برای افزایش امنیت بخوانید
#آکادمی_روزبه
You can use HTTP response headers in many ways to increase the security of web applications. This section is dedicated to the various HTTP response headers for which Spring Security provides explicit support for. If necessary, you can also configure Spring Security to provide custom headers.
https://docs.spring.io/spring-security/reference/features/exploits/headers.html
#آکادمی_روزبه
You can use HTTP response headers in many ways to increase the security of web applications. This section is dedicated to the various HTTP response headers for which Spring Security provides explicit support for. If necessary, you can also configure Spring Security to provide custom headers.
https://docs.spring.io/spring-security/reference/features/exploits/headers.html
از زیر مجموعه حفاظت از حریم شخصی:
ابزار بررسی ریسک هوش مصنوعی استفاده شده در شرکت ؛ علیه حقوق فردی کارکنان
#آکادمی_روزبه
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ai-and-data-protection-risk-toolkit/
ابزار بررسی ریسک هوش مصنوعی استفاده شده در شرکت ؛ علیه حقوق فردی کارکنان
#آکادمی_روزبه
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/ai-and-data-protection-risk-toolkit/
حمله ای از حملات تحت وب
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
portswigger.net
What is HTTP request smuggling? Tutorial & Examples | Web Security Academy
In this section, we'll explain HTTP request smuggling attacks and describe how common request smuggling vulnerabilities can arise. Labs If you're already ...
2023-data-breach-investigations-report-dbir(1).pdf
9.4 MB
گزارش جمع بندی Verizon از حوادث سایبری و عوامل دخیل در آنها همراه با تناظر یابی فیمابین عناصر جدول ATT&CK و کنترل های CIS
#آکادمی_روزبه
#آکادمی_روزبه
فضای هوش مصنوعی را مدیریت کنید قبل از آنکه اوضاع از کنترل شما خارج شود
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
Deploying Securely
Deploying Securely with ChatGPT
A generative AI security policy template
با مهندسی کشف بیشتر آشنا شویم
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
Medium
Establishing a Detection Engineering Program from the ground-up
This is a concise writeup summarising my perspective on establishing a detection engineering program effectively and efficiently with…
گوگل آنالایتیک از ما چه می‌برد؟
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
Security Affairs
Swedish data protection authority rules against Google Analytics
Swedish data protection watchdog warns companies against using Google Analytics due to risk of surveillance operated by the US government.
وصله کردن کرنل سیستم عامل در لینوکس آسان نیست اما این وصله حیاتی است و خدامیدونه تا حالا چه استفاده ای از اون شده
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
GitHub
GitHub - lrh2000/StackRot: CVE-2023-3269: Linux kernel privilege escalation vulnerability
CVE-2023-3269: Linux kernel privilege escalation vulnerability - lrh2000/StackRot
برنامه جدید CISA برای پایش زیرساخت‌های IT/OT آمریکا تحت عنوان CyberSentry
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
مقایسه بیانیه رعایت خط مشی حریم شخصی توئیتر با تردز
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
WIRED
How Threads’ Privacy Policy Compares to Twitter’s (and Its Rivals’)
Want to try out Meta’s new social media app? Here’s more context on what personal data is collected by Threads and similar social media apps.
محیط اجرایی قابل اعتماد(TEE) در اندروید به چه معناست ؟
#آکادمی_روزبه
https://www.trustonic.com/technical-articles/what-is-a-trusted-execution-environment-tee/
#آکادمی_روزبه
https://www.trustonic.com/technical-articles/what-is-a-trusted-execution-environment-tee/
Trustonic
What Is Trusted Execution Environment (TEE) & How Does It Work? |
A TEE Trusted Execution Environment is an environment for executing code in a secure area of a processor. Apps executing code & data loaded inside the TEE can have high levels of trust.
DevSecOps Fundamentals Guidebook-1.pdf
1.2 MB
مبانی DevSecOps
#آکادمی_روزبه
#آکادمی_روزبه
تناسب پاسخ به حادثه ی سایبری و شکار تهدیدات
یک مقاله ی خواندنی
#آکادمی_روزبه
https://cybersecurity.att.com/blogs/security-essentials/what-is-the-difference-between-incident-response-threat-hunting-a-comprehensive-guide
یک مقاله ی خواندنی
#آکادمی_روزبه
https://cybersecurity.att.com/blogs/security-essentials/what-is-the-difference-between-incident-response-threat-hunting-a-comprehensive-guide
LevelBlue
What is the difference between incident response & threat hunting?
Discover the differences between incident response and threat hunting. Learn how these strategies enhance cybersecurity, detect threats, and build a skilled workforce.