PGLinks

https://owasp.org/www-project-threat-dragon/

OWASP Threat Dragon is a threat modeling tool; great for both developers and defenders alike. Use on your desktop or as a web application.

cyber import-20250527224135 security threat

Added 1 month ago

Platform Engineering Is Security Engineering

https://www.darkreading.com/application-security/platform-engineering-is-security-engineering

application security cyber engineering import-20250527224135 platform security

Added 1 month ago

The Australian government has introduced new cyber security laws. Here’s what you need to know

https://theconversation.com/the-australian-government-has-introduced-new-cyber-security-laws-heres-what-you-need-to-know-240889

The long-awaited law, if passed, will be Australia’s first standalone cyber security act.

cyber import-20250527224135 security

Added 1 month ago

Have I Been Pwned 2.0 is Now Live!

https://www.troyhunt.com/have-i-been-pwned-2-0-is-now-live/

This has been a very long time coming, but finally, after a marathon effort, the brand new Have I Been Pwned website is now live! Feb last year is when I made the first commit to the public repo for the rebranded service, and we soft-launched the new brand in

cyber data breach import-20250527224135 passwords security

Added 1 month ago

dns recon & research -find & lookup dns records

https://dnsdumpster.com/

Free domain research tool to discover hosts related to a domain. Find visible hosts from the attackers perspective for Red and Blue Teams.

cyber dns import-20250527224135 security

Added 1 month ago

CVE Foundation

https://www.thecvefoundation.org/home

The Common Vulnerabilities and Exposures (CVE) Program has become the cornerstone of vulnerability management. Nearly all technology vendors and service providers identify vulnerabilities with CVEs when they publish security advisories. Most security products and services related to vulnerabilities

cyber import-20250527224135 management security vulnerability

Added 1 month ago

Covert Web-to-App Tracking via Localhost on Android

https://localmess.github.io/

Facebook and Yandex link Web and App usage via a localhost network connection

cyber privacy security

Added 1 month ago

Enhancing your DevSecOps with Wazuh. The open source XDR platform

https://www.bleepingcomputer.com/news/security/enhancing-your-devsecops-with-wazuh-the-open-source-xdr-platform/

Security shouldn't wait until the end of development. Wazuh brings real-time threat detection, compliance, and vulnerability scanning into your DevOps pipeline—powering a stronger DevSecOps strategy from day one. Learn more about how Wazuh can help secure your development cycle.

cicd cyber devsecops import-20250527224135 security siem

Added 1 month ago

Threagile — Agile Threat Modeling Toolkit

https://threagile.io/

Threagile enables teams to execute Agile Threat Modeling as seamless as possible, even highly-integrated into DevSecOps environments.

cyber import-20250527224135 security threat

Added 1 month ago

OpenSSF Adds Minder as a Sandbox Project to Simplify the Integration and Use of Open Source Security

https://openssf.org/blog/2024/10/28/openssf-adds-minder-as-a-sandbox-project-to-simplify-the-integration-and-use-of-open-source-security-tools/

cyber import-20250527224135 management open source security vulnerability

Added 1 month ago

Google launches Sec-Gemini v1. A new experimental cybersecurity model

https://security.googleblog.com/2025/04/google-launches-sec-gemini-v1-new.html?m=1

ai cyber import-20250527224135 security

Added 1 month ago

Scammers impersonating the ASD's ACSC | Cyber.gov.au

https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/email-scammers-impersonating-asds-acsc

Scammers are impersonating the ASD's ACSC sending out phishing emails to the public with the email content suggesting to download a malicious antivirus program.

cyber phishing security

Added 1 month ago

@bagder.mastodon.social.ap.brid.gy on Bluesky

https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3ltodxecunfy2

It has officially begun. The CRA info request counter is no longer at zero.

compliance cyber open source security technology

Added 6 days ago

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with-near-record-6-3-tbps-ddos/

KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3 terabits of data per second (a terabit is one trillion bits of data). The brief attack appears to have been…

cyber ddos import-20250527224135 security

Added 1 month ago

Bypassing airport security via SQL injection

https://ian.sh/tsa

We discovered a serious vulnerability in the Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs used by the Transportation Security Administration.

cyber import-20250527224135 security vulnerability

Added 1 month ago

https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog

cyber import-20250527224135 security ssh

Added 1 month ago

Securing CI/CD workflows with Wazuh

https://thehackernews.com/2025/05/securing-cicd-workflows-with-wazuh.html?m=1

cicd cyber import-20250527224135 security

Added 1 month ago

GitHub - OperantAI/woodpecker: Red Teaming for AI and Cloud

https://github.com/OperantAI/woodpecker

Red Teaming for AI and Cloud. Contribute to OperantAI/woodpecker development by creating an account on GitHub.

cyber pentest security

Added 1 month ago

Critical Unauthenticated RCE Flaw Impacts all GNU/Linux systems

https://cybersecuritynews.com/critical-unauthenticated-rce-flaw/

Critical Unauthenticated RCE Flaw, no Common CVE identifiers have been assigned yet, although experts suggest there should be at least three to six.

cyber import-20250527224135 linux security vulnerability

Added 1 month ago

NIST Drops Password Complexity Mandatory Reset Rules

https://www.darkreading.com/identity-access-management-security/nist-drops-password-complexity-mandatory-reset-rules

cyber import-20250527224135 passwords security standard

Added 1 month ago

How open source SIEM and XDR tackle evolving threats

https://www.bleepingcomputer.com/news/security/how-open-source-siem-and-xdr-tackle-evolving-threats/

Evolving threats require security solutions that match the sophistication of modern threats. Learn more about how Wazuh, the open-source XDR and SIEM, tackles these threats.

cyber import-20250527224135 malware security siem xdr

Added 1 month ago

The CVE program for tracking security flaws is about to lose federal funding

https://www.theverge.com/news/649314/cve-mitre-funding-vulnerabilities-exposures-funding

The federally funded organization behind the Common Vulnerabilities and Exposures (CVE) program confirmed that its contract to support the system will expire on April 16th.

cyber import-20250527224135 security

Added 1 month ago

Kali GPT- AI Assistant That Transforms Penetration Testing on Kali Linux

https://cybersecuritynews.com/kali-gpt/

Kali GPT, a specialized AI model built on GPT-4 architecture, has been specifically developed to integrate seamlessly with Kali Linux, offering unprecedented support for offensive security professionals and students alike.

ai cyber llm pentest security

Added 1 month ago

Defending the Internet: how Cloudflare blocked a monumental 7.3 Tbps DDoS attack

https://blog.cloudflare.com/defending-the-internet-how-cloudflare-blocked-a-monumental-7-3-tbps-ddos/

In mid-May 2025, blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps).

cyber ddos security technology

Added 4 weeks ago