218 matches found
SpookFlare
SpookFlare SpookFlareはセキュリティ対策を回避するための別の視点を提供し、クライアント側およびネットワーク側のエンドポイント対策をバイパスする機会を提供します。SpookFlareは、Meterpreter、Empire、Koadicなどのためのローダー/ドロッパー生成ツールです。SpookFlareは、難読化、エンコーディング、実行時コードコンパイル、文字置換の機能を備えています。そのため、ターゲットシステムがSpookFlareペイロードのテクニックや動作を「学習」するまで、まるでボスのようにエンドポイント対策をバイパスできます。 難読化 エンコーディング...
AI-PASSWORD-TESTING-AGENT
AI密码攻击编排器 - 防御性研究仓库 ⚠️ 法律免责声明与研究目的 本仓库仅用于防御性网络安全研究和教育目的 不包含可利用代码 - 本仓库仅包含理论研究、概念分析和防御性对策 不包含攻击性工具 - 不含可运行的漏洞利用、攻击脚本或自动化攻击工具 防御性重点 - 所有内容旨在帮助组织防御AI增强型密码攻击 学术研究 - 这是一份面向安全专业人士和研究者的技术能力分析 合规性 - 所有内容符合负责任的披露和道德安全研究标准 访问本仓库即表示您同意： 仅将本信息用于防御目的 不尝试将任何描述的概念武器化或投入实战 以负责任的方式与安全社区分享研究成果 遵守所有适用的法律法规 仓库概述...
WiFi-SpiderWeb
WiFi-SpiderWeb V2.0 — OpenWrt アクティブサイバー防御 & ハニーポットエコシステム 動的Wi-Fi Deauthentication検出器、能動的対策エンジン、RSSI三角測量レーダー搭載リアルタイムWebダッシュボード。 低リソースのOpenWrtルーター向けに設計されており、USB ExtRootから完全に動作します。 🏗️ 高度なアーキテクチャ...
Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
Overview VulnerabilityCVE-2026-43951 has been found in Cosminexus HTTP Server and Hitachi Web Server. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropria...
Vulnerability in Cosminexus HTTP Server and Hitachi Web Server
Overview VulnerabilityCVE-2026-33523 has been found in Cosminexus HTTP Server and Hitachi Web Server. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropria...
CRESS: Quantifying Vulnerabilities of Attack Scenarios in Hardware Reverse Engineering
The safety, security, and reliability of microelectronic systems depend on a trustworthy, secured supply chain and design flow. Globally distributed supply chains or unintentional design weaknesses leave the door open for attacks on the hardware level. These scenarios encompass counterfeiting,...
CVE-2025-14972 Insufficient DPA countermeasure reseeding
Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. KSU keys using SYMCRYPTO will be impacted by this vulnerability...
From AI-Generated Content to Agentic Action: Security and Safety Threats in Generative AI
Generative AI systems are increasingly used not only to produce content but also to retrieve data, invoke tools, and execute actions. This work examines the security and safety implications of that shift across content-level, model-level, and agentic threats. We analyze how attacker access...
Comprehensive List of User Deception Techniques in Emails
Email remains a central communication medium, yet its long-standing design and interface conventions continue to enable deceptive attacks. This research note presents a structured list of 42 email-based deception techniques, documented with 64 concrete example implementations, organized around th...
Vulnerability in Hitachi Command Suite
Overview VulnerabilityCVE-2025-48976 has been found in Hitachi Command Suite. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
Using AI to defeat AI
Welcome to this week's edition of the Threat Source newsletter. Generative AI and agentic AI are here to stay. Although I believe that the advantages that AI brings to bad guys may be overstated, these new technologies allow threat actors to conduct attacks at a faster rate than before. One...
Multiple Vulnerabilities in JP1
Overview Multiple vulnerabilities have been found in JP1. CVE-2024-38473, CVE-2024-38477 Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...
CVE-2025-7432
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an attacker to eventually extract secret keys through a DPA attack...
CVE-2025-7432
CVE-2025-7432 concerns Silicon Labs’ Series 2 devices where DPA countermeasures are not reseeded under certain conditions. The vulnerability could enable an attacker to eventually extract secret keys via a differential power analysis (DPA) attack. The provided metrics indicate a low base score (C...
CVE-2025-7432 DPA countermeasures not reseeded under certain conditions
DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an attacker to eventually extract secret keys through a DPA attack...
Eclipse Attacks on Ethereum'S Peer-To-Peer Network
Eclipse attacks isolate blockchain nodes by monopolizing their peer-to-peer connections. The attacks were extensively studied in Bitcoin SP'15, SP'20, CCS'21, SP'23 and Monero NDSS'25, but their practicality against Ethereum nodes remains underexplored, particularly in the post-Merge settings. We...
Application-Specific Power Side-Channel Attacks and Countermeasures: A Survey
Side-channel attacks try to extract secret information from a system by analyzing different side-channel signatures, such as power consumption, electromagnetic emanation, thermal dissipation, acoustics, time, etc. Power-based side-channel attack is one of the most prominent side-channel attacks i...
Siemens Building X - Security Manager Edge Controller
SUMMARY Building X - Security Manager Edge Controller ACC-AP devices do not properly check the integrity of firmware updates. This could allow an attacker to upload a maliciously modified firmware onto the device. Siemens is preparing fix versions and recommends specific countermeasures for...
Unfolding Challenges in Securing and Regulating Unmanned Air Vehicles
Unmanned Aerial Vehicles UAVs or drones are being introduced in a wide range of commercial applications. This has also made them prime targets of attackers who compromise their fundamental security properties, including confidentiality, integrity, and availability. As researchers discover novel...
