Version: Lenovo Updater Version <= 5.08.01.0009
Operating System Tested On: Windows 10 22H2 (x64)
Vulnerability: Lenovo System Updater…

In the realm of physical penetration testing, having the right tools at your disposal is imperative for uncovering vulnerabilities within security systems.

Academic researchers created a new speculative side-channel attack they named iLeakage that works on all recent Apple devices and can extract sensitive information from the Safari web browser.

Documentation and guidance to practice secure coding for various PLC vendors - Fortiphyd/Secure_PLC_Coding

Notes from my large Squid audit: 55 vulnerabilities, many still unfixed, links to detailed writeups, and a reminder to re-evaluate Squid in sensitive environments.

Penetration-List: A comprehensive resource for testers, covering all types of vulnerabilities and materials used in Penetration Testing. Includes payloads, dorks, fuzzing materials, and offers in-d...

In this video Christopher Lutat, open-appsec Product Manager provides a deep deep dive into the inner mechanics of open-appsec contextual machine learning engine.

For additional details refer to the White Paper - https://www.openappsec.io/whitepaper

This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structure to give brief details about them - Ignitetechnologies/Mindmap

Don’t look now, but cybersecurity training isn’t good enough. Here's what it tends to get wrong, and how to get it right.

Microsoft announced a $5 billion investment over two years in Australia that will see the vendor collaborate with the Australian Signals Directorate on the cyber shields’ initiative.

This repo is about Active Directory Advanced Threat Hunting - tomwechsler/Active_Directory_Advanced_Threat_Hunting

Project that is used for the cyber community. Inside contains templates for phishing emails that can be incorporated in phishing simulations. - reannaschultz/PhishingSimulation

A sophisticated cross-platform malware platform named StripedFly flew under the radar of cybersecurity researchers for five years, infecting over a million Windows and Linux systems during that time.

.NET is a standard software platform that manages executable code. With .NET 7, Microsoft further advanced their .NET Core infrastructure…

A well-known credential dumping technique allows attackers to siphon Active Directory credentials. Learn how this attack works & how to detect it.

As per Mitre ATT&CK, ID S0154 tracks Cobalt Strike as a “commercial, full-featured, remote access tool that bills itself as “adversary…