CVE-2026-13293

creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:36+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/ibm-security-advisory-av26-922 2026-09-15 20:05:57+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mvlge4g6lp2i...

PENTEST-LAB

PENTEST-LAB ハンズオンな攻撃チェーンを通じてWeb、API、クラウド、 AI、そしてブルーチームセキュリティ を学ぶための、モダンな脆弱性アプリケーション＆サイバーレンジです。 root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗ ██╗████████╗███████╗███████╗████████╗ ║ ║ ██╔══██╗██╔════╝████╗...

Cyber-Attack-Simulation-

网络攻击模拟- Log4Shell CVE-2021-44228...

Dragonfish-s-Malware-Cyber-Analysis

Este repositorio no tiene un README...

IntelligentProcessLifecycle

IntelligentProcessLifecycle 主动网络防御者的智能流程生命周期 描述 本 GitHub 仓库托管与安全运营服务中误报及错误类别相关的海报文件。目标是定义一种开源的安全运营中心（SOC）报告标准。在此发布的 KPI 侧重于创建与持续改进运营网络防御任务相关的统计数据。 该信息首次于 FIRST 2020 上与 Eireann Leverett（其贡献了在风险管理方面的经验）一同展示，视频可在此处观看：https://www.youtube.com/watch?v=pR02cZlPakU...

cve-2025-2082

特斯拉如何被黑？ — 交互式场景应用 该项目基于 Synacktiv 安全公司发现的一个真实漏洞（TPMS → VCSEC → CAN Bus 链），是一个交互式网络安全场景。 该场景旨在通过戏剧化的方式，教导人们如何利用特斯拉 Model 3 在2024年存在的一个易受攻击的协议来入侵车辆。 通过时间和情节线进行叙述。 根据用户的选择推进。 旨在提高对信息物理系统安全的认识。 目标 通过此场景，以下概念将以游戏化的形式教授： TPMS（轮胎压力监测系统）协议 整数溢出漏洞 CAN 总线架构 VCSEC（车辆安全模块） 警告 此应用程序仅用于教育目的。...

priority-intelligence-requirements-dev

制定优先情报需求 @ Red Hat v1.1 在网络威胁情报（CTI）快速演变的格局中，制定优先情报需求（PIRs）是 CTI 项目以及情报周期中规划与方向阶段的关键组成部分。作为网络威胁情报分析师，你很可能熟知这样的挑战：在小型 CTI 团队中，有限的资源与向决策者和利益相关者交付相关、可操作信息的艰巨任务之间如何平衡。这种两难境地常常让团队陷入抉择：是采取被动应对的姿态，在威胁出现时即时响应，还是更倾向于主动的长期优先事项。将 PIRs...

Ukraine-Cyber-Operations

乌克兰网络作战行动 Curated Intelligence 正与来自世界各地的分析师合作，为乌克兰境内寻求额外免费威胁情报的组织提供有用信息。Slava Ukraini。荣耀归于乌克兰。博客 | Twitter | LinkedIn 资源 2022 年威胁报告时间线 1 月威胁报告 2 月威胁报告 3 月威胁报告 4 月威胁报告 5 月威胁报告 6 月威胁报告 7 月威胁报告 8 月威胁报告 9 月威胁报告 10 月威胁报告 11 月威胁报告 12 月威胁报告 2023 年威胁报告时间线 1 月威胁报告 2 月威胁报告 4 月威胁报告 厂商支持 经过审核的 OSINT 来源 其他资源...

awesome-cyber-skills

awesome-cyber-skills 一份精心整理的黑客练习环境清单，让你可以免费、合法且安全地训练网络安全技能 关于本清单 在信息安全领域，了解你的敌人——黑客——至关重要。只有了解敌人，你才能有效地防御并守护数字世界。 “了解敌人，你就能战胜敌人。” 在美国，即使是高级退休警官也会继续为居民提供建议，帮助他们更好地保障住宅安全。他们会走访房屋、找出薄弱环节，并分享对犯罪手法的了解，以帮助预防入室盗窃。 要磨练你的网络安全技能，就需要让你的黑客技能保持与时俱进。为此，必须有一个安全、合法且免费的环境供练习使用。...

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 where "GTG" stand...

statecraftcyber

Statecraft Cyber Intelligence 以巴西葡萄牙语（PT-BR）构建的威胁情报平台，从零开始打造，是 Blue Team 的个人项目。它聚合全球开源来源的数据，并将其转化为技术简报、分类新闻、增强版 CVE 和结构化 IOC——全部以巴西葡萄牙语呈现，持续更新。 网站： statecraftcyber.vercel.app 平台功能 Threat Briefings — 由 AI（Groq / LLaMA 3.3 70B）每小时生成的技术简报，包含严重性、IOC、CVE 以及直接面向 Blue Team 的建议 CVEs — 最近 72 小时的漏洞信息，包含...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

CVE-2026-20281

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:29+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 13:45:12+00:00| seen|...

Dell PowerProtect Cyber Recovery < 20.3.0.0 Multiple Vulnerabilities (DSA-2026-370)

The version of Dell PowerProtect Cyber Recovery installed on the remote host is prior to 20.3.0.0. It is, therefore, affected by multiple vulnerabilities: - Dell PowerProtect Cyber Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an SQL Command 'SQ...

Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs

Google on Wednesday announced Gemini 3.8 Flash Cyber, which it described as its most capable cybersecurity model, and has made it available to a set of trusted defenders via a new initiative called the Fairwind Program. "The Fairwind Program gives high-priority defenders like governments,...

A SoK for SoCs: Reading the TI Leaves on AI for Cyber Threat Intelligence Generation and Sharing

Cyber Threat Intelligence CTI is essential for defending mission-critical infrastructure, yet the process of transforming raw attack evidence into shareable CTI remains fragmented and understudied. We conduct a literature survey of academic papers, organizing the CTI lifecycle into three stages:...

Using LLMs to Elicit Security Requirements for Service-Oriented Cyber Ranges

Cyber ranges are complex environments comprising many interacting components and stakeholders with different security concerns. The Service-Oriented Cyber Range SOR is no exception, particularly when it comes to training scenarios targeting critical infrastructure. Security concerns are translate...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

CVE-2026-79938

Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...