44 matches found
gophish
Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...
gophish
Gophish Gophish: مجموعة أدوات التصيد مفتوحة المصدر Gophish هي مجموعة أدوات تصيد مفتوحة المصدر صُممت للشركات ومختبرِي الاختراق. توفر القدرة على إعداد وتنفيذ حملات التصيد والتدريب على الوعي الأمني بسرعة وسهولة. التثبيت تثبيت Gophish بسيط للغاية - فقط قم بتنزيل وفك ضغط الملف المضغوط الذي يحتوي على...
training-security-awareness
Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...
Who Falls for SMiSh? Learning through Survey Data Where to Best Target Awareness Training for Mobile Messaging Attacks
As mobile phone adoption has surged, so have scams involving these devices. One such scam, known as SMiShing or smishing after Short Message Service SMS, involves fraudsters sending phishing links via mobile texts. Despite the prevalence of SMiShing, there is a lack of data on who is most...
AI in Cyberpsychology: A Systematic Literature Review of Cybersecurity Enhancement by Using AI for Analyzing Psychology of Victims, Attackers, and Defenders
Cybersecurity is the practice of protecting systems, networks, and data from digital attacks. Cyberpsychology CPSY is defined as the use of psychology to enhance cybersecurity applications. Since the early 2010s, the evolution of Artificial Intelligence AI has increasingly integrated with CPSY,...
Poster: ClawdGo: Endogenous Security Awareness Training for Autonomous AI Agents
Autonomous AI agents deployed on platforms such as OpenClaw face prompt injection, memory poisoning, supply-chain attacks, and social engineering, yet existing defences address only the platform perimeter, leaving the agent's own threat judgement entirely untrained. We present ClawdGo, a framewor...
Women’s History Month: Encouraging women in cybersecurity at every career stage
Women’s History Month—and International Women’s Day on March 8, 2026—always gives me pause for reflection. It’s a moment to think about how far we’ve come and think about who we choose to uplift as we look ahead. Throughout my career, I’ve been inspired by extraordinary women leaders—trailblazers...
Designing Proportionate Cybersecurity Frameworks for European Micro-Enterprises: Lessons from the Squad 2025 Case
Micro and small enterprises SMEs account for most European businesses yet remain highly vulnerable to cyber threats. This paper analyses the design logic of a recent European policy initiative -- the Squad 2025 Playbook on Cybersecurity Awareness for Micro-SMEs -- to extract general principles fo...
Antivirus Software Outage: Is Your Defense Ready?
Your antivirus software is the trusted gatekeeper of your digital world, silently working in the background to block threats. But what happens when that gatekeeper suddenly walks off the job? A widespread antivirus software outage recently showed us the answer, grinding critical industries to a...
MSc-Cybersecurity-Capstone-Android-Exploitation
MSc Cybersecurity Capstone Project Title: Android Exploit...
CVE-2020-36845
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL...
CVE-2020-36844
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL...
CVE-2020-36844
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL...
KnowBe4 Security Awareness Training 安全漏洞
KnowBe4 Security Awareness Training is a human risk management software from KnowBe4. A security vulnerability exists in KnowBe4 Security Awareness Training versions prior to 2020-01-10, which stems from an unvalidated target URL resulting in an insecure redirection feature...
CVE-2020-36844
KnowBe4 Security Awareness Training is affected by CVE-2020-36844, a reflected XSS in versions before 2020-01-10. The vulnerability arises from a response SCRIPT element that sets window.location.href to a JavaScript URL, enabling an attacker-controlled script reflected in the page. The CVSS base...
CVE-2020-36844
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL...
CVE-2020-36845: URL Redirection to Untrusted Site
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL...
CVE-2020-36844: Improper Neutralization of Input During Web Page Generation
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL...
PT-2025-17416 · Knowbe4 · Knowbe4 Security Awareness Training
Name of the Vulnerable Software and Affected Versions: KnowBe4 Security Awareness Training versions prior to 2020-01-10 Description: The issue concerns a redirect function in the application that fails to validate the destination URL before redirecting. This allows the response to contain a SCRIP...
CVE-2020-36845
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL...