دوره مقدماتی و رایگان دیجیتال فارنزیک
#آکادمی_روزبه
https://www.open.edu/openlearn/science-maths-technology/digital-forensics?active-tab=description-tab
#آکادمی_روزبه
https://www.open.edu/openlearn/science-maths-technology/digital-forensics?active-tab=description-tab
Open Learning
Digital forensics
Digital evidence features in just about every part of our personal and business lives. Legal and business decisions hinge on having timely data about what people have actually done. This free ...
کشف دوربین های جاسازی شده در محل هایی چون هتل ها با گوشی های اندرویید و آیفون
با استفاده از پی جویی شبکه وای فای و قابلیت دید در شب
#آکادمی_روزبه
https://hakin9.org/detect-hidden-surveillance-cameras-with-your-phone-by-anastasis-vasileiadis/#login
با استفاده از پی جویی شبکه وای فای و قابلیت دید در شب
#آکادمی_روزبه
https://hakin9.org/detect-hidden-surveillance-cameras-with-your-phone-by-anastasis-vasileiadis/#login
Hakin9 - IT Security Magazine
404 - Hakin9 - IT Security Magazine
۵ آسیب پذیری در استاندارد سیستم های رادیویی TETRA
وجود درب پشتی امکان شنود تماس ها و تزریق اطلاعات را ممکن میکرده است .
این استاندارد رادیویی در بسیاری از تجهیزات مورد استفاده قرار می‌گیرد
#آکادمی_روزبه
Depending on infrastructure and device configurations, these vulnerabilities allow for real time decryption, harvest-now-decrypt-later attacks, message injection, user deanonymization, or session key pinning
https://thehackernews.com/2023/07/tetraburst-5-new-vulnerabilities.html
وجود درب پشتی امکان شنود تماس ها و تزریق اطلاعات را ممکن میکرده است .
این استاندارد رادیویی در بسیاری از تجهیزات مورد استفاده قرار می‌گیرد
#آکادمی_روزبه
Depending on infrastructure and device configurations, these vulnerabilities allow for real time decryption, harvest-now-decrypt-later attacks, message injection, user deanonymization, or session key pinning
https://thehackernews.com/2023/07/tetraburst-5-new-vulnerabilities.html
طبق دستور ریاست جمهور امریکا ،تجهیزات هوشمند و اینترنت اشیاء دارای رتبه بندی امنیتی می‌شوند
#آکادمی_روزبه
https://learningenglish-voanews-com.cdn.ampproject.org/c/s/learningenglish.voanews.com/amp/us-announces-program-to-identify-safe-smart-devices/7186263.html
#آکادمی_روزبه
https://learningenglish-voanews-com.cdn.ampproject.org/c/s/learningenglish.voanews.com/amp/us-announces-program-to-identify-safe-smart-devices/7186263.html
جدید
Detection and response development lifecycle (DR-DLC)
Apply The Principles Of Software Development To Detection And Response Engineering
#آکادمی_روزبه
https://www.forrester.com/blogs/announcing-the-detection-and-response-development-lifecycle-dr-dlc-for-detection-engineering/
Detection and response development lifecycle (DR-DLC)
Apply The Principles Of Software Development To Detection And Response Engineering
#آکادمی_روزبه
https://www.forrester.com/blogs/announcing-the-detection-and-response-development-lifecycle-dr-dlc-for-detection-engineering/
Forrester
Announcing The Detection And Response Development Lifecycle (DR-DLC) For Detection Engineering
Read this blog to learn a critical principle of detection and response: following the detection and response development lifecycle (DR-DLC).
امنیت فیزیکی
درباب رویکرد پن تستر ها و محافظان در حوزه پایش با دوربین و پایش فیزیکی
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/the-man-who-wasnt-there
درباب رویکرد پن تستر ها و محافظان در حوزه پایش با دوربین و پایش فیزیکی
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/the-man-who-wasnt-there
Covert Access Team
The Man Who Wasn’t There
Covert Access Team is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. When it comes to a buildings physical security, few objects represent this concept more so than a surveillance camera.…
بررسی موردیِ یک فیشینگ از طریق SMS
#آکادمی_روزبه
https://blog.bushidotoken.net/2023/07/investigating-sms-phishing-text.html?m=1
#آکادمی_روزبه
https://blog.bushidotoken.net/2023/07/investigating-sms-phishing-text.html?m=1
blog.bushidotoken.net
Investigating SMS phishing text messages from scratch
CTI, threat intelligence, OSINT, malware, APT, threat hunting, threat analysis, CTF, cybersecurity, security
آسیب پذیری توانایی ارتقای دسترسی در ابونتو
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/almost-40-percent-of-ubuntu-users-vulnerable-to-new-privilege-elevation-flaws/amp/
#آکادمی_روزبه
https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/security/almost-40-percent-of-ubuntu-users-vulnerable-to-new-privilege-elevation-flaws/amp/
www-bleepingcomputer-com.cdn.ampproject.org
Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws
Two Linux vulnerabilities introduced recently into the Ubuntu kernel create the potential for unprivileged local users to gain elevated privileges on a massive number of devices.
تست نفوذ فیزیکی
این مرحله :
embedded reconnaissance.
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/spot-the-spy
این مرحله :
embedded reconnaissance.
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/spot-the-spy
Substack
Spot the Spy
Understanding Embedded Reconnaissance
شغل شما بعنوان تستر نفوذ فیزیکی این است هرچه بیشتر آسیب پذیری در لایه فیزیکال پیدا کنید
حالا از یک زاویه دیگر این موضوع رو بررسی می‌کنیم: انجام عملیات در روز یا شب
پارامتر های موثر
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/day-vs-night
حالا از یک زاویه دیگر این موضوع رو بررسی می‌کنیم: انجام عملیات در روز یا شب
پارامتر های موثر
#آکادمی_روزبه
https://covertaccessteam.substack.com/p/day-vs-night
Substack
Day vs Night
Crafting the Optimal Strategy for Physical Penetration Testing
نگاهی به معماری امن
#آکادمی_روزبه
https://www.jdsupra.com/legalnews/security-architecture-benefits-a-6411420/
#آکادمی_روزبه
https://www.jdsupra.com/legalnews/security-architecture-benefits-a-6411420/
JD Supra
Security Architecture Benefits: A Comprehensive Guide
In the continuously evolving landscape of digital technology, safeguarding data and assets has become a cornerstone of every organization’s strategy. To address this, businesses worldwide are...
چرا تکیه بر CVSS برای اولویت بندی وصله در سازمان دیگر مناسب نیست؟
A patching strategy that considers CVSS, internal environment context (such as reachability analysis, asset criticality, and provenance), and additional threat intelligence sources such as CISA KEV combined with EPSS, can assist organizations in making informed, risk-based vulnerability management decisions and improve the overall security posture of their organization.
#آکادمی_روزبه
https://www.helpnetsecurity.com/2023/07/31/cvss-vulnerability-strategy/
A patching strategy that considers CVSS, internal environment context (such as reachability analysis, asset criticality, and provenance), and additional threat intelligence sources such as CISA KEV combined with EPSS, can assist organizations in making informed, risk-based vulnerability management decisions and improve the overall security posture of their organization.
#آکادمی_روزبه
https://www.helpnetsecurity.com/2023/07/31/cvss-vulnerability-strategy/
Help Net Security
Relying on CVSS alone is risky for vulnerability management - Help Net Security
A vulnerability management strategy that relies solely on CVSS for vulnerability prioritization is proving to be insufficient at best.
لیست درایور های ویندوز که توسط هکرها برای نفوذ استفاده می‌شود
#آکادمی_روزبه
https://www.loldrivers.io
#آکادمی_روزبه
https://www.loldrivers.io