Forwarded from IoT Report
اعضای هیئت رئیسه کمیسیون اینترنت اشیا سازمان نظام صنفی رایانه ای در دوره ششم هیئت مدیره نصر تهران
@iotreport
@iotreport
مهندسی معکوس
برای مبتدیان
https://www.intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/
برای مبتدیان
https://www.intezer.com/blog/malware-analysis/malware-reverse-engineering-beginners/
Intezer
Malware Reverse Engineering for Beginners - Part 1: From 0x0 - Intezer
Reverse engineering malware is the process of dissecting malicious software to understand how it operates, identify its purpose, and build defenses against it. Part 1 covers setting up a safe environment, static and dynamic analysis, assembly language, and…
بد افزارهای محیط لینوکس در سال میلادی گذشته ۳۵ درصد افزایش پیدا کرده اند .
برای مقابله چه کرده اید ؟
www.bleepingcomputer.com/news/security/linux-malware-sees-35-percent-growth-during-2021/amp/
برای مقابله چه کرده اید ؟
www.bleepingcomputer.com/news/security/linux-malware-sees-35-percent-growth-during-2021/amp/
BleepingComputer
Linux malware sees 35% growth during 2021
The number of malware infections on Linux-based IoT (internet of things) devices rose by 35% in 2021 compared to the previous year's numbers. The principal goal was recruiting devices to be part of DDoS (distributed denial of service) attacks.
طرح استخدام و بازگشت هزینه
از ۱۰ تا صد درصد بازگشت کل هزینه آموزش
جزییات بزودی ....
از ۱۰ تا صد درصد بازگشت کل هزینه آموزش
جزییات بزودی ....
Guide_to_Conducting_Cybersecurity_Risk_Assessment_for_CII.pdf
1.2 MB
محاسبه ریسک سایبری برای زیرساخت های حیاتی
سناریو هایی از رفتارهای مخرب در محیط لینوکس
و
نحوه شناسایی آنها
#آکادمی_روزبه
https://www.socinvestigation.com/detect-most-common-malicious-actions-in-the-linux-environment/
و
نحوه شناسایی آنها
#آکادمی_روزبه
https://www.socinvestigation.com/detect-most-common-malicious-actions-in-the-linux-environment/
Security Investigation - Be the first to investigate
Detect Most Common Malicious Actions in the Linux Environment - Security Investigation
Auditd, Linux's access monitoring and accounting subsystem, will be used by several Linux rules. In comparison to Windows, Linux is statistically less targeted by malicious attackers. However, we must continue to keep an eye on these systems for security…
اگر فکر میکنید تعیین هویت چند عامله مشکل را کامل حل میکند ، خبر زیر را که در مورد آسیب پذیری یکی از این نوع سیستم ها است را بخوانید
#آکادمی_روزبه
https://securityaffairs.co/wordpress/126901/hacking/box-2fa-bypass-falw.html
#آکادمی_روزبه
https://securityaffairs.co/wordpress/126901/hacking/box-2fa-bypass-falw.html
Security Affairs
Box flaw allowed to bypass MFA and takeover accounts
A vulnerability in the implementation of multi-factor authentication (MFA) for Box allowed threat actors to take over accounts.
وقتی آنتی ویروس دور میخورد
مک آفی هایتان را دریابید ، فوری
All McAfee Agent versions before 5.7.5 are vulnerable and allow unprivileged attackers to run code using NT AUTHORITY\SYSTEM account privileges, the highest level of privileges on a Windows system, used by the OS and OS services.
#آکادمی_روزبه
https://www.bleepingcomputer.com/news/security/mcafee-agent-bug-lets-hackers-run-code-with-windows-system-privileges/amp/
مک آفی هایتان را دریابید ، فوری
All McAfee Agent versions before 5.7.5 are vulnerable and allow unprivileged attackers to run code using NT AUTHORITY\SYSTEM account privileges, the highest level of privileges on a Windows system, used by the OS and OS services.
#آکادمی_روزبه
https://www.bleepingcomputer.com/news/security/mcafee-agent-bug-lets-hackers-run-code-with-windows-system-privileges/amp/
BleepingComputer
McAfee Agent bug lets hackers run code with Windows SYSTEM privileges
McAfee Enterprise (now rebranded as Trellix) has patched a security vulnerability discovered in the company's McAfee Agent software for Windows enabling attackers to escalate privileges and execute arbitrary code with SYSTEM privileges.
موضوع Vm escape را که در ۵۰۴ خواندید ،
این هم Container escapeکه بواسطه نقص در کرنل لینوکس رخ میدهد .
#آکادمی_روزبه
https://sysdig.com/blog/cve-2022-0185-container-escape/
این هم Container escapeکه بواسطه نقص در کرنل لینوکس رخ میدهد .
#آکادمی_روزبه
https://sysdig.com/blog/cve-2022-0185-container-escape/
Sysdig
CVE-2022-0185: Detecting and mitigating Linux Kernel vulnerability causing container escape | Sysdig
Linux maintainers and vendors disclosed a heap overflow vulnerability in the Linux Kernel causing DoS, escape container or elevate privileges
کبالت استرایک ، راهکار دفاعی در مقابلش برای مدافعان
https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/
https://thedfirreport.com/2022/01/24/cobalt-strike-a-defenders-guide-part-2/
The DFIR Report
Cobalt Strike, a Defender’s Guide - Part 2
In this post, we will focus on the network traffic it produced, and provide some easy wins defenders can be on the look out for to detect beaconing activity. We cover topics such as Domain Fronting, SOCKS proxy, C2 traffic, Sigma rules, JARM, JA3/s, RITA…
Forwarded from IoT Report
Cyber Security Baseline for Consumer IoT Device-iotreport.pdf
4.6 MB
Cyber #Security Baseline for Consumer Internet of Things Device
#Xiaomi AIOT Security Laboratory
December 2021
@iotreport
#Xiaomi AIOT Security Laboratory
December 2021
@iotreport