blueteamsec

441 readers
28 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
1
CTO at NCSC Summary: week ending August 10th (ctoatncsc.substack.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
4
finch: Fingerprint-aware TLS reverse proxy. Use Finch to outsmart bad traffic—collect client fingerprints (JA3, JA4 +QUIC, JA4H, HTTP/2) and act on them (github.com)
submitted 3 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
3
Efimer Trojan delivered via email and hacked WordPress websites (securelist.com)
submitted 4 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
4
9
Breaking Into Your Network? Zer0 Effort. - DEF CON 33 Overview - research campaign investigating the security of Zero Trust Network Access solutions (blog.amberwolf.com)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
4
Vulnerability Management Program - How to implement SLA and its processes (securityautopsy.com)
submitted 18 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
6
2
EPSS Pulse from RunZero - identify big shifts in EPSS (www.runzero.com)
submitted 18 hours ago by harry@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
7
Custom firmware for sale for Flipper zero - "1995.- USD - support for Peugeot/Citroen/Volkswagen and new Ford models" (www.ifoedit.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
2 comments fedilink
8
6
awswaf: AWS WAF Solver, full reverse implemented in 100% Python & Golang. (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
3
Noise-Coded Illumination for Forensic and Photometric Video Analysis (dl.acm.org)
submitted 22 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
4
"From Bitmaps to Payloads" We dissected a stego-heavy .NET loader embedding BMP headers inside images to drop payloads via CVE-2017-11882. (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
5
CastleLoader: a versatile malware loader, has infected 469 devices since May 2025, leveraging Cloudflare-themed ClickFix phishing and fake GitHub repositories to deliver information stealers and RATs (blog.polyswarm.io)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
5
Leak Reveals the Workaday Lives of North Korean IT Scammers (www.wired.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
3
pompelmi: Lightweight file upload scanner with optional YARA rules. Works out‑of‑the‑box on Node.js; supports browser via a simple HTTP “remote engine”. (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
3
WinRAR 7.13 Final released - "Another directory traversal vulnerability, differing from that in WinRAR 7.12, has been fixed." (infosec.pub)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
1
Buttercup is now open-source - Buttercup is a fully automated, AI-driven system for discovering and patching vulnerabilities in open-source software. (blog.trailofbits.com)
submitted 21 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
16
2
Internet Organised Crime Threat Assessment (IOCTA) – Strategic, policy and tactical updates on the fight against cybercrime | Europol (www.europol.europa.eu)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
2
Unmasking the SVG Threat: How Hackers Use Vector Graphics for Phishing Attacks (www.seqrite.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
2
Final Competition Winners Announcement - AI Cyber Challenge - "competitors’ systems discovered 54 unique synthetic vulnerabilities in the Final Competition’s 70 challenges. Of those, they patched 43." (aicyberchallenge.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
19
10
ICE Washington, D.C. leads international takedown of BlackSuit ransomware infrastructure (www.ice.gov)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
4 comments fedilink
20
1
mac_apt - macOS (and iOS) Artifact Parsing Tool - v1.26.1 - "now supports processing Velociraptor collections" (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
1
Dissecting the CastleBot Malware-as-a-Service operation (www.ibm.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
22
1
BeaconatorC2: BeaconatorC2 is a framework for red teaming and adversarial emulation, providing a full-featured management interface, along with a catalog of beacons (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
1
From Phishing Sites to SilverFox: A Practical Infrastructure Expansion Analysis (medium.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
24
1
Weaponization of religious symbols, Mimo gang exploits Microsoft SharePoint RCE vulnerability to deliver 4L4MD4r ransomware (ti.qianxin.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
1
APT-C-09（摩诃草）组织基于Mythic C2框架的新型攻击样本分析 - Analysis of new attack samples from the APT-C-09 (Maha Grass) organization based on the Mythic C2 framework (mp.weixin.qq.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›