tools
WebApp Security
Open-appsec - machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs
https://github.com/openappsec/openappsec


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.05

Analytics
ThreatResearch
DDoS threat report for 2023 Q2
https://blog.cloudflare.com/ddos-threat-report-2023-q2


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.05

hardening
GitLab Hardening
https://about.gitlab.com/blog/2023/05/23/how-to-harden-your-self-managed-gitlab-instance

All Tiers: https://docs.gitlab.com/ee/security


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.05

#DiyakoSecureBow

Whitepaper
Decoy Dog is no Ordinary Pupy: Separating a Sly DNS Malware from the Pack 2023.

-Business Secure Continuity-
1402.05.05

#malwareanalysis #dnssecurity #dnsolutions #dns
#BusinessSecureContinuity

https://www.linkedin.com/posts/diyako-secure-bow_dns-malware-2023-activity-7090261169415856130-txMd?utm_source=share&utm_medium=member_ios

🚨 Heads up, Ubuntu users!

Researchers have discovered high-severity Linux flaws in the Ubuntu kernel, affecting 40% of users!

Learn about GameOver(lay) vulnerabilities CVE-2023-32629 and CVE-2023-2640: https://thehackernews.com/2023/07/gameoverlay-two-severe-linux.html


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.06

همین اطراف هستند، گسيل گسيل طيف ها

تعدد شِمرهایی که ستم می کنند
حسین هایی که پاي عدالت قربانی می شوند
و معدود مختارهایی که دیر می رسند ...


-و مابقي مخاطبين سينما ٣٠٠٠!-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.06

دوست داشتنِ کسی در حکمِ خواندنِ اوست.

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.06

#DiyakoSecureBow

Research
Co-Simulation Framework For Network Attack Generation and Monitoring 2023.

-Business Secure Continuity-
1402.05.06

#advancedanalytics #cybercrime #apt29 #apt41
#BusinessSecureContinuity

https://www.linkedin.com/posts/diyako-secure-bow_next-generation-attack-2023-activity-7090686991238840320-pK-O?utm_source=share&utm_medium=member_ios

#پرسش_پاسخ

👆

-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.06

#DiyakoSecureBow

Every day on Instagram,…els
we see parents who publish photos and videos of their young children, about their growing up, their happiness... But they don't know that children also have privacy and fraudsters can easily threaten their future with the help of technology. These two minutes are worth your time.
With the development of technology and artificial intelligence(AI), this issue is extremely important Think more about your digital footprint.

#privacy
#Information_security
#Cyber_security_risks
#Phishing
#Fraud

هر روز تو اینستاگرام پدر مادرهایی رو می‌بینیم که عکس و فیلم بچه‌های خردسالشون رو منتشر می‌کنند، از بزرگ شدنشون، خوشحالیشون...، ولی اطلاع ندارند که بچه‌ها هم حریم خصوصی دارند و کلاه‌برداران به راحتی به کمک تکنولوژی آیندشون رو تهدید می‌کنند.این دو دقیقه ارزش وقت گذاشتن داره.با توسعه تكنولوژي و هوش مصنوعي اين موضوع به شدت اهميت دارد پيرامون ردپاي ديجيتال خود بيشتر فكر كنيد.

-Business Secure Continuity-
1402.05.07

#DiyakoSecureBow

Uncovering an Iranian mobile malware campaign:
During a recent proactive hunt for malicious mobile malware, Sophos X-Ops researchers from SophosLabs discovered a group of four credential-harvesting apps targeting customers of several Iranian banks. Most of the apps are signed using the same – possibly stolen – certificate, and share various classes and strings.
The apps target the following banks:🥸🥶
Bank Mellat
Bank Saderat
Resalat Bank
Central Bank of Iran

-Business Secure Continuity-
1402.05.07

https://news.sophos.com/en-us/2023/07/27/uncovering-an-iranian-mobile-malware-campaign/amp/

#advancedanalytics #cybercrime #apt29 #apt41 #sophos #Malware #sophoslab
#BusinessSecureContinuity

https://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-advancedanalytics-cybercrime-activity-7090973631190560768-zL6R?utm_source=share&utm_medium=member_ios

#DiyakoSecureBow

The importance of being up-to-date in the last
.Technologies
.Educational course
.Maturity models
.Audits
.International standards
.Methods
.Vulnerabilities
.Threats
.Risks

It helps you in quick identification of threats and quick feedback, in other words:
Fast Detection and Fast Respond

اهميت بروزبودن در آخرين
تكنولوژي ها
دوره هاي آموزشي
مدل هاي بلوغ
مميزي ها
استاندارد هاي بين المللي
بهروش ها
آسيب پذيري ها
تهديدات

شما رادر شناسايي سريع تهديدات و بازخورد سريع كمك مي كند

-Business Secure Continuity-
1402.05.08

#SANS #cybersecurity #informationgovernance
#ISo27001
#COBIT #nistcybersecurityframework
#solutionsarchitect
#BusinessSecureContinuity

https://www.linkedin.com/posts/diyako-secure-bow_diyakosecurebow-sans-cybersecurity-activity-7091401891720388608-Nes2?utm_source=share&utm_medium=member_ios

از انرژي هاي مثبت و صادقانه،
نظرات لطف و محبت
آرزوهاي خير و سلامتي
بسيار بسيار بسيار
ممنون هستم❤️🙏✌🏼😇اميدوارم دومينو پابرجا و به چرخد.

👇🏻

-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.08

Threat Research
All About Dependency Confusion Attack
(Detecting, Finding, Mitigating)
https://github.com/x1337loser/Dependency-Confusion


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.09

دستگاه‌های میكروتیك در معرض خطرحفره افزایش سطح دسترسیSuper Admin
✅اولویت رسیدگی: فوری
این نقص به مهاجمان راه دور با یک حساب مدیریت موجود اجازه می‌دهد تا از طریق رابط Winbox یا HTTP دستگاه، امتیازات خود را به "Super Admin" ارتقا دهند.
شناسه آسیب‌پذیری‌‌ بحرانی: CVE-2023-30799

خبر کامل در آدرس: https://afta.gov.ir/fa-IR/Portal/4927/news/view/14608/2089/ منتشر شده است

مرکز مدیریت راهبردی افتا


-Cyber Security awareness-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1402.05.09