarus RATs coming for your cheese (blog.fox-it.com)

submitted 15 hours ago by [email protected] to c/[email protected]

0 comments fedilink

11

1

Sindoor Dropper: New Phishing Campaign (www.nextron-systems.com)

submitted 13 hours ago by [email protected] to c/[email protected]

0 comments fedilink

12

4

Proposals to update the Telecommunications Security Code of Practice 2022 (www.gov.uk)

submitted 23 hours ago by [email protected] to c/[email protected]

0 comments fedilink

13

2

A Primer on Forensic Investigation of Salesforce Security Incidents (www.salesforce.com)

submitted 1 day ago by [email protected] to c/[email protected]

1 comments fedilink

14

2

CHERI Myths: I don’t need CHERI if I have safe languages (cheriot.org)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

15

2

CWMP Stack Overflow in TP-Link Routers - getting pc like is it 1997 (medium.com)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

16

3

Bypassing TLS Verification on Nintendo Switch (reversing.live)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

17

2

Nederlandse providers doelwit van Salt Typhoon - Dutch providers targeted by Salt Typh (www.aivd.nl)

submitted 1 day ago by [email protected] to c/[email protected]

0 comments fedilink

18

6

Attackers Target Hotelier Accounts in Malvertising and Phishing Campaign (sec.okta.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

19

11

Copilot Broke Your Audit Log, but Microsoft Won’t Tell You (pistachioapp.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

20

5

IT infrastructure of the Ministry of the Interior hacked "targeted and professionally - Austria - unauthorized access to the BMI's mail servers occurred (www.derstandard.at)

submitted 2 days ago by [email protected] to c/[email protected]

1 comments fedilink

21

8

Canary tokens: Learn all about the unsung heroes of security at Grafana Labs (grafana.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

22

1

[2505.24008] HoneySat: A Network-based Satellite Honeypot Framework - "successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. " (arxiv.org)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

23

5

Integrating Code Insight into Reverse Engineering Workflows (blog.virustotal.com)

submitted 3 days ago by [email protected] to c/[email protected]

0 comments fedilink

24

2

Analysing Targeted Spearphishing: Social Engineering, Domain Rotation, and Credential Theft (stripeolt.com)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink

25

2

Communications Security Establishment Canada Annual Report 2024-2025 - Communications Security Establishment Canada (www.cse-cst.gc.ca)

submitted 2 days ago by [email protected] to c/[email protected]

0 comments fedilink