blueteamsec

496 readers
11 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
[email protected]
listing: all - local
326
5
"Scamlexity": When Agentic AI Browsers Get Scammed (guard.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
327
5
CVE-2025–41688: Bypassing Restrictions in an OT Remote Access Device (medium.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
328
5
MCP vulnerability case study: SQL injection in the Postgres MCP server (securitylabs.datadoghq.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
329
4
MURKY PANDA: Trusted-Relationship Cloud Threat (www.crowdstrike.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
330
5
Microsoft Curbs Early Access for Chinese Firms to Notifications About Cybersecurity Flaws (archive.ph)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
331
5
Palm Coast Hacker Sentenced To 10 Years In Prison (www.justice.gov)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
332
5
Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025 (gfw.report)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
333
3
The Department of Energy’s Unclassified Cybersecurity Program – 2024 (www.oversight.gov)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
334
2
GroupPolicyBackdoor: Group Policy Objects manipulation and exploitation framework (github.com)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
335
1
UAC-0057 keeps applying pressure on Ukraine and Poland (harfanglab.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
336
1
APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuse (hunt.io)
submitted 3 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
337
6
Oregon man charged with administering “Rapper Bot” DDoS-for-hire Botnet (www.justice.gov)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
338
5
Conflicting Scores, Confusing Signals: An Empirical Study of Vulnerability Scoring Systems (arxiv.org)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
339
3
A Cereal Offender: Analyzing the CORNFLAKE.V3 Backdoor | Google Cloud Blog (cloud.google.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
340
5
Russian Government Cyber Actors Targeting Networking Devices, Critical Infrastructure (www.ic3.gov)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
341
2
Behind the Curtain: How Lumma Affiliates Operate (www.recordedfuture.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
342
3
QuirkyLoader - A new malware loader delivering infostealers and RATs (www.ibm.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
343
4
Cybercriminals Abuse AI Website Creation App For Phishing (www.proofpoint.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
344
1
Advance Security Solutions offer $20mil for SMS/MMS 0day, $15 mil for iOS chains etc. (advance-sec.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
345
3
How a Czech Supply Chain Feeds the Global Spyware Machine - VSquare.org (vsquare.org)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
346
5
Russian state-sponsored espionage group Static Tundra compromises unpatched end-of-life network devices (blog.talosintelligence.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
347
2
Guess Who Would Be Stupid Enough To Rob The Same Vault Twice? Pre-Auth RCE Chains in Commvault (labs.watchtowr.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
348
3
Elastic response to blog ‘EDR 0-Day Vulnerability’ (www.elastic.co)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
349
5
When Safe Links Become Unsafe: How Raven AI Caught Attackers Weaponizing Cisco's URL Rewriting (ravenmail.io)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
350
1
Noodlophile Stealer Evolves: Targeted Copyright Phishing Hits Enterprises with Social Media Footprints (www.morphisec.com)
submitted 4 weeks ago by [email protected] to c/[email protected]
0 comments fedilink
view more: ‹ prev next ›