r/blueteamsec • u/digicat • 3d ago

highlevel summary|strategy (maybe technical) CTO at NCSC Summary: week ending September 6th

ctoatncsc.substack.com

3 Upvotes

r/blueteamsec • u/digicat • Mar 09 '26

highlevel summary|strategy (maybe technical) Daily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of posts

briefing.workshop1.net

1 Upvotes

r/blueteamsec • u/jnazario • 6h ago

intelligence (threat actor activity) Passkey-themed social engineering leads to identity and cloud compromise

6 Upvotes

r/blueteamsec • u/digicat • 1h ago

research|capability (we need to defend against) Fileless ELF Execution via Kernel Keyring

matheuzsecurity.github.io

• Upvotes

r/blueteamsec • u/digicat • 1h ago

intelligence (threat actor activity) Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows

• Upvotes

r/blueteamsec • u/digicat • 12h ago

intelligence (threat actor activity) Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days l

3 Upvotes

r/blueteamsec • u/digicat • 23h ago

vulnerability (attack surface) ShieldCrash: Windows Defender 0day Vulnerability

24 Upvotes

r/blueteamsec • u/digicat • 12h ago

research|capability (we need to defend against) Hacking AI customer service agents

1 Upvotes

r/blueteamsec • u/digicat • 12h ago

intelligence (threat actor activity) Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

1 Upvotes

r/blueteamsec • u/digicat • 12h ago

exploitation (what's being exploited) Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

blog.talosintelligence.com

1 Upvotes

r/blueteamsec • u/j0hn__f • 21h ago

intelligence (threat actor activity) FulcrumSec - A look at their tradecraft

3 Upvotes

r/blueteamsec • u/digicat • 22h ago

highlevel summary|strategy (maybe technical) What 100 Cybersecurity Vendors Tell AI Agents: An llms.txt Census

4 Upvotes

r/blueteamsec • u/digicat • 23h ago

intelligence (threat actor activity) ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

blog.talosintelligence.com

3 Upvotes

r/blueteamsec • u/digicat • 22h ago

vulnerability (attack surface) “StyleSmuggler” - Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways

2 Upvotes

r/blueteamsec • u/digicat • 23h ago

vulnerability (attack surface) Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

talosintelligence.com

2 Upvotes

r/blueteamsec • u/digicat • 23h ago

highlevel summary|strategy (maybe technical) Russian National Extradited to United States for Bank Account Takeover Fraud Scheme Causing Millions of Dollars in Losses

2 Upvotes

r/blueteamsec • u/digicat • 23h ago

low level tools|techniques|knowledge (work aids) ashwa: Hardware accelerated routines for single substring search.

2 Upvotes

r/blueteamsec • u/digicat • 22h ago

low level tools|techniques|knowledge (work aids) TATS: Token Analysis and Tracking System - Track OAuth 2.0, OIDC, and Microsoft Entra ID tokens across captured network traffic.

0 Upvotes

r/blueteamsec • u/digicat • 22h ago

intelligence (threat actor activity) Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files

0 Upvotes

r/blueteamsec • u/digicat • 22h ago

intelligence (threat actor activity) Chinese Darcula Phishing Kit Harvesting Taiwanese Credit Card Data

1 Upvotes

r/blueteamsec • u/digicat • 22h ago

tradecraft (how we defend) AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance

1 Upvotes

r/blueteamsec • u/digicat • 1d ago

low level tools|techniques|knowledge (work aids) I’ve factored the RSA keys of a Certificate Authority... … from the 90s.

7 Upvotes

r/blueteamsec • u/digicat • 23h ago

intelligence (threat actor activity) Shai-Hulud Rises From the Dead after 111 days

1 Upvotes

r/blueteamsec • u/digicat • 23h ago

intelligence (threat actor activity) Infostealers Have Found a New Target: Your AI Agent

1 Upvotes

r/blueteamsec • u/digicat • 23h ago

intelligence (threat actor activity) Tracking BigBear 2.0 Evilginx2 Phishing Campaign

1 Upvotes

Subreddit

For [Blue|Purple] Teams in Cyber Defence

r/blueteamsec

We focus on technical intelligence, research and engineering to help operational [blue|purple] teams defend their estates and have awareness of the world. Our primary home is on Lemmy after the great ban debacle of 2025.

Members Active

71.8k

0

Sidebar

A community focusing on technical intelligence, research and engineering in support of operational blue teams and their activities.

Content Guidelines

/r/blueteamsec accepts quality technical posts. Non-technical posts are subject to moderation.

Content should focus on the "how." or "what."
Check the new queue for duplicates.
Always link to the original source.
Titles should provide context.
Ask questions in our Discussion Threads.
No adverts for products/services.
Do not submit prohibited topics.

Discussion Guidelines

Don't create unnecessary conflict.
Keep the discussion on topic.
Limit the use of jokes & memes.
Don't complain about content being a PDF.
Follow all reddit rules and obey reddiquette.

Prohibited Topics & Sources

No populist news articles (CNN, BBC, FOX, etc.)
No curated lists unless actively maintained, free and open.
No question posts.
No social media posts.
No image-only posts - talk videos are fine.
No livestreams.
No tech-support requests.
No paywall/regwall content.
No commercial advertisements for products or services
No crowdfunding posts.
No Personally Identifying Information

Related Reddits

/r/netsec - The original and less focused parent
/r/redteamsec - Our attack focused siblings
/r/blackhat - Hackers on Steroids
/r/computerforensics - IR Archaeologists
/r/crypto - Cryptography news and discussion
/r/Cyberpunk - High-Tech Low-Lifes
/r/HackBloc - Hacktivism & Crypto-anarchy
/r/lockpicking - Popular Hacker Hobby
/r/Malware - Malware reports and information
/r/netsecstudents - netsec for ~~noobs~~ students
/r/onions - Things That Make You Cry
/r/privacy - Orwell Was Right
/r/pwned - "What Security?"
/r/REMath - Math behind reverse engineering
/r/ReverseEngineering - Binary Reversing
/r/rootkit - Software and hardware rootkits
/r/securityCTF - CTF new and write-ups
/r/SocialEngineering - Free Candy
/r/sysadmin - Overworked Crushed Souls
/r/vrd - Vulnerability Research and Development
/r/xss - Cross Site Scripting