NEW BOT Телеграм, страница

ISACARuSec

No actively exploited zero-days have been found in Linux, Safari, or macOS since 2014, when Google began tracking this stat.

2019 was the first year when an Android zero-day was discovered.

Not all zero-days impacted the latest version of the OS/software.

Google suspects some software vendors are hiding actively exploited zero-days as mundane bugfixes.

Google says there's a detection bias towards Microsoft, as there are more security tools specialized in detecting Windows bugs.

Google says it's hard to find zero-days on mobile platforms due to walled garden and app sandbox approaches.

63% of 2019's 0-day vulnerabilities were memory corruption bugs (Same 63% figure also applies to 2020 H1's zero-days. This is also in tune with stats released by Microsoft and Google in 2019, both claiming that 70% of all Microsoft security bugs and 70% of all Chrome vulnerabilities are memory safety issues) (In 2020, 63% of all).

Google said that it plans to publish an annual Zero-Day Year in Review report each year, going forward.

447 views06:38

ISACARuSec

https://rusrim.blogspot.com/2020/08/iso-9001.html?m=1

Blogspot

ИСО: Среди пользователей стандартов системы менеджмента качества проводится онлайн-опрос, результаты которого будут учтены в процессе…

29 июля 2020 года профильный технический подкомитет ИСО TC176/SC2 «Менеджмент качества и обеспечение уверенности в качестве – Системы менед...

341 viewsedited 06:43

ISACARuSec

ITL Bulletin , Security Considerations for Exchanging Files Over the Internet | CSRC
https://csrc.nist.gov/publications/detail/itl-bulletin/2020/08/security-considerations-for-exchanging-files-over-the-internet/final

CSRC | NIST

ITL Bulletin August 2020, Security Considerations for Exchanging Files Over the Internet

Every day, in order to perform their jobs, workers exchange files over the Internet through email attachments, file sharing services, and other means. To help organizations reduce potential exposure of sensitive information, NIST has released a new Information…

338 viewsedited 19:51

ISACARuSec

Forwarded from Пост Лукацкого

Проект национального стандарта ГОСТ Р
«Защита информации. Обнаружение, предупреждение и ликвидация последствий компьютерных атак и реагирование на компьютерные инциденты. Термины и определения» https://t.co/N0WAs5uirc— Alexey Lukatsky (@alukatsky) August 4, 2020

229 views14:35

ISACARuSec

https://www.cisecurity.org/blog/introducing-the-community-defense-model

CIS

Introducing the Community Defense Model - CIS

To help organizations decide how to prioritize defensive security measures, CIS created the Community Defense Model (CDM).

407 viewsedited 06:16

ISACARuSec

Cyber Career Pathways Tool | National Initiative for Cybersecurity Careers and Studies
https://niccs.us-cert.gov/workforce-development/cyber-career-pathways

National Initiative for Cybersecurity Careers and Studies

Cyber Career Pathways Tool

Interactively explore the NICE Cybersecurity Workforce Framework according to five distinct skill communities and attributes for 52 work roles.