Хороший свод того, что нас может ждать ближайшие 2-3 года в ИБ от государства в рамках программы цифровая экономика.
https://www.cnews.ru/news/top/2020-01-03_vlasti_vkladyvayut_v_kiberbezopasnost
https://www.cnews.ru/news/top/2020-01-03_vlasti_vkladyvayut_v_kiberbezopasnost
CNews.ru
Власти вкладывают в кибербезопасность России 28 миллиардов, не решившись утроить эту сумму - CNews
Минкомсвязи провело конкурсы на распределение субсидий на сумму 690 млн руб. для реализации мероприятий федпроекта...
Форрестер считает deep fakes одним из основных рисков в 2020 для организаций и физлиц.
https://go.forrester.com/predictions/it/
https://go.forrester.com/predictions/it/
Еще один пример катастрофичных последствий для бизнеса от шифровальщиков.
Company shuts down because of ransomware, leaves 300 without jobs just before holidays | ZDNet
https://www.zdnet.com/article/company-shuts-down-because-of-ransomware-leaves-300-without-jobs-just-before-holidays/
Company shuts down because of ransomware, leaves 300 without jobs just before holidays | ZDNet
https://www.zdnet.com/article/company-shuts-down-because-of-ransomware-leaves-300-without-jobs-just-before-holidays/
ZDNET
Company shuts down because of ransomware, leaves 300 without jobs just before holidays
Company tells employees to seek new employment after suspending all operations right before Christmas.
Forwarded from RUSCADASEC news: Кибербезопасность АСУ ТП (Anton Shipulin)
Опубликована долгожданная первая версия матрицы техник атакующих MITRE ATT&CK for ICS
https://medium.com/mitre-attack/launching-attack-for-ics-2be4d2fb9b8
https://medium.com/mitre-attack/launching-attack-for-ics-2be4d2fb9b8
Medium
Launching ATT&CK for ICS
We have seen a lot of interest in ATT&CK for Industrial Control Systems (ICS) over the last couple of years and are releasing it now.
Вторая версия рекомендаций.
NISTIR 8259 (Draft), Recommendations for IoT Device Manufacturers | CSRC
https://csrc.nist.gov/publications/detail/nistir/8259/draft
NISTIR 8259 (Draft), Recommendations for IoT Device Manufacturers | CSRC
https://csrc.nist.gov/publications/detail/nistir/8259/draft
CSRC | NIST
NIST Internal or Interagency Report (NISTIR) 8259 (Draft), Recommendations for IoT Device Manufacturers: Foundational Activities…
Internet of Things (IoT) devices often lack device cybersecurity capabilities their customers—organizations and individuals—can use to help mitigate their cybersecurity risks. Manufacturers can help their customers by improving how securable the IoT devices…
Обновленная информация по аккредитованым SOC европы.
https://www.enisa.europa.eu/topics/csirts-in-europe/csirt-inventory/certs-by-country-interactive-map
https://www.enisa.europa.eu/topics/csirts-in-europe/csirt-inventory/certs-by-country-interactive-map
Ожидания на 2020 год от преподавателей SANS.
https://www.sans.org/security-trends/2020/01/03/14-sans-instructors-share-their-cyber-resolutions-for-2020
https://www.sans.org/security-trends/2020/01/03/14-sans-instructors-share-their-cyber-resolutions-for-2020
www.sans.org
SANS Security Trend Line | 14 SANS Instructors Share Their Cyber Resolutions for 2020 | SANS Institute
SANS Security Trend Line blog pertaining to 14 SANS Instructors Share Their Cyber Resolutions for 2020
Стоимость практической атаки на sha-1 упала до 75 000 долларов.
"...В итоге атакующий может выдать себя за жертву и подписать любой документ от её имени..."
https://www.opennet.ru/opennews/art.shtml?num=52149
"...В итоге атакующий может выдать себя за жертву и подписать любой документ от её имени..."
https://www.opennet.ru/opennews/art.shtml?num=52149
www.opennet.ru
Предложен метод определения коллизий в SHA-1, пригодный для атаки на PGP
Исследователи из французского государственного института исследований в информатике и автоматике (INRIA) и Наньянского технологического университета (Сингапур) представили метод атаки Shambles (PDF), который преподносится как первая практическая реализация…
Why you should ignore Annex A when doing ISO27001
https://twitter.com/3dwave/status/1214780605537378311?s=09
https://twitter.com/3dwave/status/1214780605537378311?s=09
Twitter
Andrey Prozorov
https://t.co/6p7yGMyXlj
Forwarded from Пост Лукацкого
Новости ИБ за новогодние праздники https://t.co/RWOmss0feq
— Alexey Lukatsky (@alukatsky) January 9, 2020
— Alexey Lukatsky (@alukatsky) January 9, 2020
...
Edward Scheidt, Convenor of
ISO/TC 68/SC 2/WG 17, Security aspects of digital currencies;
and Ryan Pierce, Co-Chair of this working group:
Yet while convenience appears to be a big advantage for money in a digital format, three security-related issues need to be resolved:
1. Trust, so that the supporting international financial ecosystem can warranty its financial payments and financial transactions.
2. Binding liability, so that investments supporting a financial ecosystem do not have negative legal ramifcations.
3. Privacy, so that the individual, as
a consumer, with the supporting
financial infrastructure can ensure
that information remains private
when needed.
Edward Scheidt, Convenor of
ISO/TC 68/SC 2/WG 17, Security aspects of digital currencies;
and Ryan Pierce, Co-Chair of this working group:
Yet while convenience appears to be a big advantage for money in a digital format, three security-related issues need to be resolved:
1. Trust, so that the supporting international financial ecosystem can warranty its financial payments and financial transactions.
2. Binding liability, so that investments supporting a financial ecosystem do not have negative legal ramifcations.
3. Privacy, so that the individual, as
a consumer, with the supporting
financial infrastructure can ensure
that information remains private
when needed.
NIST Webinar:
Learning Principles for Cybersecurity Practice
https://www.nist.gov/news-events/events/2020/01/nice-webinar-learning-principles-cybersecurity-practice
Learning Principles for Cybersecurity Practice
https://www.nist.gov/news-events/events/2020/01/nice-webinar-learning-principles-cybersecurity-practice