awesome-soc

Awesome SOC SOC（CSIRTを含む）を構築し、運用し、成熟させるための運用ハンドブック兼ナレッジベース。以下をカバーしています： SOCの基礎 検知エンジニアリング 脅威インテリジェンス SOCメトリクス/KPI SOC自動化 AIのユースケースとベストプラクティス SOP（SOCプレイブック） これらは、SOC/CSIRTアナリストおよびチームマネージャーとしての自身の経験、ならびに著名な論文に基づく私の見解です。CERT/CSIRTよりもSOCに重点を置いています。 私のモットーは、対応（レスポンス）がなければ、検知は無意味である、というものです。...

testing-handbook

Trail of Bits テストハンドブック Trail of Bits テストハンドブックは、Trail of Bits が使用する多くの静的解析・動的解析ツールの設定、最適化、自動化に関する、開発者とセキュリティ専門家のためのリソースです。 テストハンドブックのプレビュー: https://appsec.guide 🌐 なぜこれが必要なのか？ ✨ 📃...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

wahh_extras

wahhextras The Web Application Hacker's Handbook - Extra Content For all of you who have read "The web application hacker's handbook vol2", there are several references to extras, questions, source code that are not easy to found. I've collected all in this repository. TOC Web applications...

autonomous-offensive-llm-handbook

📖 Read the handbook online : follow the lessons from your first fixture run to an agent with clear limits. The model proposes, the code disposes AUTONOMOUS SECURITY / THE BUILDER'S FIELD MANUAL Read the website · Start the course · Run the lab · Connect your model · The build sequence A practical...

hardware-compliance-handbook

Hardware Compliance Knowledge Base A fact-checked, open reference on the EU laws that govern hardware and IoT cybersecurity — CRA, RED, NIS2, and the Cybersecurity Act/EUCC, in one place instead of four. Prepared by Platanor Technologies platanor.com — an embedded security firm for IoT device...

Cybersecurity-Handbook v2.0

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

From Tabletop to Turnkey: Building Cyber Resilience in Financial Services

Introduction Financial institutions are facing a new reality: cyber-resilience has passed from being a best practice to an operational necessity to a prescriptive regulatory requirement. Crisis management or Tabletop exercises, for a long time relatively rare in the context of cybersecurity, have...

EUVD-2014-7443

Malware in sbrugna...

ABB Busch-Welcome 2 Wire Door Opener Actuator

SUMMARY ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed 2. MITIGATING FACTORS ABB recommends double check...

CISA: Dams Sector Crisis Management Handbook

The Dams Sector Crisis Management Handbook 2025 introduces crisis management concepts, explains how crisis management measures are an important component of an overall risk management framework, and highlights guidelines to apply these concepts to dams and related infrastructure...

​​Explore practical best practices to secure your data with Microsoft Purview​​

According to the Microsoft 2024 Data Security Index, organizations experience an average of 156 data security incidents annually, and this cyberthreat continues to be a top concern for data security decision-makers.1 A full 82% of security decision-makers believe a comprehensive, fully integrated...

Malicious code in defi-handbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8160c8cc94eeeb56db2b1b93ced943ad36eaba53c64c82a994bda43d14ab4dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2503 Malicious code in defi-handbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8160c8cc94eeeb56db2b1b93ced943ad36eaba53c64c82a994bda43d14ab4dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Schneider Electric Data Center Expert

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.6 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : Data Center Expert Vulnerability : Improper Verification of Cryptographic Signature, Missing Authentication for Critical Function 2. RISK EVALUATION Successful...

GitLab: Remove obsolete domain from handbook subdomain

Vulnerability description not provided...

OWASP Mobile Top 10

Unraveling the Key Components of the Renowned OWASP Mobile Top 10 Index The altruistic initiative, Open Network Application Defense Plan ONADP, spearheads a cluster of operations in its mission to enhance the level of software protection. A cardinal tool emerging from their efforts, The OWASP...

Over 100 WordPress Repository Plugins Affected by Shortcode-based Stored Cross-Site Scripting

On August 14, 2023, the Wordfence Threat Intelligence team began a research project to find Stored Cross-Site Scripting XSS via Shortcode vulnerabilities in WordPress repository plugins. This type of vulnerability enables threat actors with contributor-level permissions or higher to inject...

Malicious code in handbook-epub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3555 Malicious code in handbook-epub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5edd736393f9c1bdbfd02f3d1a92f23913f61168099b0602f974509d6c91179a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...