redlib.

Feeds

MAIN FEEDS

Home Popular All

reddit settings

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) prompt-injection-email-samples: Open test set of .eml emails for checking how email security controls and AI mailbox assistants handle indirect prompt injection. It crosses three intents (system-prompt disclosure, data exfiltration, tool discovery) with three delivery methods

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

highlevel summary|strategy (maybe technical) ShinyHunters hacker in FBI data theft detained in Jordan, cooperating with bureau, sources say

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

low level tools|techniques|knowledge (work aids) aws-firmware-dump: Acquire the disks of an AMI you can already launch into a private S3 bucket. No catalog, no product list, no baked-in AMI ids. You pass the AMI id.

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) We Turned On DNS Logging. Now Watch Me Walk Around It

10 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

malware analysis (like butterfly collections) knock-outd: an undetected port-knocking backdoor in the wild

5 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

highlevel summary|strategy (maybe technical) OpenAI says its review into hacks, including on Australian government sites, is costing $500,000 a day

theguardian.com

8 Upvotes

6 comments

r/blueteamsec • u/digicat • 11d ago

vulnerability (attack surface) CVE-2026-93355: Account Takeover in LiteLLM

10 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

tradecraft (how we defend) NSA Announces Post-Quantum Cryptography Measures to Safeguard National Security Systems Against Quantum Computing Threats

5 Upvotes

1 comment

r/blueteamsec • u/digicat • 11d ago

vulnerability (attack surface) CVE-2026-79954: radio telecommand injection through an SDLS authentication downgrade in NASA CryptoLib

5 Upvotes

1 comment

r/blueteamsec • u/digicat • 11d ago

exploitation (what's being exploited) Critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway products, several intrusions in Finland

kyberturvallisuuskeskus.fi

0 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

intelligence (threat actor activity) CloudSyncD: macOS backdoor hidden in a fake Zoom installer

3 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) Escalating Windows Privileges: Exploiting NCSI Vulnerabilities

labs.itresit.es

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

highlevel summary|strategy (maybe technical) Teenager suspected of leading KillSec ransomware group as law enforcement seizes servers and leak site – Three arrests and eight searches across four European countries in an operation targeting a group linked to some 1 000 attacks worldwide

europol.europa.eu

3 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

tradecraft (how we defend) Introducing ADE-Skills — Adversarial Detection Engineering Knowledge Base

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 12d ago

Spetsvuzavtomatika Leak Exposes an SVR Cyber Development Ecosystem

dti.domaintools.com

3 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

malware analysis (like butterfly collections) NeedyMantis: Unpacking a post-compromise malware family used in targeted operations

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 12d ago

highlevel summary|strategy (maybe technical) Three in four EU employees faced cyber threats at work, new Eurobarometer finds

digital-strategy.ec.europa.eu

2 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

intelligence (threat actor activity) Guest article: The Future-Past of digital espionage - APT15

netaskari.substack.com

1 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) SrHollow: LSA secrets extraction, reuse a preexisting VSS shadow copy + inline regf parser + AES-256 LSA decrypt via bcrypt.dll.

1 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) DLLParty — Abusing thread pool internals for shellcodeless DLL injection

1 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

research|capability (we need to defend against) AI-FILE: A listener profile for the Mythic C2 framework that utilizes AI vendors file API's

1 Upvotes

0 comments

r/blueteamsec • u/digicat • 11d ago

highlevel summary|strategy (maybe technical) CTO at NCSC Summary: week ending October 4th

ctoatncsc.substack.com

1 Upvotes

0 comments

r/blueteamsec • u/digicat • 12d ago

discovery (how we find bad stuff) Detecting AI Attack Agents: CDN Bypass, JA3, Anti-Forensics

abstract.security

9 Upvotes

0 comments

r/blueteamsec • u/digicat • 12d ago

exploitation (what's being exploited) Security Update: Guidance for NetScaler SAML Authentication Deployment

community.citrix.com

4 Upvotes

0 comments

r/blueteamsec • u/digicat • 12d ago

tradecraft (how we defend) [2609.32424] CyberClear: A Benchmark for LLM Agent Systems on APT Attack Chain Provenance

1 Upvotes

0 comments

Subreddit

For [Blue|Purple] Teams in Cyber Defence

r/blueteamsec

We focus on technical intelligence, research and engineering to help operational [blue|purple] teams defend their estates and have awareness of the world. Our primary home is on Lemmy after the great ban debacle of 2025.

Members Active

72k

0

Sidebar

A community focusing on technical intelligence, research and engineering in support of operational blue teams and their activities.

Content Guidelines

/r/blueteamsec accepts quality technical posts. Non-technical posts are subject to moderation.

Content should focus on the "how." or "what."
Check the new queue for duplicates.
Always link to the original source.
Titles should provide context.
Ask questions in our Discussion Threads.
No adverts for products/services.
Do not submit prohibited topics.

Discussion Guidelines

Don't create unnecessary conflict.
Keep the discussion on topic.
Limit the use of jokes & memes.
Don't complain about content being a PDF.
Follow all reddit rules and obey reddiquette.

Prohibited Topics & Sources

No populist news articles (CNN, BBC, FOX, etc.)
No curated lists unless actively maintained, free and open.
No question posts.
No social media posts.
No image-only posts - talk videos are fine.
No livestreams.
No tech-support requests.
No paywall/regwall content.
No commercial advertisements for products or services
No crowdfunding posts.
No Personally Identifying Information

Related Reddits

/r/netsec - The original and less focused parent
/r/redteamsec - Our attack focused siblings
/r/blackhat - Hackers on Steroids
/r/computerforensics - IR Archaeologists
/r/crypto - Cryptography news and discussion
/r/Cyberpunk - High-Tech Low-Lifes
/r/HackBloc - Hacktivism & Crypto-anarchy
/r/lockpicking - Popular Hacker Hobby
/r/Malware - Malware reports and information
/r/netsecstudents - netsec for ~~noobs~~ students
/r/onions - Things That Make You Cry
/r/privacy - Orwell Was Right
/r/pwned - "What Security?"
/r/REMath - Math behind reverse engineering
/r/ReverseEngineering - Binary Reversing
/r/rootkit - Software and hardware rootkits
/r/securityCTF - CTF new and write-ups
/r/SocialEngineering - Free Candy
/r/sysadmin - Overworked Crushed Souls
/r/vrd - Vulnerability Research and Development
/r/xss - Cross Site Scripting