webshell

webshell 简体中文 This is a webshell collection project Give someone a rose, there is a fragrance in your hand if you download this project, please also submit a shell This project covers various common scripts Such as: asp, aspx, php, jsp, pl, py If you submit a webshell, please do not change the na...

Backdoor-Attack-Defense-LLMs

Interpretability-of-LLMs IBSD è il codice dell'articolo pubblicato "IBSD: Iterable Black-box Self-defense Against Backdoor Attacks" in IEEE Signal Processing Letters ottobre 2025link all'articolo SLIP è il codice dell'articolo pubblicato "SLIP: Soft Label Mechanism and Key-Extraction-Guided...

RvbbitSafe

RvbbitSafe: L'Incubo dell'Hacker – Un'Architettura a Sei Fortezze Anti-Ransomware per Windows 🛡️ Panoramica RvbbitSafe è un prototipo di ricerca che dimostra un cambiamento di paradigma nella difesa contro il ransomware. È una fortezza attiva e multi-livello che combina virtualizzazione hardware,...

Mahoraga-Webapp-Defender

Mahoraga Webapp-Verteidiger KI-gestütztes reaktives Webapp-Verteidigungssystem, das entwickelt wurde, um KI-gestützten Angriffen in Echtzeit standzuhalten. Inhaltsverzeichnis Mahoraga Webapp-Verteidiger Inhaltsverzeichnis Einleitung Ziel-Website Mahoraga Defender Architektur Duale Umgebungen...

IntelligentProcessLifecycle

IntelligentProcessLifecycle Il ciclo di vita intelligente del processo dei difensori informatici attivi Descrizione Questa repository GitHub ospita i file relativi al poster delle categorie di falsi positivi ed errori nei servizi di security operation. L'obiettivo è definire uno standard di...

rebuff

Rebuff.ai Selbsthärtender Prompt-Injection-Detektor Rebuff wurde entwickelt, um KI-Anwendungen durch eine mehrschichtige Verteidigung vor Prompt-Injection-Angriffen PI zu schützen. Playground • Discord • Funktionen • Installation • Erste Schritte • Selbsthosting • Mitwirken • Dokumentation...

priority-intelligence-requirements-dev

Entwicklung von Priority Intelligence Requirements @ Red Hat v1.1 In der sich rasant entwickelnden Landschaft der Cyber Threat Intelligence CTI ist die Formulierung von Priority Intelligence Requirements PIRs ein entscheidender Bestandteil Ihres CTI-Programms sowie der Planungs- und...

TheDefendersGuide

O Guia do Defensor - É Perigoso Defender Sozinho, Leve Isto! O que é o Guia do Defensor? O Guia do Defensor é um projeto de Luke Paine e Jonathan Johnson para reunir todos os melhores recursos de defesa para um aspecto específico de um sistema operacional em um único lugar. Muitas vezes, como...

adversary_emulation_library

Libreria di Emulazione degli Avversari In collaborazione con i partecipanti del Centro, il MITRE Center for Threat-Informed Defense Centro mantiene una libreria di piani di emulazione degli avversari per consentire alle organizzazioni di valutare le proprie capacità difensive contro le minacce...

agentic-dm-gateway

Agentic DM Gateway Sicherheits-Kontrollebene für LLM-Agenten über private Chats typischerweise Discord-DMs. Es sitzt vor deinem Agenten. Es entscheidet, wer sprechen darf, ob die Sitzung entsperrt ist, ob der Prozess angehalten ist und ob diese Nachricht sicher genug ist, um weitergeleitet zu...

detection-defense-library

Detection Defense Library Eine konsolidierte Bibliothek für Defense-Engineering. Angriffsklassen, die Muster, die sie erkennen, die enthaltenen Sigma-Regeln und das Windows-Vertrauensgrenzen-Modell – alles in einem einzigen Repository. Dieses Repository führt vier ehemalige Schwester-Repositories...

EUVD-2026-63697

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability

...

CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability

...

Windows Remote Help Defense Spoofing Vulnerability

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...

CVE-2026-55165 Lemur : JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO with secret disclosure

Lemur manages TLS certificate creation. Prior to 1.9.2, the JWT verifier in lemur/auth/service.py:130-137 used fetchtokenheader to read headerdata"alg" from an unverified token and passed that attacker-controlled value to decodewithmultiplesecrets. PyJWT 2.x rejects alg=none with the configured...

MINI-724F-62MH-6Q8F

Bulletin has no description...

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled deep links. We observed production websites embedding hidden prompt...

Wiz at Black Hat 2026: Driving AI Threat Readiness

Announcing new capabilities that help organizations prepare for the AI era by expanding visibility and accelerating response, so security teams can defend at machine speed...

EEF-CVE-2026-66883 Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

Summary Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc\plug Oidcc.Plug.Authorize module renders the user agent session binding inert, removing a defense in depth control against replay of a stolen session. This vulnerability is associated with program fil...