ابزار برپایی آزمایشگاه پن تست اکتیو دایرکتوری
#آکادمی_روزبه
https://browninfosecguy.com/Active-Directory-Lab-Setup-Tool
#آکادمی_روزبه
https://browninfosecguy.com/Active-Directory-Lab-Setup-Tool
برای افزایش امنیت بخوانید
#آکادمی_روزبه
You can use HTTP response headers in many ways to increase the security of web applications. This section is dedicated to the various HTTP response headers for which Spring Security provides explicit support for. If necessary, you can also configure Spring Security to provide custom headers.
https://docs.spring.io/spring-security/reference/features/exploits/headers.html
#آکادمی_روزبه
You can use HTTP response headers in many ways to increase the security of web applications. This section is dedicated to the various HTTP response headers for which Spring Security provides explicit support for. If necessary, you can also configure Spring Security to provide custom headers.
https://docs.spring.io/spring-security/reference/features/exploits/headers.html
از زیر مجموعه حفاظت از حریم شخصی:
ابزار بررسی ریسک هوش مصنوعی استفاده شده در شرکت ؛ علیه حقوق فردی کارکنان
#آکادمی_روزبه
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ai-and-data-protection-risk-toolkit/
ابزار بررسی ریسک هوش مصنوعی استفاده شده در شرکت ؛ علیه حقوق فردی کارکنان
#آکادمی_روزبه
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ai-and-data-protection-risk-toolkit/
حمله ای از حملات تحت وب
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
portswigger.net
What is HTTP request smuggling? Tutorial & Examples | Web Security Academy
In this section, we'll explain HTTP request smuggling attacks and describe how common request smuggling vulnerabilities can arise. Labs If you're already ...
2023-data-breach-investigations-report-dbir(1).pdf
9.4 MB
گزارش جمع بندی Verizon از حوادث سایبری و عوامل دخیل در آنها همراه با تناظر یابی فیمابین عناصر جدول ATT&CK و کنترل های CIS
#آکادمی_روزبه
#آکادمی_روزبه
فضای هوش مصنوعی را مدیریت کنید قبل از آنکه اوضاع از کنترل شما خارج شود
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
Deploying Securely
Deploying Securely with ChatGPT
A generative AI security policy template
با مهندسی کشف بیشتر آشنا شویم
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
Medium
Establishing a Detection Engineering Program from the ground-up
This is a concise writeup summarising my perspective on establishing a detection engineering program effectively and efficiently with…
گوگل آنالایتیک از ما چه می‌برد؟
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
Security Affairs
Swedish data protection authority rules against Google Analytics
Swedish data protection watchdog warns companies against using Google Analytics due to risk of surveillance operated by the US government.
وصله کردن کرنل سیستم عامل در لینوکس آسان نیست اما این وصله حیاتی است و خدامیدونه تا حالا چه استفاده ای از اون شده
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
GitHub
GitHub - lrh2000/StackRot: CVE-2023-3269: Linux kernel privilege escalation vulnerability
CVE-2023-3269: Linux kernel privilege escalation vulnerability - lrh2000/StackRot
برنامه جدید CISA برای پایش زیرساخت‌های IT/OT آمریکا تحت عنوان CyberSentry
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
مقایسه بیانیه رعایت خط مشی حریم شخصی توئیتر با تردز
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
WIRED
How Threads’ Privacy Policy Compares to Twitter’s (and Its Rivals’)
Want to try out Meta’s new social media app? Here’s more context on what personal data is collected by Threads and similar social media apps.