csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

free-interactive-ai-training-materials

Все файлы были перемещены в официальную организацию проекта. Пожалуйста, не стесняйтесь вносить вклад в этот репозиторий: https://github.com/ransomleak/training-security-awareness...

Reel

Reel Фреймворк для симуляции фишинга и повышения осведомленности о безопасности с настраиваемыми рабочими процессами, управлением кампаниями и опциональным прокси для учетных данных. Быстрый старт для эксплуатации 1. Клонируйте репозиторий и перейдите в него с помощью cd. 2. Запустите ./deploy.sh...

gophish

Gophish Gophish: Открытый набор инструментов для фишинга Gophish — это открытый инструментарий для фишинга, предназначенный для бизнеса и пентестеров. Он позволяет быстро и легко настраивать и проводить фишинговые кампании и обучение по повышению осведомлённости в области безопасности. Установка...

gophish

Gophish Gophish: Open-Source Phishing Toolkit Gophish is an open-source phishing toolkit designed for businesses and penetration testers. It provides the ability to quickly and easily setup and execute phishing engagements and security awareness training. Install Installation of Gophish is...

camjacking

Camjacking CamJacking — это фреймворк корпоративного уровня для обучения осведомлённости в области безопасности, предназначенный для моделирования реалистичных фишинговых атак, нацеленных на разрешения камеры и внимательность пользователей 🎯 Что такое CamJacking? CamJacking — это фреймворк...

camjacking-templates

CamJacking CamJacking — это фреймворк для обучения и симуляции по повышению осведомлённости о безопасности , разработанный, чтобы помочь организациям обучать пользователей рискам, связанным с разрешениями камеры и безопасностью браузера, а также распознаванию методов социальной инженерии в...

Security-Champions

Руководство OWASP по Security Champions Используем MKDocs для размещения нашего контента рядом со страницей проекта OWASP на https://securitychampions.owasp.org/. Вдохновлено https://github.com/OWASP/API-Security и https://github.com/OWASP/Top10/tree/master/2021. Создание локальной копии в Window...

Probable-Wordlists

Probable Wordlists - Version 2.0 Do you know what the world's most common passwords are? Do you know what they look like? You'll want to avoid them to be secure! Thinking of Cloning? This repository does not contain code, but links to a group of lists. A clone may not be necessary to get the file...

defenselessV1

defenselessV1 Defenseless — это уязвимое веб-приложение, написанное на PHP/MySQL. Это первая версия этого приложения. Цель этого приложения — повысить осведомленность о безопасности среди разработчиков и новичков в области безопасности приложений. Вскоре оно будет обновлено с добавлением новых...

training-security-awareness

Free Security Awareness Training for Employees — Open Source Interactive SCORM Library 130+ free, open-source security awareness training exercises for employees — hands-on, interactive SCORM modules covering phishing awareness training, phishing simulation, GDPR training, EU AI Act compliance, A...

First-Person Identity Theft Story

Harrowing story of an identity theft victim. Yes, the person made a mistake--they gave the scammer a two-factor authentication code that allowed the scammer to take over their email address. But the real story here is how, for many of us, the security of most of our accounts hangs on the security...

Exploit for CVE-2026-61498

cve-id ⚡ Simple Usage Use this project only in safe and...

From Preventive to Reactive: How AI Coding Assistants Transform Developers' Security Awareness

AI coding assistants are now central to professional software development, yet their impact on how developers think about and practice security remains poorly understood. While prior work has documented vulnerability rates in AI-generated code, a more fundamental question persists: how do these...

Comprehensive List of User Deception Techniques in Emails

Email remains a central communication medium, yet its long-standing design and interface conventions continue to enable deceptive attacks. This research note presents a structured list of 42 email-based deception techniques, documented with 64 concrete example implementations, organized around th...

CISO Spotlight: Dimitris Georgiou on Building Security that Serves People First

Dimitris Georgiou has been a self-professed computer geek since the early 80s. At university, he studied the convergence of educational technology with computer science as part of his psychology MA – finding, to his disbelief, that systems were perilously insecure. Since then, he’s always worked ...

Apeman Cameras

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take control of the device or view camera feeds. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as: Minimize...

Women’s History Month: Encouraging women in cybersecurity at every career stage

Women’s History Month—and International Women’s Day on March 8, 2026—always gives me pause for reflection. It’s a moment to think about how far we’ve come and think about who we choose to uplift as we look ahead. Throughout my career, I’ve been inspired by extraordinary women leaders—trailblazers...

CVE-2025-6592

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

HardSecBench: Benchmarking the Security Awareness of LLMs for Hardware Code Generation

Large language models LLMs are being increasingly integrated into practical hardware and firmware development pipelines for code generation. Existing studies have primarily focused on evaluating the functional correctness of LLM-generated code, yet paid limited attention to its security issues...