blueteamsec

578 readers
23 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
1
2
CTO at NCSC Summary: week ending December 21st - nearly Christmas edition ❄️🎄🎅🤶🎄❄️ (ctoatncsc.substack.com)
submitted 6 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
2
2
HP Aruba Privileged Escalation Dec 2025 (thecontractor.io)
submitted 7 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
3
6
Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations (socket.dev)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
4
6
CVE-2025-14847 - MongoDB Unauthenticated Memory Leak Exploit - A proof-of-concept exploit for the MongoDB zlib decompression vulnerability that allows unauthenticated attackers to leak sensitive serve (github.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
5
5
Reviving Discarded Vulnerabilities: Exploiting Previously Unexploitable Linux Kernel Bugs Through Control Metadata Fields (lujie.ac.cn)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
6
5
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs (github.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
7
5
CPLDCOMTrigger: CPL remote trigger - A Python script depends on Impacket scripts to trigger the loading of a .cpl file into memory using a DCOM object. (github.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
8
4
TRM Traces Stolen Crypto from 2022 LastPass Breach — On-chain Indicators Suggest Russian Cybercriminal Involvement (www.trmlabs.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
9
3
Continuously hardening ChatGPT Atlas against prompt injection attacks - "However, prompt injection remains an open challenge for agent security, and one we expect to continue working on for years" (openai.com)
submitted 15 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
10
3
Ransomware cyber attack on Romanian Waters (www.dnsc.ro)
submitted 15 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
11
3
Mapping “Fly”, a threat actor with links to Russian Market’s infrastructure (www.intrinsec.com)
submitted 15 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
12
3
Annual Report to Congress: Military and Security Developments Involving the People's Republic of China 2025 - "Throughout 2024, PLA cyber actors almost certainly maintained and developed further" (media.defense.gov)
submitted 15 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
13
3
EmEditor 供应链事件细节披露：分发窃密特马席卷国内政企 - Details of the EmEditor supply chain incident revealed: Distribution of stolen MITBBS tokens sweeps across domestic government and enterprises. (mp.weixin.qq.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
14
2
PCIe IDE Standard Vulnerabilities - Potential security vulnerabilities were found to be affecting PCIe Base Specification Revision 5.0 and onwards in a protocol mechanism (pcisig.com)
submitted 16 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
15
8
Justice Department Announces Seizure of Stolen-Password Database Used in Bank Account Takeover Fraud (www.justice.gov)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
16
9
DumpChromeSecrets: Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and bookmarks (github.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
17
4
Cybersecurity Staff Plead Guilty for Moonlighting as Hackers (www.bloomberg.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
18
3
Product Security Advisory and Analysis: Observed Abuse of FG-IR-19-283 | Fortinet Blog (www.fortinet.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
1 comments fedilink
19
3
New Cloud Atlas APT campaign (securelist.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
20
3
Evasive Panda APT campaign overview (securelist.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
21
4
Living on the Edge: Evicting threat actors from perimeter appliances (www.youtube.com)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

https://bsidesfrankfurt.org/files/SECUINFRA-BSidesFRA25-Publish.pdf

22
4
Mapping Deception with BloodHound OpenGraph (specterops.io)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
23
4
Merry Christmas Blueteamsec ❄️🎄🎅🤶🎄❄️ (infosec.pub)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
 
 

Annual thanks to everyone who reads and contributes here. Without you this community would not be what it is..

Cyber defence is a team sport.

Have a lovely one..

24
3
Oplichter aangehouden die met behulp van deepfake tientallen bankrekeningen opende en misbruikte -Fraudster arrested who used deepfake to open and misuse dozens of bank accounts (www.politie.nl)
submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
25
4
574 arrests and USD 3 million recovered in coordinated cybercrime operation across Africa (www.interpol.int)
submitted 2 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
view more: next ›