blueteamsec

790 readers

1 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 3 years ago

MODERATORS

digicat@infosec.pub

1

1

CTO at NCSC Summary: week ending August 30th (ctoatncsc.substack.com)

submitted 3 days ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

2

1

Daily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of posts (briefing.workshop1.net)

submitted 5 months ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

3

0

SuperProxy: How Residential Proxy Networks Have Become Malware Delivery Platforms (www.plume.com)

submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

4

0

Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode (research.checkpoint.com)

submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

5

0

FBI investigation leads to five Venezuelan nationals pleading guilty to attempting to jackpot Kansas ATMs (www.justice.gov)

submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

6

0

Update on Security at METR (metr.org)

submitted 10 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

7

1

Malicious Packages Served from Unauthorized Registry Server - An unidentified malicious actor gained access to Coder’s Cloudflare infrastructure and added unauthorized IP addresses to the pool (infosec.pub)

submitted 19 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

8

1

The August 2026 Virtualizor Incident in BGPHorizon (bgphorizon.com)

submitted 20 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

9

1

Mirage Kitten switches to Node.js and JavaScript malware (securelist.com)

submitted 21 hours ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

10

1

Enclave: We Raced Seven AI Models to RCE (enclave.ai)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

11

1

vhf-morse-transmitter-monitor: Set radio to 148.500 MHz, selct FM, USB, or CW, set squelch to 0 or 1. xtend your radio's antenna toward monitor's HDMI - now transmit in Morse code from your monitor! (github.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

12

1

Good news about the Pixel 11. It still has at least bare minimum support for MTE at a hardware level - but disabled in Android firmware (x.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

13

1

Out-of-tree Linux driver stack and boot tooling for the Cavium CN6640-SNIC10E (Octeon II, PCI 177d:0092), exposing as two independent 10 GbE interfaces (oct0/oct1) over a BAR2 shared-memory datapath (github.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

14

1

Qualcomm BootROM code signing bypass CVE-2026-25262 - needs hardware replacements (i.blackhat.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

15

1

Improving our alignment and security practices - 'By default, all cyber evaluations should run inside a hardened sandbox (an isolated computing environment) with no internet access' (www.anthropic.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

16

1

I Think the Military Commissary Freezers Were Hacked - 'the Pentagon now acknowledging a “possible refrigeration disruption” at numerous DeCA commissaries.' (signalandsilence.substack.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

1 comments fedilink

17

1

OEMpocalypse Now: A Generic Exploitation Strategy from Android untrusted app to root (calif.io)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

18

1

Still Circling: Inside the Operator Behind Blind Eagle's GitHub Loader (www.levelblue.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

19

1

JavaScript obfuscation: From party trick to phishing kit (blog.talosintelligence.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

20

1

Fire Ant Evolves: From Hypervisors to Trusted Infrastructure (www.sygnia.co)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

21

1

ValleyRAT is spreading disguised as adware (securelist.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

22

1

Everything I own, owned (schlarp.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

23

1

Russian-speaking cybercriminals used SpaceX’s Cursor AI tool to hack seven companies (www.reuters.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

24

1

Caught in 4K: The Aurora Files (www.cloudsek.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink

25

1

Virtualizor Compromised (31st AUG): Virtualizor has been compromised, their BGP hijack a few days ago seems to have a deployed a malicious package. (lowendtalk.com)

submitted 1 day ago by digicat@infosec.pub to c/blueteamsec@infosec.pub

0 comments fedilink