Reel

Reel Фреймворк для симуляции фишинга и повышения осведомленности о безопасности с настраиваемыми рабочими процессами, управлением кампаниями и опциональным прокси для учетных данных. Быстрый старт для эксплуатации 1. Клонируйте репозиторий и перейдите в него с помощью cd. 2. Запустите ./deploy.sh...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

camjacking-templates

CamJacking CamJacking — это фреймворк для обучения и симуляции по повышению осведомлённости о безопасности , разработанный, чтобы помочь организациям обучать пользователей рискам, связанным с разрешениями камеры и безопасностью браузера, а также распознаванию методов социальной инженерии в...

Security-Champions

Руководство OWASP по Security Champions Используем MKDocs для размещения нашего контента рядом со страницей проекта OWASP на https://securitychampions.owasp.org/. Вдохновлено https://github.com/OWASP/API-Security и https://github.com/OWASP/Top10/tree/master/2021. Создание локальной копии в Window...

free-interactive-ai-training-materials

Tous les fichiers ont été déplacés sous l'organisation officielle du projet. N'hésitez pas à contribuer à ce dépôt : https://github.com/ransomleak/training-security-awareness...

camjacking

Camjacking CamJacking — это фреймворк корпоративного уровня для обучения осведомлённости в области безопасности, предназначенный для моделирования реалистичных фишинговых атак, нацеленных на разрешения камеры и внимательность пользователей 🎯 Что такое CamJacking? CamJacking — это фреймворк...

Probable-Wordlists

Listes de mots probables - Version 2.0 Savez-vous quels sont les mots de passe les plus courants dans le monde ? Savez-vous à quoi ils ressemblent ? Vous voudrez les éviter pour être en sécurité ! Pensez-vous à cloner ? Ce dépôt ne contient pas de code, mais des liens vers un groupe de listes. Un...

defenselessV1

defenselessV1 Defenseless est une application web vulnérable écrite en PHP/MySQL. Il s'agit de la première version de cette application. Son but est de sensibiliser les développeurs et les novices en sécurité des applications aux problématiques de sécurité. Elle sera bientôt mise à jour avec...

gophish

Gophish Gophish : Kit de Phishing Open-Source Gophish est un kit de phishing open-source conçu pour les entreprises et les testeurs d'intrusion. Il offre la possibilité de configurer et d'exécuter rapidement et facilement des campagnes de phishing et des formations de sensibilisation à la sécurit...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

Best Security Awareness Platforms for Personalized Employee Training

Comparing five leading security awareness platforms, based on the level of personalization they offer...

First-Person Identity Theft Story

Harrowing story of an identity theft victim. Yes, the person made a mistake--they gave the scammer a two-factor authentication code that allowed the scammer to take over their email address. But the real story here is how, for many of us, the security of most of our accounts hangs on the security...

Exploit for CVE-2026-61498

cve-id ⚡ Simple Usage Use this project only in safe and...

From Preventive to Reactive: How AI Coding Assistants Transform Developers' Security Awareness

AI coding assistants are now central to professional software development, yet their impact on how developers think about and practice security remains poorly understood. While prior work has documented vulnerability rates in AI-generated code, a more fundamental question persists: how do these...

Comprehensive List of User Deception Techniques in Emails

Email remains a central communication medium, yet its long-standing design and interface conventions continue to enable deceptive attacks. This research note presents a structured list of 42 email-based deception techniques, documented with 64 concrete example implementations, organized around th...

CISO Spotlight: Dimitris Georgiou on Building Security that Serves People First

Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked ...

Apeman Cameras

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

Women’s History Month: Encouraging women in cybersecurity at every career stage

Women’s History Month—and International Women’s Day on March 8, 2026—always gives me pause for reflection. It’s a moment to think about how far we’ve come and think about who we choose to uplift as we look ahead. Throughout my career, I’ve been inspired by extraordinary women leaders—trailblazers...

CVE-2025-6592

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...