amlsec

AutomationML 기반 엔지니어링 데이터를 활용한 사이버-물리 생산 시스템의 자동화된 보안 위험 식별 이 프로토타입은 다음 두 논문에서 제시된 방법을 구현합니다. 1. Eckhart, M., Ekelhart, A., & Weippl, E. R. 2020. Automated Security Risk Identification Using AutomationML-Based Engineering Data. IEEE Transactions on Dependable and Secure Computing. 2. Eckhart, M.,...

physical-bitcoin-attacks

Known Physical Bitcoin Attacks A list of known attacks against Bitcoin / crypto asset owning entities that occurred in meatspace. NOTE: this list is not comprehensive; many attacks are not publicly reported. If you are aware of an attack that is not listed, please open an issue or pull request —...

purple-team-exercise-framework

パープルチーム演習フレームワーク PTEF Purple Team Exercise Framework PTEF は、サイバー脅威インテリジェンス CTI、レッドチーム、ブルーチームを結集した協調型セキュリティ演習を設計・実行するための業界標準の方法論です。 パープルチーム演習は、組織の実際のサイバー攻撃に対する回復力をテスト、測定、改善するための効率的な方法です。このフレームワークは以下をカバーしています: パープルチーム演習 - アドホックな協調演習 運用型パープルチーム - 継続的な仮想チームでの取り組み 専任パープルチーム - 専任スタッフによる役割 v4 の新機能...

ai-kill-chain

AI 시대 위협을 위한 확장된 사이버 킬 체인 LLM 및 에이전트형 AI 공격에 대응하는 방어자를 위한 Lockheed Martin 사이버 킬 체인의 업데이트. 모델 공급망 침해를 위한 사전 공격 단계를 추가한다. 원래 일곱 단계 각각에 AI 특화 하위 기법을 추가한다. Actions on Objectives 단계를 세 개의 동등한 하위 단계로 분할한다: 전통적 데이터 유출, 모델 추출, 에이전트형 피벗. 저자: Gourav Nagar 버전: 1.0 날짜: 2026년 5월 19일 저장소:...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...

mvt

Mobile Verification Toolkit !IMPORTANT We recently merged the "v3" branch. This introduced breaking changes. If you relied on mvt output in other scripts They might have broken. More details: https://github.com/mvt-project/mvt/issues/757 Mobile Verification Toolkit MVT is a collection of utilitie...

tcpflow

TCPFLOW 1.5.0 Downloads directory: http://digitalcorpora.org/downloads/tcpflow/ Installation Most common GNU/Linux distributions ship tcpflow in their repositories. So on Debian/Ubuntu/etc you can say sudo apt-get install tcpflow and on Fedora/RedHat/CentOS/etc you can say sudo dnf install tcpflo...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

network-threats-taxonomy

네트워크 위협 및 도구 분류체계 머신러닝 기반 침입 탐지 시스템은 네트워크 트래픽과 관련 위협을 정확하게 대표하는 데이터셋의 부족으로 인해 평가하기 어렵습니다. 이 프로젝트에서는 두 가지 분류체계인 "A Taxonomy and Survey of Intrusion Detection System Design Techniques, Network Threats and Datasets"와 "A Taxonomy of Malicious Traffic for Intrusion Detection Systems"를 제시하여 위협을 분류하고 현재...

investigations

조사 이 저장소에는 인권 옹호자를 대상으로 한 표적 위협에 관한 국제앰네스티Amnesty International의 기술 조사 중 일부에서 추출한 침해 지표IoC가 포함되어 있습니다. 이 지표들은 CC-BY 라이선스에 따라 공유됩니다...

linux-malware-detect

Linux Malware Detect LMD Malware scanner for Linux — multi-stage threat detection MD5, SHA-256, HEX, YARA, statistical analysis, ClamAV integration, real-time inotify monitoring, quarantine/clean/restore operations, and multi-channel alerting email, Slack, Telegram, Discord. C 2002-2026, R-fx...

quarantyne

=== THIS PROJECT IS ARCHIVED === Quarantyne · Modern Web Firewall 🛃 Automated web security made simple TL;DR Quarantyne is a reverse-proxy that protects web applications and APIs from fraudulent behavior, misuse, bots and cyber-attacks in real-time. Requirements Presentation Features Coverage...

dmz-security-monitoring-hardening

DMZ 보안 모니터링 및 강화 CY376: 네트워크 모니터링, 보안 및 감사 — 학기말 프로젝트 Blue Team | University of Mines and Technology, Tarkwa 저자: Kennedy Kumi Holomah 색인 번호: FCM.41.018.148.23 학생 ID: 9013004623 개요 이 프로젝트는 완전히 격리된 VMware Workstation 실습 환경에서 pfSense 방화벽 뒤에 호스팅된 공개용 Ubuntu/Apache 웹 서버를 호스팅하는 비무장지대DMZ를 구축하고, 보호하며,...

awesome-latency-attacks

Awesome ディープラーニング レイテンシ攻撃 & 防御 このリポジトリは、サーベイ論文 「Deep Learning Latency Attacks and Defenses: A Cross-Domain Survey」 の補助リソースとして維持されています。展開された AI システムにおけるレイテンシ指向の可用性脅威に関する論文、コードリンク、分類ノート、図を索引化しています。 このリストは、モデルの予測を変えるだけの攻撃ではなく、推論時またはシステムレベルのコスト — レイテンシ、エネルギー、スループット圧迫、デッドライン超過 —...

Autonomous OSS Threat Detection Via Taxonomy-Aligned LLMs

Open source software OSS ecosystems face growing threats from sophisticated supply chain attacks including typosquatting, dependency confusion, Trojan Source obfuscation, malicious build injection, and CI/CD pipeline poisoning. Existing detection approaches rely on signature-based tools and...

IT threat evolution in Q2 2026. Non-mobile statistics

IT threat evolution in Q2 2026. Non-mobile statistics IT threat evolution in Q2 2026. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...

Why Generative AI Needs a New Kind of Security

This is Post 2 of a four-part series: Post 1: Agentic AI Security: The Chatbot Era Is Over Post 3: The OWASP LLM Top 10 Was the Warm-Up: What Comes Next Post 4: OWASP LLM Top 10 2026: Every Move Points the Same Direction There is a moment every CISO is having right now, often without warning. A...

XRP Volatility Surges as Cybersecurity Threats and Market Changes Raise New Concerns

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards...

We rebuilt Malwarebytes Mobile Security for the scams of today

Nearly half of people encounter a scam on their phone every single day. Malwarebytes is doing something about it. That figure comes from a 2025 Malwarebytes survey of 1,300 respondents across the US and Europe. The results paint a troubling picture. A quarter of the victims surveyed reported bein...

A week in security (July 20 – July 26)

Last week on Malwarebytes Labs: Don’t get fooled by TikTok resin art scams Call of Duty Mobile scam uses fake free points to steal player accounts OpenAI’s agent escaped its sandbox during a security test Google wants to store a selfie video of your face Beyond the Play Store: How Android threats...