جدید
Detection and response development lifecycle (DR-DLC)
Apply The Principles Of Software Development To Detection And Response Engineering
#آکادمی_روزبه
https://www.forrester.com/blogs/announcing-the-detection-and-response-development-lifecycle-dr-dlc-for-detection-engineering/
Detection and response development lifecycle (DR-DLC)
Apply The Principles Of Software Development To Detection And Response Engineering
#آکادمی_روزبه
https://www.forrester.com/blogs/announcing-the-detection-and-response-development-lifecycle-dr-dlc-for-detection-engineering/
Forrester
Announcing The Detection And Response Development Lifecycle (DR-DLC) For Detection Engineering
Read this blog to learn a critical principle of detection and response: following the detection and response development lifecycle (DR-DLC).
امنیت فیزیکی
درباب رویکرد پن تستر ها و محافظان در حوزه پایش با دوربین و پایش فیزیکی
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/the-man-who-wasnt-there
درباب رویکرد پن تستر ها و محافظان در حوزه پایش با دوربین و پایش فیزیکی
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/the-man-who-wasnt-there
Covert Access Team
The Man Who Wasn’t There
Covert Access Team is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. When it comes to a buildings physical security, few objects represent this concept more so than a surveillance camera.…
بررسی موردیِ یک فیشینگ از طریق SMS
#آکادمی_روزبه
https://blog.bushidotoken.net/2023/07/investigating-sms-phishing-text.html?m=1
#آکادمی_روزبه
https://blog.bushidotoken.net/2023/07/investigating-sms-phishing-text.html?m=1
blog.bushidotoken.net
Investigating SMS phishing text messages from scratch
CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security
آسیب پذیری توانایی ارتقای دسترسی در ابونتو
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/almost-40-percent-of-ubuntu-users-vulnerable-to-new-privilege-elevation-flaws/amp/
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/almost-40-percent-of-ubuntu-users-vulnerable-to-new-privilege-elevation-flaws/amp/
www-bleepingcomputer-com.cdn.ampproject.org
Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws
Two Linux vulnerabilities introduced recently into the Ubuntu kernel create the potential for unprivileged local users to gain elevated privileges on a massive number of devices.
تست نفوذ فیزیکی
این مرحله :
embedded reconnaissance.
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/spot-the-spy
این مرحله :
embedded reconnaissance.
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/spot-the-spy
Substack
Spot the Spy
Understanding Embedded Reconnaissance
شغل شما بعنوان تستر نفوذ فیزیکی این است هرچه بیشتر آسیب پذیری در لایه فیزیکال پیدا کنید
حالا از یک زاویه دیگر این موضوع رو بررسی می‌کنیم: انجام عملیات در روز یا شب
پارامتر های موثر
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/day-vs-night
حالا از یک زاویه دیگر این موضوع رو بررسی می‌کنیم: انجام عملیات در روز یا شب
پارامتر های موثر
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/day-vs-night
Substack
Day vs Night
Crafting the Optimal Strategy for Physical Penetration Testing
نگاهی به معماری امن
#آکادمی_روزبه
https://www.jdsupra.com/legalnews/security-architecture-benefits-a-6411420/
#آکادمی_روزبه
https://www.jdsupra.com/legalnews/security-architecture-benefits-a-6411420/
JD Supra
Security Architecture Benefits: A Comprehensive Guide
In the continuously evolving landscape of digital technology, safeguarding data and assets has become a cornerstone of every organization’s strategy. To address this, businesses worldwide are...
چرا تکیه بر CVSS برای اولویت بندی وصله در سازمان دیگر مناسب نیست؟
A patching strategy that considers CVSS, internal environment context (such as reachability analysis, asset criticality, and provenance), and additional threat intelligence sources such as CISA KEV combined with EPSS, can assist organizations in making informed, risk-based vulnerability management decisions and improve the overall security posture of their organization.
#آکادمی_روزبه
https://www.helpnetsecurity.com/2023/07/31/cvss-vulnerability-strategy/
A patching strategy that considers CVSS, internal environment context (such as reachability analysis, asset criticality, and provenance), and additional threat intelligence sources such as CISA KEV combined with EPSS, can assist organizations in making informed, risk-based vulnerability management decisions and improve the overall security posture of their organization.
#آکادمی_روزبه
https://www.helpnetsecurity.com/2023/07/31/cvss-vulnerability-strategy/
Help Net Security
Relying on CVSS alone is risky for vulnerability management - Help Net Security
A vulnerability management strategy that relies solely on CVSS for vulnerability prioritization is proving to be insufficient at best.
لیست درایور های ویندوز که توسط هکرها برای نفوذ استفاده می‌شود
#آکادمی_روزبه
https://www.loldrivers.io
#آکادمی_روزبه
https://www.loldrivers.io
چرا حملات API رو به افزایش است ؟
راهکارهای جلوگیری چیست؟
#آکادمی_روزبه
https://www-csoonline-com.cdn.ampproject.org/c/s/www.csoonline.com/article/646557/why-api-attacks-are-increasing-and-how-to-avoid-them.html/amp/
راهکارهای جلوگیری چیست؟
#آکادمی_روزبه
https://www-csoonline-com.cdn.ampproject.org/c/s/www.csoonline.com/article/646557/why-api-attacks-are-increasing-and-how-to-avoid-them.html/amp/
CSO Online
Why API attacks are increasing and how to avoid them
Growing use of APIs give attackers more ways to break authentication controls, exfiltrate data, or perform disruptive acts.
کاهش ریسک زنجیره تامین نرم افزار با
Dependency-Track ( Component Analysis platform)
#آکادمی_روزبه
https://docs.dependencytrack.org/
Dependency-Track ( Component Analysis platform)
#آکادمی_روزبه
https://docs.dependencytrack.org/
owasp.org
Component Analysis | OWASP Foundation
Component Analysis on the main website for The OWASP Foundation. OWASP is a nonprofit foundation that works to improve the security of software.
شناسایی شما بصورت منحصربفرد (fingerprinting) توسط سایتهای مختلف روبه افزایش است.
#آکادمی_روزبه
https://amiunique.org/fingerprint
#آکادمی_روزبه
https://amiunique.org/fingerprint
amiunique.org
My Fingerprint- Am I Unique ?
Check if your browser has a unique fingerprint, how identifiable you are on the Internet
مقاله دانشگاهی در مورد ساخت سیستمی برای ردیابی شناسایی کاربرانِ وبسایتها و برخورد با آن
#آکادمی_روزبه
https://link.springer.com/chapter/10.1007/978-981-16-9229-1_4
#آکادمی_روزبه
https://link.springer.com/chapter/10.1007/978-981-16-9229-1_4
SpringerLink
FPFlow: Detect and Prevent Browser Fingerprinting with Dynamic Ta
Browser fingerprinting is a practical user tracking technology widely adopted by many real-world websites to potentially track users’ browsing behaviors. By collecting information such as screen resolution, user agent, and WebGL rendered data, the tracker…
۹ دوره رایگان گوگل برای Generative AI
#آکادمی_روزبه
https://www.linkedin.com/posts/cisotradecraft_ai-google-machinelearning-activity-7092099219540344832-GLQ8?utm_source=share&utm_medium=member_android
#آکادمی_روزبه
https://www.linkedin.com/posts/cisotradecraft_ai-google-machinelearning-activity-7092099219540344832-GLQ8?utm_source=share&utm_medium=member_android
Linkedin
CISO Tradecraft® on LinkedIn: #leadership #management #technology #informationsecurity #ciso…
If you want to learn Generative AI, here are some courses from Google that can help.
#leadership #management #technology #informationsecurity #ciso…
#leadership #management #technology #informationsecurity #ciso…