▲ 2 r/blueteamsec
Inside Kimsuky’s CHM Tradecraft: Multi-Stage Execution and Selective Payload Delivery
blog.synapticsystems.deu/digicat — 9 hours ago
▲ 1 r/blueteamsec
GeoLocation_BOF: Cobalt Strike BOF to obtain location data
github.comu/digicat — 10 hours ago
▲ 1 r/blueteamsec
Hunting Sleeping Giants: Detecting Encrypted Beacon Sleep Obfuscation
justruss.techu/digicat — 18 hours ago
▲ 2 r/blueteamsec
Does anyone even use GitHub for federated authentication?
sapirxfed.comu/digicat — 18 hours ago
▲ 2 r/blueteamsec
Identity Crisis in Confidential Computing: Formal Analysis of Attested TLS
dl.acm.orgu/digicat — 20 hours ago
▲ 2 r/blueteamsec
Arrest of Iranian Hacker Spotlights Iran’s Movement into Economic Espionage and IP Theft
zetter-zeroday.comu/digicat — 1 day ago
▲ 2 r/blueteamsec
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
trendmicro.comu/digicat — 1 day ago
▲ 3 r/blueteamsec
Escalating from On-prem to Entra through MITM Attacks
securitylog.sva.deu/digicat — 1 day ago
▲ 2 r/blueteamsec
Nox: Modular Go framework for attack surface management, reconnaissance, and vulnerability scanning.
github.comu/digicat — 1 day ago
▲ 8 r/blueteamsec
Exploring cross-domain & cross-forest RBCD: part 2
synacktiv.comu/digicat — 1 day ago
▲ 10 r/blueteamsec
The Gentlemen are knocking: сustom backdoors and evolving tactics
securelist.comu/digicat — 2 days ago
▲ 5 r/blueteamsec
Knossos: Procedurally Generated Decoy Environments
praetorian.comu/digicat — 2 days ago
▲ 5 r/blueteamsec
Fake Google and Cloudflare verification pages spread multiple malware families
malwarebytes.comu/digicat — 2 days ago
▲ 3 r/blueteamsec
Boss Scam: Don't Trust Every "Urgent" Message from Your Boss! - "It runs in the background till it finds an active WhatsApp Web session in Chromium-based browsers such as Google Chrome and Microsoft Edge"
labs.k7computing.comu/digicat — 2 days ago
▲ 4 r/blueteamsec
PamStealer: a Rust-based macOS infostealer that validates credentials through PAM
jamf.comu/digicat — 2 days ago
▲ 3 r/blueteamsec
Armored Likho's new weapon: BusySnake Stealer - "tied to a previously unknown APT group that we dubbed Armored Likho (also known as Eagle Werewolf based on circumstantial evidence)"
securelist.comu/digicat — 2 days ago