News · r/blueteamsec

• r/blueteamsec 17 Oct

  Public Security Disclosure: Verified Vulnerabilities in Cline Extension

  r/blueteamsec · medium.com
• r/blueteamsec 17 Oct

  AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets

  r/blueteamsec · web.archive.org
• 
  r/blueteamsec 17 Oct

  The High-Risk Domains of Agent Skills and Where They Lead

  r/blueteamsec · manifold.security
• r/blueteamsec 17 Oct

  Contextual Threat Modeler (CTM)

  A lot of Improvement has been done
• 
  r/blueteamsec 16 Oct

  GitHub - pennacle-security/summit: Open-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.

  r/blueteamsec · github.com
• r/blueteamsec 16 Oct

  LetsDefend vs TryHackMe SAL1 vs HTB CDSA — Which is best for getting a SOC job?

  Hi everyone, I'm a cybersecurity engineering student with a foundation in networking and cybersecurity, looking to land my first SOC internship or junior analyst job. Which would you recommend for practical, job-ready skills: LetsDefend, TryHackMe SOC Level 1/SAL1, or HTB SOC Analyst/CDSA? Which offers the most realistic hands-on experience, and which is most valuable to employers? I'm looking fo…
• r/blueteamsec 16 Oct

  I built a free browser-based Log Analyzer — looking for feedback from IT and cybersecurity professionals

  Hi everyone! I'm an IT and cybersecurity professional, and I've recently launched my own project called CyberKit Log Analyzer. 🔗 https://logs.cyberkit.me/ It's a completely free, browser-based tool designed to make analyzing different types of logs easier and more accessible. A few things about the project: Completely free to use. No registration or account required. Log files are processed loca…
• 
  r/blueteamsec 16 Oct

  ROMULUS: Analysis of a New Multi-Payload ClickFix Delivery Platform

  r/blueteamsec · forescout.com
• 
  r/blueteamsec 16 Oct

  Russian man linked to deadly London hospitals hack arrested

  r/blueteamsec · bbc.co.uk
• 
  r/blueteamsec 16 Oct

  Private security disclosure: libnetconf2 NETCONF/TLS administrator impersonation (NETCONF-REL-001)

  r/blueteamsec · github.com
• r/blueteamsec 16 Oct

  ARMORY CASTLE and BT26-05: What Security Teams Need to Know

  r/blueteamsec · beyondtrust.com
• 
  r/blueteamsec 16 Oct

  ARMORY CASTLE Exploits BeyondTrust

  r/blueteamsec · cloud.google.com
• r/blueteamsec 16 Oct

  Two hardening tools (AD+Windows) in ps1

  Hey, i'm working on those two little tools, any feedback is appreciated. ->>HostBadger, an open-source Windows hardening auditor in pure PowerShell. One read-only script takes a snapshot of each host, and you can push it through your EDR (CrowdStrike RTR or any tool that runs scripts) to a whole fleet in about 15 seconds per host. The analyzer then works offline and writes a clean HTML report wit…
• 
  r/blueteamsec 16 Oct

  The Cloudflare Appstore (Appflare) Malware Audit

  r/blueteamsec · mainbrella.com
• 
  r/blueteamsec 16 Oct

  Guns, Drugs, and SMS Blasters: Four Arrested in Manila

  r/blueteamsec · commsrisk.com
• r/blueteamsec 16 Oct

  Need advice

  Hey alll ,I am a 3rd year CSE student learning soc and i am looking for advices to withstand the ai era and secure a soc job in my final year and I am open to take advices
• 
  r/blueteamsec 16 Oct

  国内で相次ぐWebシステムからの情報漏えい～ラックの観測から見える変化と、企業が今とるべき対策 | A series of data breaches from web systems in Japan: Changes observed

  r/blueteamsec · lac.co.jp
• 
  r/blueteamsec 16 Oct

  Report: Israeli ad-tech firm enables spyware targeting of at least 45 Al Jazeera devices - Committee to Protect Journalists

  r/blueteamsec · cpj.org
• r/blueteamsec 16 Oct

  Building a useful ASM POC scorecard

  I am planning an ASM POC and could use some help. every vendor will get the same seed domains. we’ll hold back a few known subsidiaries and vendor-managed services, then see what gets discovered and how each platform proves ownership. Ionix currently gives us the ownership trail behind an asset. I want to see if CyCognito can match that attribution quality and whether Cortex Xpanse offers more va…
• 
  r/blueteamsec 16 Oct

  [2610.18721] Dynamic Attack Surfaces: A Queue of Branching Processes

  r/blueteamsec · arxiv.org
• 
  r/blueteamsec 16 Oct

  [2610.20962] PAGE404: Breaking GPU Isolation Through Hardware-assisted Page Migration

  r/blueteamsec · arxiv.org
• 
  r/blueteamsec 16 Oct

  Expanding Visibility Into Chinese Government-linked Cyber Threat Actors | Blog

  r/blueteamsec · vulncheck.com
• 
  r/blueteamsec 16 Oct

  Inside Help TDS: Hotejka and Cloudflare Abuse

  r/blueteamsec · infoblox.com
• 
  r/blueteamsec 16 Oct

  Silver Fox's "Cloud Book of Life and Death" sequel: From continuous production to Referer time window variant

  r/blueteamsec · blog.netlab.360.com
• 
  r/blueteamsec 15 Oct

  ADINT: Weaponized Ad Tech for Zero-Click Spyware and Mass Identity Vacuuming

  r/blueteamsec · blog.confiant.com
• 
  r/blueteamsec 15 Oct

  Threat Hunting LegionRelay C2 Servers Targeting Ukraine

  r/blueteamsec · team-cymru.com
• r/blueteamsec 15 Oct

  North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment

  r/blueteamsec · ic3.gov
• r/blueteamsec 15 Oct

  cybersecurity portfolio

  For those who have a cybersecurity portfolio, what kind of projects have you included? Labs or your own projects? Would love to hear your experiences!
• 
  r/blueteamsec 15 Oct

  Exposing AdFection: How Discover-Tech Turned Targeted Ads Into a Pipeline for Zero-Click Mercenary Spyware - The Citizen Lab

  r/blueteamsec · citizenlab.ca
• 
  r/blueteamsec 15 Oct

  🤖 Inside a PaperCut Attacker’s AI Toolkit: Agent Instructions, Exploit Code, a Second RCE, and Victims Across 45+ Countries

  r/blueteamsec · hunt.io
• r/blueteamsec 15 Oct

  OpenINTEL: Active DNS Measurement Project

  r/blueteamsec · openintel.nl
• r/blueteamsec 15 Oct

  Analysis of APT-C-55 (Kimsuky) Group's Multi-Path Delivery Attack Campaign

  r/blueteamsec · mp.weixin.qq.com
• 
  r/blueteamsec 15 Oct

  Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

  r/blueteamsec · unit42.paloaltonetworks.com
• 
  r/blueteamsec 15 Oct

  Reproducing Advanced Windows Kernel Exploitation Techniques with LLM Assistance

  r/blueteamsec · labs.itresit.es
• r/blueteamsec 15 Oct

  Help Yourself to SYSTEM

  r/blueteamsec · blog.amberwolf.com
• 
  r/blueteamsec 15 Oct

  Connectedness, Cognitive Load, and Human-AI Oversight in Cyber Operations

  r/blueteamsec · arxiv.org
• 
  r/blueteamsec 15 Oct

  [Learning] MS08-067 Part 2: Understanding How It Works in Depth

  r/blueteamsec · iss4cf0ng.github.io
• 
  r/blueteamsec 15 Oct

  Chinese cybersecurity software found in Taiwan Ministry of Foreign Affairs! "Almost all overseas offices compromised." Prosecutors conducted 10 searches and questioned 4 companies involved

  r/blueteamsec · today.line.me
• 
  r/blueteamsec 15 Oct

  Trezor Wallets Also Compromised with Implants

  r/blueteamsec · zetter-zeroday.com
• 
  r/blueteamsec 15 Oct

  Incoming: Vanguard On-Demand - uses the new Microsoft driver attestation on demand report

  r/blueteamsec · riotgames.com
• 
  r/blueteamsec 15 Oct

  SiteGuard Server EditionにおけるOSコマンドインジェクションの脆弱性（CVE-2026-106931）に関する注意喚起 - Security Advisory Regarding OS Command Injection Vulnerability (CVE-2026-106931) in SiteGuard Server Edition

  r/blueteamsec · jpcert.or.jp

  CVE-2026-106931
• 
  r/blueteamsec 15 Oct

  Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

  r/blueteamsec · blog.talosintelligence.com
• 
  r/blueteamsec 15 Oct

  Disruption Targets Major Chinese-Language Phishing Kits with Japanese Focus

  r/blueteamsec · proofpoint.com
• 
  r/blueteamsec 15 Oct

  Opinie biegłych ABW dotyczące bezpieczeństwa i funkcjonowania systemu Pegasus - Opinions of ABW experts regarding the security and functioning of the Pegasus system

  r/blueteamsec · gov.pl
• r/blueteamsec 15 Oct

  14 Indicted in North Korean Remote IT Worker Conspiracy Affecting More than 70 U.S. Companies

  r/blueteamsec · justice.gov
• 
  r/blueteamsec 15 Oct

  【注意喚起】相次ぐ情報漏洩、その原因の一つは「アプリ解析からのサーバ攻撃」― AIで高度化する脆弱性探索、Androidアプリを手がかりにしたA2B攻撃に注意 ― | ライブラリー | サイバーセキュリティネクサス - Beware of A2B attacks using Android apps as a starting point for sophisticated vulnerability detection with AI.

  r/blueteamsec · cynex.nict.go.jp
• r/blueteamsec 15 Oct

  Beyond IOCs: Enriching Threat Investigations with Global Network Telemetry

  r/blueteamsec · vertex.link
• 
  r/blueteamsec 15 Oct

  Divine Seagull: Coruna / Darksword expansion attempt ?

  r/blueteamsec · netaskari.substack.com
• 
  r/blueteamsec 15 Oct

  Who Is Planting Backdoors in Ledger Crypto Wallets?

  r/blueteamsec · zetter-zeroday.com
• 
  r/blueteamsec 14 Oct

  The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime

  r/blueteamsec · blogs.microsoft.com

Older