محلی جدید برای مخفی سازی بد افزار
Korean researchers have developed a set of attacks against some solid-state drives (SSDs) that could allow planting malware in a location that's beyond the reach of the user and security solutions.
https://www.bleepingcomputer.com/news/security/firmware-attack-can-drop-persistent-malware-in-hidden-ssd-area/amp/
Korean researchers have developed a set of attacks against some solid-state drives (SSDs) that could allow planting malware in a location that's beyond the reach of the user and security solutions.
https://www.bleepingcomputer.com/news/security/firmware-attack-can-drop-persistent-malware-in-hidden-ssd-area/amp/
BleepingComputer
Firmware attack can drop persistent malware in hidden SSD area
Korean researchers have developed a set of attacks against some solid-state drives (SSDs) that could allow planting malware in a location that's beyond the reach of the user and security solutions.
مهم نیست چه نوعی از فیشینگ شما را هدف خواهد گرفت ؛ مهم آن است دفاع چند لایه ای در کانتکست های مختلف داشته باشید
مرکز ملی سایبری انگلیس
https://www.ncsc.gov.uk/blog-post/phishing-spear-phishing-and-whaling-does-it-change-price-phish
مرکز ملی سایبری انگلیس
https://www.ncsc.gov.uk/blog-post/phishing-spear-phishing-and-whaling-does-it-change-price-phish
www.ncsc.gov.uk
Phishing, spear phishing and whaling; does it change the price of phish?
Regardless of the type of phish, you'll still need multiple layers of defence to protect your organisation.
برنامه آموزشی زمستان ۱.pdf
1.3 MB
برنامه آموزشی #آکادمی_روزبه و #مدرسهSOC
💫زمستان ۱۴۰۰
✅واتس اپ و تلفن برای راهنمایی و ثبت نام 09902857289
💫زمستان ۱۴۰۰
✅واتس اپ و تلفن برای راهنمایی و ثبت نام 09902857289
ia-policychart-7-Jan-19-DoDIN.pdf
2.5 MB
policychart-7-Jan-19-DoDIN
چارت خط مشی امنیت سایبری وزارت دفاع امریکا
The goal of the DoD Cybersecurity Policy Chart is to capture the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.
چارت خط مشی امنیت سایبری وزارت دفاع امریکا
The goal of the DoD Cybersecurity Policy Chart is to capture the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.
Forwarded from IoT Report
اعضای هیئت رئیسه کمیسیون اینترنت اشیا سازمان نظام صنفی رایانه ای در دوره ششم هیئت مدیره نصر تهران
@iotreport
@iotreport
مهندسی معکوس
برای مبتدیان
https://www.intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/
برای مبتدیان
https://www.intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/
Intezer
Malware Reverse Engineering for Beginners - Part 1: From 0x0 - Intezer
Reverse engineering malware is the process of dissecting malicious software to understand how it operates, identify its purpose, and build defenses against it. Part 1 covers setting up a safe environment, static and dynamic analysis, assembly language, and…
بد افزارهای محیط لینوکس در سال میلادی گذشته ۳۵ درصد افزایش پیدا کرده اند .
برای مقابله چه کرده اید ؟
www.bleepingcomputer.com/news/security/linux-malware-sees-35-percent-growth-during-2021/amp/
برای مقابله چه کرده اید ؟
www.bleepingcomputer.com/news/security/linux-malware-sees-35-percent-growth-during-2021/amp/
BleepingComputer
Linux malware sees 35% growth during 2021
The number of malware infections on Linux-based IoT (internet of things) devices rose by 35% in 2021 compared to the previous year's numbers. The principal goal was recruiting devices to be part of DDoS (distributed denial of service) attacks.
طرح استخدام و بازگشت هزینه
از ۱۰ تا صد درصد بازگشت کل هزینه آموزش
جزییات بزودی ....
از ۱۰ تا صد درصد بازگشت کل هزینه آموزش
جزییات بزودی ....
Guide_to_Conducting_Cybersecurity_Risk_Assessment_for_CII.pdf
1.2 MB
محاسبه ریسک سایبری برای زیرساخت های حیاتی
سناریو هایی از رفتارهای مخرب در محیط لینوکس
و
نحوه شناسایی آنها
#آکادمی_روزبه
https://www.socinvestigation.com/detect-most-common-malicious-actions-in-the-linux-environment/
و
نحوه شناسایی آنها
#آکادمی_روزبه
https://www.socinvestigation.com/detect-most-common-malicious-actions-in-the-linux-environment/
Security Investigation - Be the first to investigate
Detect Most Common Malicious Actions in the Linux Environment - Security Investigation
Auditd, Linux's access monitoring and accounting subsystem, will be used by several Linux rules. In comparison to Windows, Linux is statistically less targeted by malicious attackers. However, we must continue to keep an eye on these systems for security…
اگر فکر میکنید تعیین هویت چند عامله مشکل را کامل حل میکند ، خبر زیر را که در مورد آسیب پذیری یکی از این نوع سیستم ها است را بخوانید
#آکادمی_روزبه
https://securityaffairs.co/wordpress/126901/hacking/box-2fa-bypass-falw.html
#آکادمی_روزبه
https://securityaffairs.co/wordpress/126901/hacking/box-2fa-bypass-falw.html
Security Affairs
Box flaw allowed to bypass MFA and takeover accounts
A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed threat actors to take over accounts.
وقتی آنتی ویروس دور میخورد
مک آفی هایتان را دریابید ، فوری
All McAfee Agent versions before 5.7.5 are vulnerable and allow unprivileged attackers to run code using NT AUTHORITY\SYSTEM account privileges, the highest level of privileges on a Windows system, used by the OS and OS services.
#آکادمی_روزبه
https://www.bleepingcomputer.com/news/security/mcafee-agent-bug-lets-hackers-run-code-with-windows-system-privileges/amp/
مک آفی هایتان را دریابید ، فوری
All McAfee Agent versions before 5.7.5 are vulnerable and allow unprivileged attackers to run code using NT AUTHORITY\SYSTEM account privileges, the highest level of privileges on a Windows system, used by the OS and OS services.
#آکادمی_روزبه
https://www.bleepingcomputer.com/news/security/mcafee-agent-bug-lets-hackers-run-code-with-windows-system-privileges/amp/
BleepingComputer
McAfee Agent bug lets hackers run code with Windows SYSTEM privileges
McAfee Enterprise (now rebranded as Trellix) has patched a security vulnerability discovered in the company's McAfee Agent software for Windows enabling attackers to escalate privileges and execute arbitrary code with SYSTEM privileges.