NEW BOT Телеграм, страница

ISACARuSec

XDR Defined: Giving Meaning To Extended Detection And Response

https://go.forrester.com/blogs/xdr-defined-giving-meaning-to-extended-detection-and-response/

248 viewsedited 17:22

ISACARuSec

https://cloud.google.com/blog/products/identity-security/google-cloud-security-foundations-guide

Google Cloud Blog

Get the guide: Google Cloud security foundations | Google Cloud Blog

Get step by step guidance for creating a secured environment with Google Cloud with the security foundations guide and Terraform blueprint noscripts.

262 views05:48

ISACARuSec

Очередной пост по обнаружению в блоге Антона Чувакина, известного эксперта по soc и siem, в прошлом аналитика Gartner.

https://medium.com/anton-on-security/what-are-your-not-detecting-5056e20b441c

Medium

What Are You NOT Detecting?

What are you not detecting?

285 viewsedited 05:49

ISACARuSec

https://twitter.com/ISACANews/status/1387466711889334274

Twitter

ISACA Global

To succeed in the CISM exam, reprogram your mind for success and think like a manager, writes George McPherson. Read more of George's CISM prep tips here: bit.ly/3dZ9N6I #cism #isaca #security #informationsecurity

297 viewsedited 05:50

ISACARuSec

https://csrc.nist.gov/publications/detail/sp/800-66/rev-2/draft

CSRC | NIST

NIST Special Publication (SP) 800-66 Rev. 2 (Draft), Implementing the Health Insurance Portability and Accountability Act (HIPAA)…

The HIPAA Security Rule focuses on safeguarding electronic protected health information (ePHI) held or maintained by regulated entities. The ePHI that a regulated entity creates, receives, maintains, or transmits must be protected against reasonably anticipated…

300 views15:46

ISACARuSec

https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/draft

CSRC | NIST

NIST Special Publication (SP) 800-161 Rev. 1 (Withdrawn), Cyber Supply Chain Risk Management Practices for Systems and Organizations

Organizations are concerned about the risks associated with products and services that may contain potentially malicious functionality, are counterfeit, or are vulnerable due to poor manufacturing and development practices within the cyber supply chain. These…

332 views17:05

ISACARuSec

Forwarded from Андрей

https://youtu.be/-K2phjNggtA

YouTube

ВЕБИНАР: ГОСТ Р 57580.1 В ВОПРОСАХ И ОТВЕТАХ

При регистрации на мероприятие мы просили участников задать не более 10 вопросов по теме применения требований ГОСТ Р 57580.1-2017 и ГОСТ Р 57580.1-2018. Наши эксперты постарались дать ответы на наиболее волнующие и популярные вопросы опираясь на многолетний…

340 views09:35

ISACARuSec

Forwarded from Пост Лукацкого

Вышло обновление MITRE ATT&CK® - версия 9. Основной фокус на контейнеры и облака https://t.co/kmN17N8ans
— Alexey Lukatsky (@alukatsky) April 30, 2021

208 views13:25

ISACARuSec

https://cloud.google.com/blog/products/identity-security/how-to-authenticate-service-accounts-to-help-keep-applications-secure

Google Cloud Blog

How to authenticate service accounts to help keep applications secure | Google Cloud Blog

Help keep applications secure by using the right type of service account authentication for the situation.

299 views20:20

ISACARuSec

https://www.theregister.com/2021/04/29/ransomware_task_force_offers_48/

The Register

48 ways you can avoid file-scrambling, data-stealing miscreants – or so says the Ransomware Task Force

No, not the US government's task force ... the other one

309 views20:22

ISACARuSec

https://www.brighttalk.com/webcast/10415/479914

Brighttalk

Healthcare’s Cloud Migration: 7 Emerging Data Security Risks

Seeking flexibility, scalability, and cost-savings, an increasing number of healthcare organizations are
moving systems and data to the Cloud. Fueled by increased adoption of telemedicine and wearable...

317 views05:48

ISACARuSec

https://www.nist.gov/blogs/cybersecurity-insights/differentially-private-synthetic-data

NIST

Differentially Private Synthetic Data

In this series, we've examined several different ways to answer queries over data using differential privacy.

262 views02:50

ISACARuSec

iso готовит новый стандарт по образованию в ИБ.
https://www.iso.org/news/ref2655.html

ISO

The cybersecurity skills gap

Why education is our best weapon against cybercrime.

268 views02:53

ISACARuSec

Forwarded from Пост Лукацкого

Текущее состояние постквантовой криптографии (исключая российские разработки) и методы защиты от квантовых компьютеров. Жаль, что ENISA обошла вниманием тему прогноза появления первых квантовых компьютеров https://t.co/DEwutsPMHr
— Alexey Lukatsky (@alukatsky) May 3, 2021

www.enisa.europa.eu

Post-Quantum Cryptography: Current state and quantum mitigation | ENISA

ENISA is the EU agency dedicated to enhancing cybersecurity in Europe. They offer guidance, tools, and resources to safeguard citizens and businesses from cyber threats.

184 views03:47

ISACARuSec

https://twitter.com/ISACANews/status/1389248409723363332

Twitter

ISACA Global

Password policies can be tough to manage. Are you and your organization in-the-know? ISACA members read on to learn more! Not a member? Access for a limited time—join to see more: bit.ly/3vC28RN

278 viewsedited 03:50

ISACARuSec

https://www.helpnetsecurity.com/2021/05/04/security-kubernetes/

Help Net Security

Kubestriker: A security auditing tool for Kubernetes clusters

Kubestriker is an open-source and platform-agnostic tool for identifying security misconfigurations in Kubernetes clusters.

317 views10:07

ISACARuSec

https://www.zdnet.com/article/best-programming-language/

ZDNet

Upskilling will be a part of work's new normal. Here's a look at the most popular programming languages based on surveys and courses for them.

312 views06:14

ISACARuSec

Securing Telehealth Remote Patient Monitoring Ecosystem | NCCoE

The NCCoE released the second draft of the NIST Cybersecurity Practice Guide, SP 1800-30, Securing Telehealth Remote Patient Monitoring Ecosystem, on May 6th, 2021. The public is encouraged to review the draft and provide feedback for possible incorporation into the final version before the public comment period closes on June 7th, 2021.

https://www.nccoe.nist.gov/projects/use-cases/health-it/telehealth

269 viewsedited 15:43

ISACARuSec

https://twitter.com/Russian_OSINT/status/1389904889313124354

Неплохой канал YouTube с интервью известных ИБ экспертов.

Twitter

Sergey R3dhunt

В гостях Сергей Голованов @k1k_ , главный эксперт "Лаборатории Касперского".Говорим о вирусах, работе в ИБ компаниях, мотивации и конечно же заработке.youtu.be/toLKL06PK90

293 viewsedited 05:26

ISACARuSec

https://www.enisa.europa.eu/news/enisa-news/how-to-secure-the-connected-automated-mobility-cam-ecosystem

ENISA

How to Secure the Connected & Automated Mobility (CAM) Ecosystem

The European Union Agency for Cybersecurity discloses an in-depth analysis of the cybersecurity challenges faced by the CAM sector and provides actionable recommendations to mitigate them.