blueteamsec

496 readers
11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
301
4
Operating Outside the Box: NTLM Relaying Low-Privilege HTTP Auth to LDAP (specterops.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
302
4
THOR: Secure Transformer Inference with Homomorphic Encryption (eprint.iacr.org)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
303
2
CTO at NCSC Summary: week ending August 24th (ctoatncsc.substack.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
304
3
Discovery in U.S. Spyware Litigation: A Double-Edged Sword? (www.justsecurity.org)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
305
4
Certifiably robust malware detectors by design (arxiv.org)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
306
3
A tag to rule them all: Using AWS tags to enumerate cloud resources (blog.pepperclipp.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
307
2
APT-C-08（蔓灵花）组织新载荷披露 - APT-C-08 (Crane Spirit Flower) Organization's New Payload Revealed (mp.weixin.qq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
308
2
StardustChollima/BlueNoroff盗取TG账号后发起ZoomClickFIX钓鱼 - StardustChollima/BlueNoroff stole TG accounts and launched ZoomClickFIX phishing attacks (mp.weixin.qq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
309
2
AzureStrike: An HTA Application which builds Azure (Entra) Scenarios for Red Team Simulations (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
310
2
rpc2wc: RPC to WebClient startup - "Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a PoC" (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
311
3
The Fragile Balance: Assumptions, Tuning, and Telemetry Limits In Detection Engineering (nasbench.medium.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
312
2
Silent Harvest: Extracting Windows Secrets Under the Radar (sud0ru.ghost.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
313
2
Hunting for Malware Networks (dti.domaintools.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
314
4
Slice: SAST + LLM Interprocedural Context Extractor (noperator.dev)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
315
4
phishurl-list: Phishing URL dataset from JPCERT/CC (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
316
3
Evolving Mule Tactics in the META Region (www.group-ib.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
317
4
When a SSRF is enough: Full Docker Escape on Windows Docker Desktop (CVE-2025-9074) - a reminder that Docker is not a security boundary (blog.qwertysecurity.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
318
4
AppLockerInspector: Audits an AppLocker policy XML and reports weak/misconfigured/risky settings, including actual ACL checks. (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
319
4
Detailed Analysis of Phrack’s APT Down: The North Korea Files (s2w.inc)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
320
4
Weaponizing image scaling against production AI systems (blog.trailofbits.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
321
4
Scam Farms Marque and Reprisal Authorization Act of 2025 - authorize the President to issue letters of marque and reprisal with respect to acts of aggression against the United States (www.congress.gov)
submitted 3 weeks ago by [email protected] to c/[email protected]
1 comments fedilink
322
5
"Scamlexity": When Agentic AI Browsers Get Scammed (guard.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
323
5
CVE-2025–41688: Bypassing Restrictions in an OT Remote Access Device (medium.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
324
5
MCP vulnerability case study: SQL injection in the Postgres MCP server (securitylabs.datadoghq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
325
4
MURKY PANDA: Trusted-Relationship Cloud Threat (www.crowdstrike.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
view more: ‹ prev next ›