csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

investigations

조사 이 저장소에는 인권 옹호자를 대상으로 한 표적 위협에 관한 국제앰네스티Amnesty International의 기술 조사 중 일부에서 추출한 침해 지표IoC가 포함되어 있습니다. 이 지표들은 CC-BY 라이선스에 따라 공유됩니다...

purple-team-exercise-framework

Purple Team Exercise Framework PTEF Purple Team Exercise FrameworkPTEF는 CTICyber Threat Intelligence, Red Team, Blue Team을 한데 모으는 협업형 보안 훈련을 설계하고 실행하기 위한 업계 표준 방법론입니다. Purple Team 훈련은 실제 사이버 공격에 대한 조직의 복원력을 테스트, 측정, 개선하는 효율적인 방법입니다. 이 프레임워크는 다음을 다룹니다: Purple Team 훈련 - 임시Ad-hoc 협업형 훈련 운영화된 Purple...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

physical-bitcoin-attacks

Known Physical Bitcoin Attacks A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace. NOTE: this list is not comprehensive; many attacks are not publicly reported. If you are aware of an attack that is not listed, please open an issue or pull request —...

ai-kill-chain

AI 시대 위협을 위한 확장된 사이버 킬 체인 LLM 및 에이전트형 AI 공격에 대응하는 방어자를 위한 Lockheed Martin 사이버 킬 체인의 업데이트. 모델 공급망 침해를 위한 사전 공격 단계를 추가한다. 원래 일곱 단계 각각에 AI 특화 하위 기법을 추가한다. Actions on Objectives 단계를 세 개의 동등한 하위 단계로 분할한다: 전통적 데이터 유출, 모델 추출, 에이전트형 피벗. 저자: Gourav Nagar 버전: 1.0 날짜: 2026년 5월 19일 저장소:...

amlsec

Автоматизированная идентификация рисков безопасности в киберфизических производственных системах с использованием инженерных данных на основе AutomationML Этот прототип реализует методы, представленные в следующих двух публикациях: 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

network-threats-taxonomy

Таксономия сетевых угроз и инструментов Системы обнаружения вторжений на основе машинного обучения сложно оценивать из-за нехватки наборов данных, точно отражающих сетевой трафик и связанные с ним угрозы. В этом проекте мы пытаемся решить эту проблему, представляя две таксономии: «A Taxonomy and...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

dmz-security-monitoring-hardening

DMZ 보안 모니터링 및 강화 CY376: 네트워크 모니터링, 보안 및 감사 — 학기말 프로젝트 Blue Team | University of Mines and Technology, Tarkwa 저자: Kennedy Kumi Holomah 색인 번호: FCM.41.018.148.23 학생 ID: 9013004623 개요 이 프로젝트는 완전히 격리된 VMware Workstation 실습 환경에서 pfSense 방화벽 뒤에 호스팅된 공개용 Ubuntu/Apache 웹 서버를 호스팅하는 비무장지대DMZ를 구축하고, 보호하며,...

awesome-latency-attacks

Awesome 딥러닝 지연 시간 공격 & 방어 이 저장소는 논문 “Deep Learning Latency Attacks and Defenses: A Cross-Domain Survey”의 부속 자료로 유지되고 있습니다. 배포된 AI 시스템에서의 지연 시간 지향 가용성 위협에 관한 논문, 코드 링크, 분류 체계 노트, 그림을 색인합니다. 이 목록은 모델 예측만을 변경하는 공격이 아니라, 추론 시점 또는 시스템 수준 비용 — 지연 시간, 에너지, 처리량 압박, 데드라인 미스 — 에 영향을 미치는 공격과 방어에 초점을 맞춥니다. 현...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

IT threat evolution in Q2 2026. Non-mobile statistics

IT threat evolution in Q2 2026. Non-mobile statistics IT threat evolution in Q2 2026. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 3: The OWASP LLM Top 10 Was the Warm-Up: What Comes Next Post 4: OWASP LLM Top 10 2026: Every Move Points the Same Direction There is a moment every CISO is having right now, often without warning. A...

XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards...

We rebuilt Malwarebytes Mobile Security for the scams of today

Nearly half of people encounter a scam on their phone every single day. Malwarebytes is doing something about it. That figure comes from a 2025 Malwarebytes survey of 1,300 respondents across the US and Europe. The results paint a troubling picture. A quarter of the victims surveyed reported bein...

A week in security (July 20 – July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...