206 matches found
Compromised-Org-Chart-Generator
손상된 조직도 생성기 개요 Active Directory는 조직에서 ID 공급자로 사용됩니다. 여기에는 모든 직원의 이름, 직급, 부서 및 관리자 정보가 포함됩니다. 비밀번호 감사는 취약점과 위험을 발견하는 데 도움이 될 수 있습니다. 소수의 비밀번호로 비밀번호 스프레이 공격을 시도할 수 있습니다. 또는 hashcat을 사용하여 사용자 해시에 대한 사전 공격을 실행할 수 있습니다. 또한 https://haveibeenpwned.com 같은 서비스로부터 유출 정보를 얻을 수 있습니다. 그런 경우 위험에 처한 사용자 목록을 얻게...
vinifera
Vinifera - GitHub 내부 유출 모니터링 GitHub 모니터링 도구 🤖 우리는 2019년 12월부터 프로덕션에서 Vinifera를 사용해 왔으며, 이를 통해 보안 사고를 예방할 수 있었습니다. Vinifera는 공개 기여의 보안 위생을 보장하고 GitHub에서 잠재적인 유출을 모니터링하기 위해 내부 프로젝트로 시작되었습니다. 우리는 이것이 다른 기업들이 GitHub와 같은 공개 출처에 대한 보안 위생을 강화하는 데 도움이 될 것이라고 믿습니다. Vinifera란 무엇인가요? Vinifera는 기업/조직이 공개 자산을...
rev-dep
Rev-dep Capabilities • Installation • Documentation • Exploratory Toolkit • Newsletter Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI. About 📣 As codebases scale, maintaining...
watermarks-remover v0.5.0
| | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files — for privacy and hygiene on content you own. The skill is a thin client:...
MAL-2026-10390 Malicious code in timmytuffknuckles9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342d7a44db99769023685647376a6042d5a9b345c281826484c9d88561f245ca Package is not a Node library — package.json declares main: sw.js, a browser Service Worker whose first line calls importScripts'./8cfc2/hgshm.js'...
StealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them
In this article 1. The role of infostealers: From credential theft to intrusion 2. StealC: Infostealer for rent 3. Amadey: Malware-as-a-service for delivery of infostealers 4. Defending against StealC and Amadey intrusions 5. Microsoft Defender detections 6. Indicators of compromise Infostealers...
The-Full-Attack-Chain
⚔️ The Full Attack Chain — Capstone Red Team Engagement Int...
Exploit for CVE-2020-25078
ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ EDUCATIONAL...
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency CISA maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive...
VibeGuard: A Security Gate Framework for AI-Generated Code
"Vibe coding," in which developers delegate code generation to AI assistants and accept the output with little manual review, has gained rapid adoption in production settings. On March 31, 2026, Anthropic's Claude Code CLI shipped a 59.8 MB source map file in its npm package, exposing roughly...
CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization
CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the March 11, 2026 cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.1 To defend against similar malicious cyber...
Identity Prioritization isn't a Backlog Problem - It's a Risk Math Problem
Most identity programs still prioritize work the way they prioritize IT tickets: by volume, loudness, or “what failed a control check.” That approach breaks the moment your environment stops being mostly-human and mostly-onboarded. In modern enterprises, identity risk is created by a compound of...
Identity Cyber Scores: The New Metric Shaping Cyber Insurance in 2026
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when assessing cyber risk. For many organizations, however, these assessments remain largely opaque. Elements such as password hygiene,...
Cybersecurity strategies to prioritize now
The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
Cybersecurity strategies to prioritize now
The Deputy CISO blog series is where Microsoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...
Do robots dream of secure networking? Teaching cybersecurity to AI systems
This blog explores how to equip autonomous AI agents with cybersecurity knowledge, enabling them to make informed decisions about internet safety, such as identifying trustworthy links and websites. It demonstrates a proof of concept using LangChain and OpenAI, integrated with the Cisco Umbrella...
[SECURITY] Fedora 43 Update: rust-quote-use-0.8.4-2.fc43
Support use in procmacros hygienically...
[SECURITY] Fedora 43 Update: rust-quote-use-macros-0.8.4-1.fc43
Support use in procmacros hygienically...