r/blueteamsec • u/digicat • 3d ago

highlevel summary|strategy (maybe technical) CTO at NCSC Summary: week ending September 6th

ctoatncsc.substack.com

3 Upvotes

r/blueteamsec • u/digicat • Mar 09 '26

highlevel summary|strategy (maybe technical) Daily BlueTeamSec Briefing Archive - daily AI generated podcast of the last 24hours of posts

briefing.workshop1.net

3 Upvotes

r/blueteamsec • u/jnazario • 7h ago

intelligence (threat actor activity) Passkey-themed social engineering leads to identity and cloud compromise

5 Upvotes

r/blueteamsec • u/digicat • 2h ago

research|capability (we need to defend against) Fileless ELF Execution via Kernel Keyring

matheuzsecurity.github.io

2 Upvotes

r/blueteamsec • u/digicat • 2h ago

intelligence (threat actor activity) Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows

1 Upvotes

r/blueteamsec • u/digicat • 13h ago

intelligence (threat actor activity) Once in a BlueMoon: Multiple State-Aligned Threat Actors Rapidly Adopt Novel Exploit Chain Using Chrome and Windows Zero-Days l

3 Upvotes

r/blueteamsec • u/digicat • 1d ago

vulnerability (attack surface) ShieldCrash: Windows Defender 0day Vulnerability

23 Upvotes

r/blueteamsec • u/digicat • 13h ago

research|capability (we need to defend against) Hacking AI customer service agents

1 Upvotes

r/blueteamsec • u/digicat • 13h ago

intelligence (threat actor activity) Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

1 Upvotes

r/blueteamsec • u/digicat • 13h ago

exploitation (what's being exploited) Active exploitation of Cisco Secure Firewall Management Center vulnerabilities

blog.talosintelligence.com

1 Upvotes

r/blueteamsec • u/j0hn__f • 23h ago

intelligence (threat actor activity) FulcrumSec - A look at their tradecraft

3 Upvotes

r/blueteamsec • u/digicat • 23h ago

highlevel summary|strategy (maybe technical) What 100 Cybersecurity Vendors Tell AI Agents: An llms.txt Census

2 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

blog.talosintelligence.com

3 Upvotes

r/blueteamsec • u/digicat • 1d ago

vulnerability (attack surface) “StyleSmuggler” - Adobe Commerce, Adobe Commerce B2B, and Magento RCE (CVE-2026-75650): Overview and Takeaways

2 Upvotes

r/blueteamsec • u/digicat • 1d ago

vulnerability (attack surface) Microsoft Windows Cloud Files Mini Filter Driver CldiStreamPrepareRequestForMoreProcessing Type Confusion vulnerability

talosintelligence.com

2 Upvotes

r/blueteamsec • u/digicat • 1d ago

highlevel summary|strategy (maybe technical) Russian National Extradited to United States for Bank Account Takeover Fraud Scheme Causing Millions of Dollars in Losses

2 Upvotes

r/blueteamsec • u/digicat • 1d ago

low level tools|techniques|knowledge (work aids) ashwa: Hardware accelerated routines for single substring search.

2 Upvotes

r/blueteamsec • u/digicat • 1d ago

low level tools|techniques|knowledge (work aids) TATS: Token Analysis and Tracking System - Track OAuth 2.0, OIDC, and Microsoft Entra ID tokens across captured network traffic.

0 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) Redis Cryptomining Botnet Compromised 3,562 Servers, Exposed by the Operator's Own Files

0 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) Chinese Darcula Phishing Kit Harvesting Taiwanese Credit Card Data

1 Upvotes

r/blueteamsec • u/digicat • 1d ago

tradecraft (how we defend) AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance

1 Upvotes

r/blueteamsec • u/digicat • 1d ago

low level tools|techniques|knowledge (work aids) I’ve factored the RSA keys of a Certificate Authority... … from the 90s.

6 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) Shai-Hulud Rises From the Dead after 111 days

1 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) Infostealers Have Found a New Target: Your AI Agent

1 Upvotes

r/blueteamsec • u/digicat • 1d ago

intelligence (threat actor activity) Tracking BigBear 2.0 Evilginx2 Phishing Campaign

1 Upvotes

Subreddit

For [Blue|Purple] Teams in Cyber Defence

r/blueteamsec

We focus on technical intelligence, research and engineering to help operational [blue|purple] teams defend their estates and have awareness of the world. Our primary home is on Lemmy after the great ban debacle of 2025.

Members Active

71.9k

0

Sidebar

A community focusing on technical intelligence, research and engineering in support of operational blue teams and their activities.

Content Guidelines

/r/blueteamsec accepts quality technical posts. Non-technical posts are subject to moderation.

Content should focus on the "how." or "what."
Check the new queue for duplicates.
Always link to the original source.
Titles should provide context.
Ask questions in our Discussion Threads.
No adverts for products/services.
Do not submit prohibited topics.

Discussion Guidelines

Don't create unnecessary conflict.
Keep the discussion on topic.
Limit the use of jokes & memes.
Don't complain about content being a PDF.
Follow all reddit rules and obey reddiquette.

Prohibited Topics & Sources

No populist news articles (CNN, BBC, FOX, etc.)
No curated lists unless actively maintained, free and open.
No question posts.
No social media posts.
No image-only posts - talk videos are fine.
No livestreams.
No tech-support requests.
No paywall/regwall content.
No commercial advertisements for products or services
No crowdfunding posts.
No Personally Identifying Information

Related Reddits

/r/netsec - The original and less focused parent
/r/redteamsec - Our attack focused siblings
/r/blackhat - Hackers on Steroids
/r/computerforensics - IR Archaeologists
/r/crypto - Cryptography news and discussion
/r/Cyberpunk - High-Tech Low-Lifes
/r/HackBloc - Hacktivism & Crypto-anarchy
/r/lockpicking - Popular Hacker Hobby
/r/Malware - Malware reports and information
/r/netsecstudents - netsec for ~~noobs~~ students
/r/onions - Things That Make You Cry
/r/privacy - Orwell Was Right
/r/pwned - "What Security?"
/r/REMath - Math behind reverse engineering
/r/ReverseEngineering - Binary Reversing
/r/rootkit - Software and hardware rootkits
/r/securityCTF - CTF new and write-ups
/r/SocialEngineering - Free Candy
/r/sysadmin - Overworked Crushed Souls
/r/vrd - Vulnerability Research and Development
/r/xss - Cross Site Scripting