NEW BOT Телеграм, страница

Network Security Channel

کنترلی که هکر ها روی دور زدن آن تمرکز کرده اند : EDR

این بار:

بریک پوینت های سخت افزاری و دور زدن EDR

@Engineer_Computer

https://cymulate.com/blog/blindside-a-new-technique-for-edr-evasion-with-hardware-breakpoints

Cymulate

EDR Evasion with Hardware Breakpoints: The Blindside Technique

Cymulate researchers have discovered a new vulnerability and created a proof of concept. The technique based on it allows attackers to circumvent many EDR vendors.

157 views22:11

Network Security Channel

برای دیکامپایل برنامه های دات نت در راستای مهندسی معکوس بدافزار

@Engineer_Computer

https://blog.ndepend.com/in-the-jungle-of-net-decompilers/

NDepend Blog

.NET - 7 Decompiler Compared (2026) - NDepend Blog

7 .NET decompilers compared, understand their various pros and cons and choose the one that will suit you best.

191 views22:11

Network Security Channel

همه جا هک می‌شود
هیچکس در امان نیست

فقط میتوانید زمان هک شدن و شدت اثر را مدیریت کنید

⛳️سازمان امنیت زیرساخت های حیاتی آمریکا CISA هک شد !

@Engineer_Computer

https://securityintelligence.com/news/cisa-hackers-key-systems-offline/

Security Intelligence

CISA hit by hackers, key systems taken offline

The organization protecting all levels of the U.S. government against cyberattacks has been hacked. Here's what you need to know.

230 views22:11

Network Security Channel

The Windows Process Journey - v6.0 - Aug 2023.pdf

2.6 MB

مروری بر پراسس های مهم ویندوز
@Engineer_Computer

🔥2

255 viewsedited 22:11

Network Security Channel

Professional.Red.Teaming_Chapter_1.pdf

1.5 MB

کتاب تیم قرمز حرفه‌ای - فصل اول
@Engineer_Computer

196 views20:28

Network Security Channel

Teler Real-time HTTP intrusion detection
https://github.com/kitabisa/teler

@Engineer_Computer

186 views20:28

Network Security Channel

آمادگی برای آزمون CC

https://www.linkedin.com/posts/doukkalli_cybersecurity-ethicalhacking-isc2-activity-7176011704747589632-onVI?utm_source=share&utm_medium=member_android

@Engineer_Computer

Good ressources for preparing your ISC2 CC. | Dr. Azzeddine RAMRAMI

195 views20:29

Network Security Channel

نوروز و مقاله ای در زمینه مقدمات فارنزیک لینوکس

https://0xstn.medium.com/linux-forensics-bb0b6387002f

@Engineer_Computer

Medium

💻Linux Forensics [THM]

Learn about the common forensic artifacts found in the file system of Linux Operating System

203 views20:29

Network Security Channel

کشف آسیب پذیری CSRF در افزونه دیجیکس در نسخه 8.4.1 و از جمله آن
مدیران سایت که داری این افزونه می باشند نسخه خود را هرچه سریع تر آپدیت کنید .

CVE : CVE-2024-0203

منبع : https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/digits/digits-841-cross-site-request-forgery-to-privilege-escalation

@Engineer_Computer

969 views20:31

Network Security Channel

ransomware family trees
https://github.com/cert-orangecyberdefense/ransomware_map/blob/main/OCD_WorldWatch_Ransomware-ecosystem-map.pdf

@Engineer_Computer

175 views19:40

Network Security Channel

2023 Annual Intelligence Report.pdf

4.8 MB

@Engineer_Computer

163 views19:40

Network Security Channel

امکان کرش و ریبوت دامین کنترلر بخاطر به روز رسانی

قبل از اعمال این به روزرسانی ها(KB5035855 and KB5035857) که در سه شنبه اخیر ارائه شده اند ؛ آنها رادر محیط تست ارزیابی نمایید چرا که با توجه به مشاهدات انجام شده امکان کرش دامین کنترلر وجود دارد .

@Engineer_Computer

اگر پس از نصب به روز رسانی ها دچار مشکل شده اید مطابق دستورالعمل لینک زیر نسبت به حذف KB ها اقدام نمایید

https://www-bleepingcomputer-com.cdn.ampproject.org/c/s/www.bleepingcomputer.com/news/microsoft/new-windows-server-updates-cause-domain-controller-crashes-reboots/amp/

www-bleepingcomputer-com.cdn.ampproject.org

New Windows Server updates cause domain controller crashes, reboots

The March 2024 Windows Server updates are causing some domain controllers to crash and restart, according to widespread reports from Windows administrators.

164 views19:42

Network Security Channel

فناوری API ها و چالش‌های امنیتی امروزه نظیر عدم کارآمدی WAF ها برای آنها

@Engineer_Computer

https://www.securityinfowatch.com/cybersecurity/article/53099576/is-there-a-clear-winner-for-perimeter-api-security-versus-a-holistic-approach

Security Info Watch

Is there a clear winner for perimeter API security versus a holistic approach?

2024 may just be the year that we see API security strategies develop at a more rapid pace

141 views19:42

Network Security Channel

مقاله ای خوب برای محققان امنیتی در راستای آینده همیاری هوش مصنوعی در امنیت اطلاعات

توافق شرکت های امنیتی با Nvidia در حوزه همکاری های امنیتی

@Engineer_Computer

https://www.sdxcentral.com/articles/news/nvidia-supercharges-cybersecurity-with-ai-at-gtc-2024/2024/03/

SDxCentral

Nvidia supercharges cybersecurity with AI at GTC 2024

Several cybersecurity companies announced their partnerships with Nvidia to harness the power of AI and accelerated computing at Nvidia GTC.

156 views19:42

Network Security Channel

راهکاری برای ارتقای سطح دسترسی در دامین با سوء استفاده از DHCP

** همیشه توصیه شده است که تمام نقش ها را به اکتیو ندهید !!

Mitigations

Defensive measures against this threat include:

Identifying risky DHCP configuration

Mitigating relay attacks against AD CS

Practicing DHCP administrators group hygiene

Using segmentation to reduce the attack surface

Identifying DNS anomalies

@Engineer_Computer

https://www.akamai.com/blog/security-research/abusing-dhcp-administrators-group-for-privilege-escalation-in-windows-domains

Akamai

Abusing the DHCP Administrators Group to Escalate Privileges in Windows Domains | Akamai

A new malicious privilege escalation technique can be disastrous. In this post, get context and defensive measures against this threat.

👍1

137 views19:42

Network Security Channel

پوستر مبانی DFIR از سنز

@Engineer_Computer

https://www.sans.org/posters/dfir-fundamentals-poster/?utm_medium=Social&utm_source=Twitter&utm_content=Start%20in%20DFIR%20Poster_VMR&utm_campaign=DFIR%20Poster

SANS Institute

DFIR Fundamentals Poster

The first step in any investigation is to identify and gather evidence. Digital forensic investigations are no different. The evidence used in this type of investigation is data, and this data can live in many different locations in a variety of formats.

123 views19:42

Network Security Channel