Topic
Offensive and defensive security, vulnerability research, threat intelligence, and compliance.
security
Curated resources grouped by category.
genai.owasp.org
OWASP GenAI Security Project guidance on common risks and mitigations for applications built with large language models.
atlas.mitre.org
MITRE knowledge base of adversary tactics and techniques observed in attacks against AI-enabled systems.
www.nist.gov
NIST framework and companion resources for identifying and managing risks across the AI system lifecycle.
incidentdatabase.ai
searchable real-world incidents.
github.com
NVIDIA's LLM vulnerability scanner.
github.com
Microsoft's Python Risk Identification Toolkit for AI.
www.promptfoo.dev
eval + red-team framework, CI-friendly.
www.giskard.ai
Open-source testing framework for evaluating model quality, robustness, and security-related failure modes.
github.com
Open-source, pytest-style framework for evaluating LLM application outputs with reusable metrics and test cases.
inspect.aisi.org.uk
UK AISI's eval framework.
www.lakera.ai
prompt-injection/PII firewall.
protectai.com
ML supply-chain security.
hiddenlayer.com
Commercial platform for model scanning, runtime detection, and security monitoring across machine-learning systems.
github.com
NVIDIA, programmable rails.
github.com
Open-source toolkit providing configurable scanners and sanitizers for LLM inputs and outputs.
www.anthropic.com
Anthropic alignment & red-team research resource in AI Security & Red-Teaming.
www.apolloresearch.ai
deceptive-alignment evals.
metr.org
autonomy/capability evaluations.
www.aisi.gov.uk
UK government institute publishing AI safety evaluations, research, and testing resources.
www.nist.gov
NIST program materials on U.S. government AI safety measurement, evaluation, and standards work.
simonwillison.net
Practitioner articles tracking prompt injection research, demonstrations, and defensive design constraints.
embracethered.com
Johann Rehberger, AI red-team blog.
learnprompting.org
Learn Prompting overview of its AI red-teaming competition, challenge structure, and participating tracks.
aivillage.org
Security community and DEF CON village focused on testing, research, and education for AI systems.
saif.google
Google framework for applying secure-by-design practices to AI systems, including model, data, infrastructure, and application risks.
owasp.org
Open community producing free resources, tools, and standards for improving software security worldwide.
portswigger.net
Free, world-class web security training with hands-on labs covering every major vulnerability class.
cwe.mitre.org
MITRE's community-developed list of software and hardware weakness types used in vulnerability classification.
semgrep.dev
Static analysis tool for finding bugs and security issues in source code with a large rule registry.
zaproxy.org
Open-source DAST scanner and proxy for automatically finding security vulnerabilities in web applications.
snyk.io
Developer security platform for scanning code, dependencies, containers, and IaC for vulnerabilities.
www.sonarsource.com
SonarSource platform for static code analysis, code quality checks, and security-focused rules across many languages.
csp-evaluator.withgoogle.com
Google tool for analysing CSP header configurations and identifying common misconfigurations and bypasses.
cheatsheetseries.owasp.org
Practical, community-reviewed guidance for implementing common application security controls and avoiding recurring weaknesses.
csrc.nist.gov
NIST SP 800-218 practices for integrating secure software development activities across the development lifecycle.
dependencytrack.org
Open-source software composition analysis platform for tracking components, SBOMs, and known supply-chain risk.
codeql.github.com
Official documentation for querying code as data to identify security vulnerabilities and software defects.
cloudsecurityalliance.org
Non-profit defining cloud security best practices through research, certifications (CCSK), and the CCM framework.
prowler.com
Open-source cloud security tool for auditing, hardening, and continuous compliance across AWS, Azure, and GCP.
github.com
NCC Group's multi-cloud security auditing tool that produces an HTML report of misconfigurations.
trivy.dev
Comprehensive scanner for container images, IaC files, git repos, and Kubernetes clusters.
checkov.io
Static analysis tool for Terraform, Kubernetes, Dockerfile, and CloudFormation to catch misconfigurations pre-deploy.
falco.org
CNCF runtime security tool for detecting anomalous behaviour in containers and Kubernetes workloads.
aws.amazon.com
Centralised AWS security posture management aggregating findings from GuardDuty, Inspector, Macie, and third-party tools.
steampipe.io
Query cloud APIs with SQL; includes prebuilt compliance benchmarks for AWS, Azure, GCP, and Kubernetes.
tag-security.cncf.io
CNCF's Security Technical Advisory Group producing white papers, assessments, and guidance on cloud-native security.
kubernetes.io
Official Kubernetes guidance covering cluster, workload, pod, and API security concepts.
docs.aws.amazon.com
AWS architecture guidance for identity, detection, infrastructure protection, data protection, and incident response.
cloud.google.com
Google Cloud reference architecture for organization structure, identity, networking, logging, and security controls.
nist.gov
Voluntary framework of standards, guidelines, and practices for managing cybersecurity risk, now at version 2.0.
cisecurity.org
Prioritised set of 18 defensive security controls developed by the Center for Internet Security.
www.iso.org
International standard for information security management systems (ISMS) and its certification framework.
eur-lex.europa.eu
Official consolidated access to Regulation (EU) 2016/679, including the GDPR articles and recitals.
pcisecuritystandards.org
Governing body for PCI DSS, the payment card industry data security standard.
enisa.europa.eu
EU Agency for Cybersecurity publishing threat landscapes, guidelines, and policy recommendations across the EU.
www.aicpa-cima.com
AICPA's Service Organization Control 2 framework for auditing security, availability, and confidentiality of cloud services.
eur-lex.europa.eu
EU Network and Information Security Directive 2 expanding cybersecurity obligations to more sectors.
bsi.bund.de
German federal authority for information security, publishing technical guidelines and IT-Grundschutz.
csrc.nist.gov
NIST catalog of security and privacy controls for information systems and organizations.
www.cisa.gov
Prioritized baseline cybersecurity practices published by CISA for organizations across critical infrastructure sectors.
www.ncsc.gov.uk
UK NCSC framework for assessing cyber risk management and resilience of essential functions.
cryptopals.com
Series of cryptography challenges teaching practical breaks of real-world crypto constructions.
ssl-config.mozilla.org
Generates secure TLS configurations for nginx, Apache, HAProxy, and other servers based on Mozilla guidelines.
letsencrypt.org
Free, automated, and open certificate authority providing TLS certificates to the public.
openssl.org
The widely-used open-source toolkit for SSL/TLS and general-purpose cryptography.
doc.libsodium.org
Modern, easy-to-use cryptographic library with opinionated, hard-to-misuse APIs for encryption, signing, and hashing.
age-encryption.org
Simple, modern, and secure file encryption tool and library with a clean format specification.
sigstore.dev
Open-source project for signing, verifying, and protecting software supply chains with keyless code signing.
www.rfc-editor.org
The Internet Standards Track specification for Transport Layer Security version 1.3.
csrc.nist.gov
NIST index of approved cryptographic algorithms, implementation guidance, and transition publications.
cheatsheetseries.owasp.org
OWASP implementation guidance for password hashing, work factors, salts, peppers, and algorithm migration.
d3fend.mitre.org
Complementary framework to ATT&CK mapping defensive techniques to the offensive tactics they counter.
github.com
Generic signature format for SIEM rules enabling detection content to be shared and converted across platforms.
virustotal.github.io
Pattern-matching tool for identifying and classifying malware samples based on textual or binary patterns.
wazuh.com
Open-source security platform combining SIEM, XDR, and CSPM for endpoint detection and log analysis.
www.elastic.co
Elastic security analytics, SIEM, and endpoint capabilities built on the Elastic Stack.
greenbone.net
Open-source vulnerability scanning and management solution with a large continuously updated feed of tests.
zeek.org
Powerful network analysis framework that generates rich, structured logs for security monitoring and forensics.
atomicredteam.io
Library of tests mapped to MITRE ATT&CK for validating defensive controls and detection coverage.
securityonionsolutions.com
Open platform for network security monitoring, log management, threat hunting, and case management.
osquery.io
Open-source framework that exposes operating-system state as SQL tables for fleet visibility and investigation.
learn.microsoft.com
Microsoft Sysinternals service that records detailed process, network, and file activity to the Windows event log.
keycloak.org
Open-source identity and access management with SSO, OIDC, SAML, and fine-grained authorisation.
goauthentik.io
Self-hosted identity provider supporting OIDC, SAML, LDAP, and Radius with a modern UI.
authelia.com
Open-source authentication and authorisation server providing 2FA and SSO for reverse proxies.
developer.hashicorp.com
Official Vault documentation for secrets management, dynamic credentials, encryption services, and access policies.
pages.nist.gov
Current NIST guidance for identity proofing, authentication, federation, and authenticator assurance levels.
openid.net
Identity layer built on top of OAuth 2.0 enabling client applications to verify end-user identity.
fidoalliance.org
Industry consortium behind FIDO2, WebAuthn, and passkeys — the standard for passwordless authentication.
zitadel.com
Cloud-native, open-source IAM solution with multi-tenancy, passkeys, and audit log out of the box.
oauth.net
The authorisation framework spec and resources — RFCs, security BCP, and implementation guides.
www.w3.org
W3C specification for public-key credentials used by passkeys and phishing-resistant web authentication.
www.rfc-editor.org
IETF protocol specification for interoperable provisioning and management of identity data.
spiffe.io
CNCF project defining interoperable workload identities and attestation for distributed systems.
cheatsheetseries.owasp.org
OWASP guidance for implementing authentication, credential handling, session controls, and reauthentication.
thehive-project.org
Scalable, open-source security incident response platform with case and alert management and MISP integration.
docs.velociraptor.app
Official documentation for the endpoint visibility and DFIR platform used to collect artifacts and hunt across fleets.
www.autopsy.com
Open-source digital forensics platform with a GUI front-end to The Sleuth Kit for disk image analysis.
volatilityfoundation.org
Leading open-source memory forensics framework for analysing RAM dumps from Windows, Linux, and macOS.
ericzimmerman.github.io
Collection of free Windows forensic tools for registry analysis, prefetch, event logs, shellbags, and more.
gchq.github.io
GCHQ's browser-based data analysis "Cyber Swiss Army Knife" for encoding, encryption, and data transformation.
dfir.training
Curated directory of DFIR tools, training, and resources maintained by the community.
www.exterro.com
Exterro forensic imaging and preview tool for acquiring drives, memory, and logical evidence while preserving source integrity.
csrc.nist.gov
Current NIST guidance for integrating incident response into cybersecurity risk management.
www.cisa.gov
CISA operational playbooks for standardizing incident and vulnerability response activities.
plaso.readthedocs.io
Open-source framework for extracting and analyzing timestamped events from forensic artifacts.
ghidra-sre.org
NSA-developed free and open-source reverse engineering tool suite with a decompiler for major architectures.
rada.re
Portable reverse engineering framework and disassembler with scripting, debugging, and binary patching capabilities.
x64dbg.com
Open-source x64/x32 debugger for Windows focused on malware analysis and reverse engineering.
binary.ninja
Commercial binary analysis platform with a powerful API and collaborative features for reverse engineering.
any.run
Interactive online malware sandbox for analysing suspicious files and URLs with real-time process monitoring.
hybrid-analysis.com
Free malware analysis service powered by CrowdStrike Falcon with YARA rule matching and network indicators.
unpac.me
Automated malware unpacking service supporting 100+ packers and protectors.
remnux.org
Linux distribution curated for reverse engineering and malware analysis, with 150+ pre-installed tools.
github.com
Curated list of malware analysis tools, resources, and guides maintained by the community.
capev2.readthedocs.io
Open-source malware sandbox for automated behavioral analysis, configuration extraction, and reporting.
github.com
Mandiant-maintained Windows environment installer for reverse engineering and malware analysis tools.
malwareunicorn.org
Free reverse-engineering workshop materials covering static analysis, debugging, and common malware techniques.
suricata.io
High-performance, open-source network IDS, IPS, and network security monitoring engine.
snort.org
Pioneering open-source network intrusion detection and prevention system maintained by Cisco.
pfsense.org
Open-source firewall and router platform based on FreeBSD with enterprise-grade features.
opnsense.org
FreeBSD-based open-source firewall and routing platform with modern UI and active development community.
mxtoolbox.com
Suite of DNS, MX, DMARC, SPF, and blacklist lookup tools for diagnosing email and domain security.
ssllabs.com
Qualys free tool for deep analysis of SSL/TLS server configurations, graded A to F.
cloudflare.com
Global network providing DDoS protection, WAF, CDN, Zero Trust access, and DNS security at scale.
netbird.io
Open-source, WireGuard-based overlay network for zero-config secure peer-to-peer connectivity.
www.wireguard.com
Modern VPN protocol and open-source implementation using a compact cryptographic design.
nlnetlabs.nl
Validating, recursive, caching DNS resolver with DNSSEC support and privacy-focused configuration options.
www.manrs.org
Mutually Agreed Norms for Routing Security provides concrete actions for safer internet routing and route validation.
dnsviz.net
DNSSEC analysis tool that visualizes delegation and validation problems in DNS zones.
krebsonsecurity.com
Brian Krebs's investigative security blog known for deep reporting on cybercrime and breach investigations.
schneier.com
Bruce Schneier's blog on security, privacy, and technology policy — one of the most respected voices in security.
darkreading.com
Enterprise security news covering vulnerabilities, threats, and security strategy for IT professionals.
securityweek.com
Security industry news covering breaches, vulnerabilities, malware, and enterprise security market.
thehackernews.com
High-volume cybersecurity news site covering CVEs, breaches, hacking campaigns, and security tools.
risky.biz
Weekly information security podcast and news site with high-quality interviews and briefings.
isc.sans.edu
Daily threat intelligence updates and diary posts from SANS handlers tracking live internet threats.
reddit.com
Reddit community for technical information security content — high quality signal, minimal noise.
defcon.org
The world's largest underground hacking conference, with talks published free and a year-round community.
blackhat.com
Technical security conference series focused on advanced research, with free Briefings archives.
www.cisa.gov
Official CISA advisories on active threats, vulnerabilities, mitigations, and incident activity.
googleprojectzero.blogspot.com
Technical vulnerability research and disclosure write-ups from Google Project Zero.
www.bleepingcomputer.com
Independent technology publication with sustained reporting on ransomware, breaches, malware, and security updates.
www.usenix.org
Long-running peer-reviewed conference publishing open security research papers and presentation materials.
kali.org
Debian-based Linux distribution maintained by Offensive Security and pre-loaded with hundreds of pentesting tools.
metasploit.com
World's most used penetration testing framework; exploit modules, payloads, and post-exploitation tools.
portswigger.net
Industry-standard web application security testing platform with proxy, scanner, and intruder modules.
hackthebox.com
Online platform with intentionally vulnerable machines, labs, and Pro Labs for practising real-world attack techniques.
tryhackme.com
Browser-based learning platform with guided pentesting labs covering beginner to advanced topics.
offsec.com
Training and certification provider behind OSCP, OSEP, and other hands-on security certifications.
pentesterlab.com
Hands-on web pentesting training with real exercises, from SQL injection to deserialization.
nmap.org
Network discovery and security auditing tool — port scanning, OS fingerprinting, and service version detection.
owasp.org
OWASP methodology and test cases for authorized assessment of web applications and web services.
caido.io
Web security testing toolkit with an intercepting proxy, request replay, automation, and project workflows.
testssl.sh
Open-source command-line tool for authorized testing of TLS protocol support, ciphers, and common configuration flaws.
attack.mitre.org
Globally-accessible knowledge base of adversary tactics, techniques, and procedures based on real observations.
virustotal.com
Multi-engine file and URL scanner aggregating results from 70+ antivirus engines and threat intelligence feeds.
shodan.io
Search engine for internet-connected devices — servers, IoT, industrial systems — with banner and vulnerability data.
censys.io
Internet-wide scanning service for attack surface management; maps exposed services, certs, and misconfigurations.
greynoise.io
Filters internet background noise from real threats by categorising mass-scanning and exploit-broadcasting IPs.
otx.alienvault.com
Open Threat Exchange — community-driven threat intelligence sharing platform with millions of indicators.
abuse.ch
Non-profit running MalwareBazaar, URLhaus, Feodo Tracker, and ThreatFox for free threat intelligence feeds.
circl.lu
Computer Incident Response Center Luxembourg — publishes free threat intelligence feeds, MISP, and CVE tools.
www.cisa.gov
US CISA's authoritative catalog of CVEs actively exploited in the wild, with required remediation dates for federal agencies.
misp-project.org
Open-source threat intelligence sharing platform and format standard used by hundreds of organisations globally.
docs.opencti.io
Documentation for the open-source platform used to structure, correlate, and share cyber threat intelligence.
docs.oasis-open.org
OASIS standard language for representing cyber threat intelligence in a structured, interoperable format.
docs.oasis-open.org
OASIS application-layer protocol for exchanging cyber threat intelligence over HTTPS.
www.first.org
Exploit Prediction Scoring System estimates the probability that a published CVE will be exploited in the near term.
nvd.nist.gov
NIST's authoritative CVE database with CVSS scores, references, and patch advisories.
Google's open database for vulnerabilities in open-source software, queryable by package.
github.com
Security advisories for packages on npm, PyPI, Maven, RubyGems, and more, curated by GitHub.
hackerone.com
Leading bug bounty platform connecting security researchers with program-running companies.
bugcrowd.com
Crowdsourced security platform for bug bounty programs and vulnerability disclosure.
security.snyk.io
Developer-focused database of open-source package vulnerabilities with fix guidance.
www.cve.org
Official program for assigning and publishing globally recognized identifiers for publicly disclosed vulnerabilities.
www.kb.cert.org
CERT Coordination Center advisories with technical details, affected vendors, and mitigation information.
www.first.org
Official specifications and calculators for the Common Vulnerability Scoring System.
www.zerodayinitiative.com
Published vulnerability advisories from Trend Micro Zero Day Initiative with vendor and disclosure timelines.
securitylab.github.com
Open security research, CodeQL queries, advisories, and coordinated disclosure work focused on open source.
Security
Generated digest items for this topic.
No items for this topic on the selected date.
This essay was written with Nathan E. Sanders, and originally appeared in Tech Policy Press . AI represents the first time we humans can do cognitive work outside of our bodies at scale. The only comparable moment is the early years of the industrial revolutio
Latest item from SANS Internet Storm Center.
You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." [...]
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts. [...]
An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. [...]
The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. [...]
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
View CSAF Summary Parasolid is affected by an out of bounds read vulnerability that could be triggered when the application reads files in X_T format. This could allow an attacker to crash the application or execute arbitrary code. Siemens has released new ver
View CSAF Summary Successful exploitation of this vulnerability could allow a low-privilege user or attacker to inject a persistent malicious payload via a crafted URL that executes in the context of other users' sessions, including administrators, potent
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to decrypt sensitive data, bypass authentication controls, gaining unauthorized access to read arbitrary files on the system, or gain unauthorized access to protected sy
View CSAF Summary A vulnerability in Desigo DXR and PXC controllers has been identified that could allow an attacker to cause denial of service conditions by sending malformed BACnet packets. Recovery requires a device reset or reboot to restore normal functio
View CSAF Summary Siemens License Server is affected by multiple vulnerabilities which could allow an attacker to elevate its privileges and read arbitrary files on the system. Siemens has released a new version for Siemens License Server (SLS) and recommends
This is good : Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency , we implemented support for ML-KEM, the NIST-standard key-establishment primitive, and ML-DSA, the NIST-standard
