3993 matches found
purple-team-exercise-framework
Purple Team Exercise Framework PTEF El Purple Team Exercise Framework PTEF es la metodología estándar de la industria para diseñar y ejecutar ejercicios de seguridad colaborativos que reúnen a la Inteligencia de Amenazas Cibernéticas CTI, los Red Teams y los Blue Teams. Los Purple Team Exercises...
physical-bitcoin-attacks
Ataques físicos conocidos a Bitcoin Una lista de ataques conocidos contra entidades propietarias de Bitcoin / activos criptográficos que ocurrieron en el mundo físico. NOTA: esta lista no es exhaustiva; muchos ataques no se reportan públicamente. Si conoces algún ataque que no esté listado, por...
csaf
The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...
mvt
Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...
pytm
pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...
amlsec
使用基于AutomationML的工程数据自动识别信息物理生产系统中的安全风险 该原型实现了以下两篇论文中提出的方法： 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. 使用基于AutomationML的工程数据自动识别安全风险. IEEE Transactions on Dependable and Secure Computing. 2. Eckhart, M., Ekelhart, A., Biffl S., Lüder A., & Weippl, E. R. 2022...
tcpflow
TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say root@kitploit: sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say...
network-threats-taxonomy
网络威胁与工具分类法 基于机器学习的入侵检测系统由于缺乏准确代表网络流量及其相关威胁的数据集而难以评估。在本项目中，我们尝试通过提出两个分类法——“入侵检测系统设计技术、网络威胁与数据集分类法及综述”和“用于入侵检测系统的恶意流量分类法”——来解决这一问题，对威胁进行分类并评估当前数据集。结果表明，目前大量已发表的研究使用过时的数据集和过时的威胁来训练入侵检测算法。为此，我们提供了威胁分类法的源代码，使其他研究人员能够贡献和修改它。 该分类法是阿伯泰大学、思克莱德大学、海军学院研究所和米德尔塞克斯大学（毛里求斯校区）之间的合作成果。 分类法结构 该分类法根据以下维度对每种网络威胁进行分类...
ai-kill-chain
面向AI时代威胁的扩展版网络杀伤链（Cyber Kill Chain） 为应对针对LLM与智能体AI攻击的防御者，对洛克希德·马丁（Lockheed Martin）网络杀伤链进行的更新。新增了一个针对模型供应链攻陷的预攻击阶段。在原有的七个阶段中，为每个阶段增加了AI特定的子技术。并将"目标行动（Actions on Objectives）"阶段拆分为三个并列的子阶段：经典数据窃取、模型提取和智能体横向移动。 作者：Gourav Nagar 版本：1.0 日期：2026年5月19日 仓库：https://github.com/gouravnagar-infosec/ai-kill-cha...
investigations
调查 本仓库包含从国际特赦组织针对人权捍卫者遭受定向威胁的部分技术调查中提取的危害指标。 这些指标根据 CC-BY 许可协议共享。...
linux-malware-detect
Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...
quarantyne
=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...
dmz-security-monitoring-hardening
Monitoreo de seguridad y endurecimiento de la DMZ CY376: Monitoreo de redes, seguridad y auditoría — Proyecto de fin de semestre Blue Team | Universidad de Minas y Tecnología, Tarkwa Autor: Kennedy Kumi Holomah Número de índice: FCM.41.018.148.23 ID de estudiante: 9013004623 Descripción general...
Why Generative AI Needs a New Kind of Security
This is Post 2 of a three-part series. Start withPost 1: Agentic AI Security: The Chatbot Era Is Over, then continue to Post 3: OWASP LLM Top 10: What Comes Next – Agentic & MCP. There is a moment every CISO is having right now, often without warning. A developer shows a working internal demo of ...
XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns
XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards...
We rebuilt Malwarebytes Mobile Security for the scams of today
Nearly half of people encounter a scam on their phone every single day. Malwarebytes is doing something about it. That figure comes from a 2025 Malwarebytes survey of 1,300 respondents across the US and Europe. The results paint a troubling picture. A quarter of the victims surveyed reported bein...
A week in security (July 20 – July 26)
Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...
Agentless Threat Detection: Illuminating Cloud Blind Spots
How Agentless Workload Detection exposes hidden threats in virtual appliances and modern cloud networks...
MAL-2026-10430 Malicious code in prettier-plugin-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4c522699877c1eca1bb9c838a443e3c4bfa21950cf5c5b1d23182ae91a534e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
