Commonly Exploited Protocols: Remote Desktop Protocol (RDP)
https://www.cisecurity.org/blog/commonly-exploited-protocols-remote-desktop-protocol-rdp/
https://www.cisecurity.org/blog/commonly-exploited-protocols-remote-desktop-protocol-rdp/
CIS
Blog | Commonly Exploited Protocols: Remote Desktop Protocol (RDP)
CIS is releasing guidance to help organizations understand how to mitigate against these risks and why it is important, in order to protect and defend against the most pervasive cyber threats that are faced today. This guide explains how best to secure Remote…
Кто не идёт вперед, тот идёт назад: Международный институт архивного дела Триеста и Марибора 7-8 декабря 2020 года проводит бесплатную онлайн-конференцию «Международный день архивов»
https://rusrim.blogspot.com/2020/12/7-8-2020.html?m=1
https://rusrim.blogspot.com/2020/12/7-8-2020.html?m=1
Blogspot
Международный институт архивного дела Триеста и Марибора 7-8 декабря 2020 года проводит бесплатную онлайн-конференцию «Международный…
Данное сообщение директора Международного института архивного дела Триеста (Италия) и Марибора (Словения) (International Institute for Archi...
REPLY-TO-ALL Information Security Blog: SOC Forum 2020 Live: Роботы среди нас!
http://reply-to-all.blogspot.com/2020/12/soc-forum-2020-live.html?m=1
http://reply-to-all.blogspot.com/2020/12/soc-forum-2020-live.html?m=1
Blogspot
SOC Forum 2020 Live: Роботы среди нас!
Вкалывают роботы, А не человек! " До чего дошёл прогресс " Крылатов. Энтин Сегодня на SOC forum рассказывал о машинном обучении для целей ...
Malware may trick biologists into generating dangerous toxins in their labs - Help Net Security
https://www.helpnetsecurity.com/2020/12/01/cyber-biological-attack/
https://www.helpnetsecurity.com/2020/12/01/cyber-biological-attack/
Help Net Security
Malware may trick biologists into generating dangerous toxins in their labs - Help Net Security
An end-to-end cyber-biological attack, which may trick biologists into generating dangerous toxins in their labs, has been discovered.
Forwarded from Пост Лукацкого
Постер от SANS про security operations- https://t.co/tTORccZH4a Правда, 50 страниц - это уже не постер ;-) pic.twitter.com/1YiSe1lkxr
— Alexey Lukatsky (@alukatsky) December 3, 2020
— Alexey Lukatsky (@alukatsky) December 3, 2020
www.sans.org
SANS Institute
Computer security training, certification and free resources. We specialize in computer/network security, digital forensics, application security and IT audit.
Forwarded from Пост Лукацкого
“Как продать что-нибудь CISO?” - мастер-класс от руководителя службы ИБ Cisco https://t.co/qdpaGq6lhl
— Alexey Lukatsky (@alukatsky) December 3, 2020
— Alexey Lukatsky (@alukatsky) December 3, 2020
Twitter
Jon Sakoda
Excited to share our latest video Q&A with @mhanley_duo, CISO of @duosec and @Cisco. Every startup in the cybersecurity industry must learn “How to Sell to the CISO” and find ways to build trust without selling fear. Great wisdom for founders and execs: …
Geekhub CyberSecurity
Приглашаем присоединиться к онлайн-митапу по информационной безопасности, на котором обсудим, какие инструменты может использовать компания для обучения сотрудников основам ИБ.
Рассмотрим кейс Банка «Санкт-Петербург» — для обсуждения мы пригласили несколько спикеров, которые в деталях расскажут о том, как проходили киберучения в БСПБ в этом году.
📆Когда: 16 декабря, 18:00
📍Где: Онлайн
✅Регистрация: https://clck.ru/SM8WB
Приглашаем присоединиться к онлайн-митапу по информационной безопасности, на котором обсудим, какие инструменты может использовать компания для обучения сотрудников основам ИБ.
Рассмотрим кейс Банка «Санкт-Петербург» — для обсуждения мы пригласили несколько спикеров, которые в деталях расскажут о том, как проходили киберучения в БСПБ в этом году.
📆Когда: 16 декабря, 18:00
📍Где: Онлайн
✅Регистрация: https://clck.ru/SM8WB
geekhub.ru
Geekhub — серия митапов для lead-специалистов, организованная Банком «Санкт-Петербург».
NISTIR 8320A (Draft), Hardware-Enabled Security: Container Platform Security Prototype | CSRC
https://csrc.nist.gov/publications/detail/nistir/8320a/draft
https://csrc.nist.gov/publications/detail/nistir/8320a/draft
CSRC | NIST
NIST Internal or Interagency Report (NISTIR) 8320A (Draft), Hardware-Enabled Security: Container Platform Security Prototype
In today’s cloud data centers and edge computing, attack surfaces have significantly increased, hacking has become industrialized, and most security control implementations are not coherent or consistent. The foundation of any data center or edge computing…
Focus on National Cybersecurity Capabilities: New Self-Assessment Framework to Empower EU Member States — ENISA
https://www.enisa.europa.eu/news/enisa-news/national-cybersecurity-capabilities-framework
https://www.enisa.europa.eu/news/enisa-news/national-cybersecurity-capabilities-framework
www.enisa.europa.eu
Focus on National Cybersecurity Capabilities: New Self-Assessment Framework to Empower EU Member States
The EU Agency for Cybersecurity issues a National Capabilities Assessment Framework (NCAF) to help EU Member States self-measure the level of maturity of their national cybersecurity capabilities.
Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events | NCCoE
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/identify-protect
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/identify-protect
Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events | NCCoE
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/detect-respond
https://www.nccoe.nist.gov/projects/building-blocks/data-integrity/detect-respond
www.nccoe.nist.gov
Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events | NCCoE
Project Abstract
The process to mitigate an active attack on an organization’s data integrity requires use of strong, effective tools. Detection of a data integrity attack involves identification of its source, the affected systems, and sufficient data collection…
The process to mitigate an active attack on an organization’s data integrity requires use of strong, effective tools. Detection of a data integrity attack involves identification of its source, the affected systems, and sufficient data collection…
NICE Webinar: Competencies – The Next Frontier for Closing the Cybersecurity Skills Gap | NIST
https://www.nist.gov/news-events/events/2020/12/nice-webinar-competencies-next-frontier-closing-cybersecurity-skills-gap
https://www.nist.gov/news-events/events/2020/12/nice-webinar-competencies-next-frontier-closing-cybersecurity-skills-gap
NIST
NICE Webinar: Competencies – The Next Frontier for Closing the Cybersecurity Skills Gap
2nd Open Security Controls Assessment Language (OSCAL) Workshop | NIST
https://www.nist.gov/news-events/events/2021/02/2nd-open-security-controls-assessment-language-oscal-workshop
https://www.nist.gov/news-events/events/2021/02/2nd-open-security-controls-assessment-language-oscal-workshop
NIST
2nd Open Security Controls Assessment Language (OSCAL) Workshop
Video Recordings of the Event