96 matches found
When Identity is the Attack Path
Consider a cached access key on a single Windows machine. It got there the way most cached credentials do - a user logged in, and the key stored itself automatically. Standard AWS behavior. No one misconfigured anything or violated a policy. Yet that single key, which was easily accessible to a...
Operationalizing Cybersecurity Governance for Mitigation Planning with Attack-Path Modeling and Reinforcement Learning
We address a fundamental challenge in cybersecurity operations of translating governance frameworks into actionable mitigation decisions under realistic resource constraints. Frameworks such as the NIST Cybersecurity Framework CSF provide widely adopted measures of organizational maturity, but do...
groovestrike
GrooveStrike Autonomous Penetration Testing Framework...
BuildReview2
BuildReview2 - Attack-Path-Driven Windows Host Review A rewri...
SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement
LLM-based agent systems increasingly rely on agent skills sourced from open registries to extend their capabilities, yet the openness of such ecosystems makes skills difficult to thoroughly vet. Existing attacks rely on injecting malicious instructions into skills, making them easily detectable b...
Exploit for Incorrect Default Permissions in Amazon Amplify_Cli
skycenter Attack Chain Security Analysis Engine for AWS, Azure...
Pentora
Pentora v1.0 Pentora is a terminal-first web vulnerability...
Exposure Management vs Vulnerability Management: Key Differences
Is your security program truly reducing risk, or is it just getting really good at patching? This question is at the heart of the exposure management vs vulnerability management debate. A traditional approach can tell you that a door has a weak lock, but it can't tell you if that door leads to a...
AEGIS: White-Box Attack Path Generation Using LLMs and Training Effectiveness Evaluation for Large-Scale Cyber Defence Exercises
Creating attack paths for cyber defence exercises requires substantial expert effort. Existing automation requires vulnerability graphs or exploit sets curated in advance, limiting where it can be applied. We present AEGIS, a system that generates attack paths using LLMs, white-box access, and...
Exploit for CVE-2020-1472
Active Directory Attack Path Suggestion Engine !Python Versi...
CVE-2025-1584
A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal:...
CVE-2025-1549 WatchGuard Mobile VPN with SSL Local Privilege Escallation
A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...
EUVD-2006-0597
Malware in sbrugna...
EUVD-2025-13252
Malicious code in bioql PyPI...
EUVD-2025-21363
Malicious code in bioql PyPI...
EUVD-2025-21180
Malicious code in bioql PyPI...
EUVD-2024-27512
Malicious code in bioql PyPI...
EUVD-2025-7535
Malicious code in bioql PyPI...