r/blueteamsec is a subreddit with 73k members. The community frequently discusses shellcode and cyber resilience, and the most common flair used is highlevel summary|strategy (maybe technical), intelligence (threat actor activity), research|capability (we need to defend against), tradecraft (how we defend), and discovery (how we find bad stuff).
We focus on technical intelligence, research and engineering to help operational [blue|purple] teams defend their estates and have awareness of the world.
Our primary home is on Lemmy after the great ban debacle of 2025.
Popular Topics in r/blueteamsec
#1
Shellcode
1 post
#2
Cyber Resilience
1 post
Flair Used in r/blueteamsec
#1
highlevel summary|strategy (maybe technical)
: "Justice Department and FBI Seize Vulnerability Scanning and Spear Phishing Tools Operated and Used by China-State Sponsored Hackers"
20 posts
#2
intelligence (threat actor activity)
: "Observed fake Claude Code ad / DLL sideloading chain with blockchain C2 (EtherHiding) - IOCs included"
16 posts
#3
research|capability (we need to defend against)
: "AI models may be capable of self-replicating without access to a datacenter"
13 posts
#4
tradecraft (how we defend)
: "[2610.09605] GRAML: Graph-Grounded Reasoning and Multi-Task Learning for LLM-Based Software Vulnerability Detection"
10 posts
#5
discovery (how we find bad stuff)
: "Zircolite 4.5: Sigma rules over EVTX, Auditd, Sysmon for Linux and JSON logs, with a very fast offline browser viewer"
8 posts
#6
low level tools|techniques|knowledge (work aids)
: "XDR Schema & Internals"
6 posts
#7
vulnerability (attack surface)
: "AnyPwn: AnyDesk Pre-auth Heap Buffer Overflow RCE"
5 posts
#8
exploitation (what's being exploited)
: "Post-Exploitation Analysis & Artifacts - Citrix NetScaler CVE-2026-88771"
5 posts
#9
incident writeup (who and how)
: "Inside ICMacOS: From an Infostealer to a Persistent RAT"
3 posts
#10
malware analysis (like butterfly collections)
: "WinLol, a Rust Dropper Chain Delivering a WebRTC Remote Desktop RAT"
2 posts
Member Growth in r/blueteamsec
Yearly
+15k members(25.1%)
Similar Subreddits to r/blueteamsec
r/AskNetsec
267k members
15.2% / yr
r/dfir
5k members
36.1% / yr
r/Malware
103k members
13.9% / yr
r/MalwareAnalysis
15k members
59.7% / yr
r/netsec
575k members
7.1% / yr
r/purpleteamsec
9k members
15.6% / yr
r/redteamsec
53k members
23.5% / yr
r/SecOpsDaily
16k members
293.6% / yr
r/threatintel
19k members
66.0% / yr
About
GummySearch helps people research Reddit communities by organizing activity, growth, themes, and post-level signals into one place.
This page gives a focused view of r/blueteamsec, including current member size, discussion patterns, product reviews, and related communities to explore.
This data is synced periodically so insights stay current and useful for ongoing research.
Last updated: October 15, 2026