PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

ST4S Assessment

projectblack.io | research | #compliance | #penetration-testing | #framework | #st4s | #schools
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Breaking down the Safer Technologies 4 Schools (ST4S) assessment: what control 6.2.7-T1 requires for penetration testing and continuous monitoring, plus organisational policy expectations.
Published
Collected

Related coverage

blog · hackenproof.com
What Is Penetration Testing? How It Works, What You Get, and When to Test
A pentest is a time-boxed, authorized attack where ethical hackers chain flaws to prove exploitable risk, not just run scans. It outlines deliverables, audit drivers, and when to test.
research · blog.quarkslab.com
Triton v0.8 and ARMv7: A Guideline for Adding New Architectures
A follow-up to the Triton v0.8 release explaining how ARMv7 support was added to the symbolic execution framework and outlining a guideline for integrating new architectures.
research · blog.quarkslab.com
IRMA v1.3.0
IRMA 1.3.0 brings a standalone irma-cli Python module, file tagging, MIME-based automatic probe selection and probe-generated files to the privacy-focused open-source malware analysis framework.
research · blog.quarkslab.com
HiTB Challenge: IRMA
Quarkslab's HITB challenge invites contributions to IRMA, its open-source incident-response and malware-analysis framework: write a probe or submitter to win tickets; deadline May 8, 2015.
research · eshard.com
What does the EU Cyber Resilience Act (CRA) mean for connected device manufacturers?
The Cyber Resilience Act is a new legislation proposed by the European Commission to improve the cybersecurity posture of organisations using digital assets.
blog · projectblack.io
Bypassing EDR with Local AI
A pentest shows Claude refuses to build an LSASS dumper, but local DeepSeek and uncensored Qwen models produce a working XOR-encrypted minidumper, making AI-assisted EDR evasion nearly effortless.
Back