حمله ای از حملات تحت وب
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
درس سنز ۵۴۲
#آکادمی_روزبه
https://portswigger.net/web-security/request-smuggling
portswigger.net
What is HTTP request smuggling? Tutorial & Examples | Web Security Academy
In this section, we'll explain HTTP request smuggling attacks and describe how common request smuggling vulnerabilities can arise. Labs If you're already ...
2023-data-breach-investigations-report-dbir(1).pdf
9.4 MB
گزارش جمع بندی Verizon از حوادث سایبری و عوامل دخیل در آنها همراه با تناظر یابی فیمابین عناصر جدول ATT&CK و کنترل های CIS
#آکادمی_روزبه
#آکادمی_روزبه
فضای هوش مصنوعی را مدیریت کنید قبل از آنکه اوضاع از کنترل شما خارج شود
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
#آکادمی_روزبه
تمپلیت خط مشی امنیتی
https://www.blog.deploy-securely.com/p/deploying-securely-with-chatgpt
Deploying Securely
Deploying Securely with ChatGPT
A generative AI security policy template
با مهندسی کشف بیشتر آشنا شویم
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
#آکادمی_روزبه
https://d4rkciph3r.medium.com/establishing-a-detection-engineering-program-from-the-ground-up-b170811166c
Medium
Establishing a Detection Engineering Program from the ground-up
This is a concise writeup summarising my perspective on establishing a detection engineering program effectively and efficiently with…
گوگل آنالایتیک از ما چه می‌برد؟
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
هشدار دولت سوئد
#آکادمی_روزبه
https://securityaffairs-com.cdn.ampproject.org/c/s/securityaffairs.com/148157/laws-and-regulations/swedish-data-protection-authority-google-analytics.html?amp=1
Security Affairs
Swedish data protection authority rules against Google Analytics
Swedish data protection watchdog warns companies against using Google Analytics due to risk of surveillance operated by the US government.
وصله کردن کرنل سیستم عامل در لینوکس آسان نیست اما این وصله حیاتی است و خدامیدونه تا حالا چه استفاده ای از اون شده
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
#آکادمی_روزبه
https://github.com/lrh2000/StackRot
GitHub
GitHub - lrh2000/StackRot: CVE-2023-3269: Linux kernel privilege escalation vulnerability
CVE-2023-3269: Linux kernel privilege escalation vulnerability - lrh2000/StackRot
برنامه جدید CISA برای پایش زیرساخت‌های IT/OT آمریکا تحت عنوان CyberSentry
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
#آکادمی_روزبه
CyberSentry is a CISA-managed threat detection and monitoring capability, governed by an agreement between CISA and voluntarily-participating critical infrastructure partners who operate significant systems supporting NCFs.
https://www.cisa.gov/resources-tools/programs/cybersentry-program
مقایسه بیانیه رعایت خط مشی حریم شخصی توئیتر با تردز
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
#آکادمی_روزبه
https://www.wired.com/story/meta-twitter-threads-bluesky-spill-hive-mastodon-privacy-comparison/
WIRED
How Threads’ Privacy Policy Compares to Twitter’s (and Its Rivals’)
Want to try out Meta’s new social media app? Here’s more context on what personal data is collected by Threads and similar social media apps.
محیط اجرایی قابل اعتماد(TEE) در اندروید به چه معناست ؟
#آکادمی_روزبه
https://www.trustonic.com/technical-articles/what-is-a-trusted-execution-environment-tee/
#آکادمی_روزبه
https://www.trustonic.com/technical-articles/what-is-a-trusted-execution-environment-tee/
Trustonic
What Is Trusted Execution Environment (TEE) & How Does It Work? |
A TEE Trusted Execution Environment is an environment for executing code in a secure area of a processor. Apps executing code & data loaded inside the TEE can have high levels of trust.
DevSecOps Fundamentals Guidebook-1.pdf
1.2 MB
مبانی DevSecOps
#آکادمی_روزبه
#آکادمی_روزبه
تناسب پاسخ به حادثه ی سایبری و شکار تهدیدات
یک مقاله ی خواندنی
#آکادمی_روزبه
https://cybersecurity.att.com/blogs/security-essentials/what-is-the-difference-between-incident-response-threat-hunting-a-comprehensive-guide
یک مقاله ی خواندنی
#آکادمی_روزبه
https://cybersecurity.att.com/blogs/security-essentials/what-is-the-difference-between-incident-response-threat-hunting-a-comprehensive-guide
LevelBlue
What is the difference between incident response & threat hunting?
Discover the differences between incident response and threat hunting. Learn how these strategies enhance cybersecurity, detect threats, and build a skilled workforce.
منبعی برای استخراج اطلاعات بیش از FOCA در مرحله جمع آوری داده
#آکادمی_روزبه
MetadataPlus works by extracting document files and looking for specific tags or patterns within the internal files.
https://research.nccgroup.com/2023/06/16/new-sources-of-microsoft-office-metadata-tool-release-metadataplus/
#آکادمی_روزبه
MetadataPlus works by extracting document files and looking for specific tags or patterns within the internal files.
https://research.nccgroup.com/2023/06/16/new-sources-of-microsoft-office-metadata-tool-release-metadataplus/
NCC Group Research Blog
New Sources of Microsoft Office Metadata – Tool Release MetadataPlus
TL;DR – 31 usernames extracted vs 13 from the next leading brand! Introduction Open Source Intelligence Gathering (OSINT) can be an activity in itself and can also form a solid foundation for…
بررسی زیرو تراست از زاویه ای دیگر
#آکادمی_روزبه
Microsoft uses the Zero Trust Maturity Guide to assess enterprise environments based on three levels: Traditional, Advanced & Optimal.
https://jads.blog/zero-trust-the-microsoft-way-part-i-a3df5c9feb27
#آکادمی_روزبه
Microsoft uses the Zero Trust Maturity Guide to assess enterprise environments based on three levels: Traditional, Advanced & Optimal.
https://jads.blog/zero-trust-the-microsoft-way-part-i-a3df5c9feb27
Medium
Zero Trust— Part I: Introduction
As businesses start accepting the reality of operating in a post COVID-19 world, many organizations are realizing that their legacy…
CISO Handbook.pdf
1.6 MB
۱۷۰ صفحه هند بوک مخصوص مدیر ارشد امنیت
#آکادمی_روزبه
#آکادمی_روزبه
آخر هفته را با یک تحلیل بد افزار سر کنید !
بد افزار RedDriverبا استفاده از HookSignTool اقدام به جعل سرتیفیکیت کرده و لذا خود را به ویندوز قالب می‌کند.
#آکادمی_روزبه
https://blog.talosintelligence.com/undocumented-reddriver/
بد افزار RedDriverبا استفاده از HookSignTool اقدام به جعل سرتیفیکیت کرده و لذا خود را به ویندوز قالب می‌کند.
#آکادمی_روزبه
https://blog.talosintelligence.com/undocumented-reddriver/
Cisco Talos
Undocumented driver-based browser hijacker RedDriver targets Chinese speakers and internet cafes
Cisco Talos has identified multiple versions of an undocumented malicious driver named “RedDriver,” a driver-based browser hijacker that uses the Windows Filtering Platform (WFP) to intercept browser traffic.
آکادمی آموزش روزبه 📚
آخر هفته را با یک تحلیل بد افزار سر کنید ! بد افزار RedDriverبا استفاده از HookSignTool اقدام به جعل سرتیفیکیت کرده و لذا خود را به ویندوز قالب می‌کند. #آکادمی_روزبه https://blog.talosintelligence.com/undocumented-reddriver/
ابزار دیگری که تلاش دارد با استفاده از امضای جعلی ویندوز را دور بزند
FuckCertVerify
https://github.com/hzqst/FuckCertVerifyTimeValidity
FuckCertVerify
https://github.com/hzqst/FuckCertVerifyTimeValidity
GitHub
GitHub - hzqst/FuckCertVerifyTimeValidity: This tiny project prevents the signtool from verifing cert time validity and let you…
This tiny project prevents the signtool from verifing cert time validity and let you sign your bin with outdated cert without changing system time manually - hzqst/FuckCertVerifyTimeValidity