202 matches found
public-research
Nokia Deepfield ERT — public research Threat research from the Nokia Deepfield Emergency Response Team ERT, focused on DDoS botnets and related infrastructure. Each directory covers a botnet family with a brief summary and machine-readable indicators of compromise IoCs. This repo consolidates pri...
subcrawl
SubCrawl SubCrawl is a framework developed by Patrick Schläpfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...
threat-research-and-intelligence
完全版インテリジェンスブログ | ブログ版レポート | レポート版要約 | 公開講演 ℹ️ :: 概要 このリポジトリは、BlackBerry Threat Research & Intelligence チームが公開した脅威インテリジェンスレポートから、IOC、YARA ルール、ソースコードを提供するためのものです。 スクリーンショットを含む完全な詳細レポートは ➡️ こちら 関連IOCを含む簡潔なブログ形式のレポートは ➡️ こちら 完全な詳細レポートの要約とIOCは ➡️ こちら 🔍 :: YARA ルール YARA...
Security-Datasets
보안 데이터셋 Security Datasets 프로젝트는 다양한 플랫폼의 악성 및 정상 데이터셋을 정보 보안 커뮤니티에 제공하여 데이터 분석 및 위협 연구를 촉진하는 오픈소스 이니셔티브입니다. 문서 https://securitydatasets.com 목표 데이터 분석 개발을 가속화하기 위해 개방형 이식 가능한 데이터셋을 제공합니다. 적 기술 시뮬레이션을 용이하게 하고 가속화합니다. 전 세계 보안 분석가가 실제 데이터로 기술을 테스트할 수 있도록 합니다. 탐지 분석의 테스트 및 검증을 더 쉽고 실용적이며 모듈화되고 저렴한 방식으...
threatresearch
threatresearch このリポジトリを「Nuclear Football Codes」と名付けようと思ったが、多数決で負けた。。...
threat-research
このリポジトリには、Threatray の脅威リサーチに関連する IoC と YARA ルールが含まれています。詳細はこちら: https://www.threatray.com/blog 最新情報、リサーチのハイライト、分析に関する洞察については、X Twitter でフォローしてください: https://x.com/ThreatrayLabs リポジトリは記事ごとに構成されており、リサーチ固有の IoC、ルール、および関連スクリプトが含まれています。 提供されるすべてのルールは、LICENSE.md に記載されている Detection Rule License DRL...
100_days_of_kql_2026
100 Days of KQL 2026 イニシアチブ 必要条件: GitHubアカウントを作成する リポジトリ名を 100daysofkql にして作成する（例: https://github.com/m4nbat/100daysofkql2026） readme.md を作成し、以下の行を追加する: 100DaysOfKQL2026 Master repo with instructions: https://github.com/m4nbat/100daysofkql2026/...
Who’s Tracking You? Use This New Service to Find Out
It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of...
CVE-2026-61923
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:45:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:35+00:00| seen|...
Preview: Cisco Talos at Black Hat USA 2026
We're looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth 2633 during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powe...
Malicious Package
Overview graphnetworkx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview graphex is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview bignum is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview bignumberx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview graphkitx is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview terminalcolor256 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview netstruct is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
WizExtend is Here: AI and Cloud Security Insights in Your Daily Workflow
Get risk insights and take remediation actions right from your in-browser CSP portal, VCS console, or as you’re reading up on the latest threat research...
Bill Largent: On epic reads, lifelong learning, and empathy
Welcome to another episode of Humans of Talos! This week, Amy sits down with William Bill Largent from the Strategic Planning and Communications team. Bill's role as Senior Security Researcher spans from threat research to communicating Talos's critical work to internal teams, partners, and...
AutoMalDesc: Large-Scale Script Analysis for Cyber Threat Research
Generating thorough natural language explanations for threat detections remains an open problem in cybersecurity research, despite significant advances in automated malware detection systems. In this work, we present AutoMalDesc, an automated static analysis summarization framework that, followin...