blueteamsec

496 readers
24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
51
4
Uncloaking VoidProxy: a Novel and Evasive Phishing-as-a-Service Framework (sec.okta.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
52
3
Encouraging New Thinking on Offensive Cyber Operations (www.rusi.org)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
53
3
Training Specialist Models: Automating Malware Development (infosec.pub)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://i.blackhat.com/BH-USA-25/Presentations/USA-25-Avery-Training-Specialist-Models-Automating-Malware-Development-V2.pdf

https://huggingface.co/spaces/outflanknl/Dante-7B-Demo

54
2
Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass (www.welivesecurity.com)
submitted 4 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
55
6
KittyLoader: KittyLoader is a highly evasive loader written in C / Assembly (github.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
56
6
Make Attackers Cry: Outsmart Them With Deception (www.fastly.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
57
10
Elections watchdog admits 'painful lessons learned' after Chinese hack (www.bbc.co.uk)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
58
4
Apple CarPlay Hacking Risks: CVE-2025-24132 Explained (www.oligo.security)
submitted 5 days ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
59
7
You Already Have Our Personal Data, Take Our Phone Calls Too (FreePBX CVE-2025-57819) (labs.watchtowr.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
60
7
Spyware installed on Kenyan filmmakers' phones in police custody - Committee to Protect Journalists (cpj.org)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
61
3
EggStreme Malware: Unpacking a New APT Framework Targeting a Philippine Military Company (www.bitdefender.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
62
4
Learn about ChillyHell, a modular Mac backdoor (www.jamf.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
63
3
Effective Versioning Strategies for Detection-as-Code (blog.nviso.eu)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
64
5
GPUGate Malware: Malicious GitHub Desktop Implants Use Hardware-Specific Decryption, Abuse Google Ads to Target Western Europe (arcticwolf.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
65
2
Securing Sideways: Thwarting Lateral Movement by Implementing Active Directory Tiering (papers.ssrn.com)
submitted 5 days ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
66
3
NPM debug and chalk compromise 09-2025 KQL (github.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
67
3
Mythical Beasts: Diving into the depths of the global spyware market (www.atlanticcouncil.org)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
68
2
Badsecrets Report: identifies the use of known or very weak cryptographic secrets across a variety of web frameworks/platforms. (www.shadowserver.org)
submitted 5 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
69
2
Frankenstein Variant of the ToneShell Backdoor Targeting Myanmar (intezer.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
70
2
Detecting Password-Spraying with a Honeypot Account (trustedsec.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
71
2
Unknown Malware Using Azure Functions as C2 (dmpdump.github.io)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
72
2
Sh3ller: Sh3ller is a lightweight C2 framework in its simplest form. (github.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
73
2
An Attacker’s Blunder Gave Us a Look Into Their Operations (www.huntress.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
74
2
r2con2025 October 24-25 (CFP Oct 14th) - 100% Online (rada.re)
submitted 6 days ago by Diluvian@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
75
2
“LockerGoga,” “MegaCortex,” and “Nefilim” Ransomware Administrator Charged with Ransomware Attacks (www.justice.gov)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: ‹ prev next ›