NEW BOT Телеграм, страница - 619378012

ISACARuSec

2.27K subscribers

1.77K photos

13 videos

303 files

5.64K links

Канал направления ИБ Московского отделения ISACA

Направление канала новости ISACA, новости в области управления ИБ в России и мире, обмен лучшими практиками.

https://engage.isaca.org/moscow/home

Связь с администрацией
@popepiusXIII

Download Telegram

About

Blog

Apps

Platform

2.27K subscribers

Forwarded from Пост Лукацкого

Текущее состояние постквантовой криптографии (исключая российские разработки) и методы защиты от квантовых компьютеров. Жаль, что ENISA обошла вниманием тему прогноза появления первых квантовых компьютеров https://t.co/DEwutsPMHr
— Alexey Lukatsky (@alukatsky) May 3, 2021

www.enisa.europa.eu

Post-Quantum Cryptography: Current state and quantum mitigation | ENISA

ENISA is the EU agency dedicated to enhancing cybersecurity in Europe. They offer guidance, tools, and resources to safeguard citizens and businesses from cyber threats.

184 views03:47

https://twitter.com/ISACANews/status/1389248409723363332

Password policies can be tough to manage. Are you and your organization in-the-know? ISACA members read on to learn more! Not a member? Access for a limited time—join to see more: bit.ly/3vC28RN

278 viewsedited 03:50

https://www.helpnetsecurity.com/2021/05/04/security-kubernetes/

Help Net Security

Kubestriker: A security auditing tool for Kubernetes clusters

Kubestriker is an open-source and platform-agnostic tool for identifying security misconfigurations in Kubernetes clusters.

317 views10:07

https://www.zdnet.com/article/best-programming-language/

The most popular programming languages and where to learn them

Upskilling will be a part of work's new normal. Here's a look at the most popular programming languages based on surveys and courses for them.

312 views06:14

Securing Telehealth Remote Patient Monitoring Ecosystem | NCCoE

The NCCoE released the second draft of the NIST Cybersecurity Practice Guide, SP 1800-30, Securing Telehealth Remote Patient Monitoring Ecosystem, on May 6th, 2021. The public is encouraged to review the draft and provide feedback for possible incorporation into the final version before the public comment period closes on June 7th, 2021.

https://www.nccoe.nist.gov/projects/use-cases/health-it/telehealth

269 viewsedited 15:43

https://twitter.com/Russian_OSINT/status/1389904889313124354

Неплохой канал YouTube с интервью известных ИБ экспертов.

В гостях Сергей Голованов @k1k_ , главный эксперт "Лаборатории Касперского".Говорим о вирусах, работе в ИБ компаниях, мотивации и конечно же заработке.youtu.be/toLKL06PK90

293 viewsedited 05:26

https://www.enisa.europa.eu/news/enisa-news/how-to-secure-the-connected-automated-mobility-cam-ecosystem

How to Secure the Connected & Automated Mobility (CAM) Ecosystem

The European Union Agency for Cybersecurity discloses an in-depth analysis of the cybersecurity challenges faced by the CAM sector and provides actionable recommendations to mitigate them.

267 views05:29

https://www.sans.org/blueprint-podcast серия подкастов от SANS с перспективой от blue team (защита). Последний про управление уязвисостями.

271 viewsedited 05:34

https://pages.awscloud.com/awsmp-h2-sec-devsecops-pipeline-automation.html

How to fuel your DevSecOps in AWS

In this webinar, SANS and AWS Marketplace will discuss how to build a strategy that encompasses visibility and automation for the DevSecOps pipeline in AWS. They will cover cloud-native controls and automation tactics that can enhance security of incoming…

258 views08:59

https://medium.com/anton-on-security/not-the-final-answer-on-ndr-in-the-cloud-b804321ef376

Not the Final Answer on NDR in the Cloud …

Back in my analyst years, I rather liked the concept of NDR or Network Detection and Response. And, despite having invented the acronym EDR, I was raised on with NSM and tcpdump way before that…

276 views11:28

https://www.cisecurity.org/blog/cis-benchmarks-may-2021-update/

Blog | CIS Benchmarks Update May 2021

New CIS Benchmarks released May 2021. These CIS Benchmark releases would not have been possible without the time and support of community contributors.

305 views11:31

https://www.helpnetsecurity.com/2021/05/03/pci-secure-software-standard-1-1/

Help Net Security

PCI SSC publishes PCI Secure Software Standard 1.1 and supporting program documentation

The PCI Security Standards Council (PCI SSC) has published the PCI Secure Software Standard 1.1 and its supporting program documentation.

380 views13:08

С праздником Великой Победы!

273 views07:43

https://www.sans.org/webcasts/setting-gold-standard-ci-pipelines-create-validated-os-images-119495

Setting the Gold Standard - Using CI pipelines to create validated OS images - SANS Institute

As cloud, security, and operations teams move to DevOps workflows building and securing operating systems efficiently changes drastically. Join SEC540 co-author Ben Allen to learn how to customize vendor-provided operating system images to improve the security…

297 views14:25

https://www.helpnetsecurity.com/2021/05/05/insider-risk-management/

Help Net Security

Pandemic accelerating need for insider risk management

Insider risk management is of greater concern now for 74% of companies than it was before the pandemic, according to Forrester Consulting.

283 views06:59

Forrester_Research_Insider_Risk_Management_is_Critical_to_Protecting.pdf

390 views07:00

https://www.microsoft.com/security/blog/2021/05/03/ai-security-risk-assessment-using-counterfit/

Microsoft Security Blog

AI security risk assessment using Counterfit | Microsoft Security Blog

Counterfit is a command-line tool for security professionals to red team AI systems and systematically scans for vulnerabilities as part of AI risk assessment.

273 views14:09

https://twitter.com/alukatsky/status/1391404607117606915

Alexey Lukatsky

Я не знаю, чем журналы по ИБ для женщин отличаются от таких же для мужчин. Но факт есть факт. Недавно запустили специальный журнал для ибешниц - womeninsecuritymagazine.com/subscribe/

271 viewsedited 21:22

Для тех кто любит ИБ новости в аудио-формате, пока стоишь в пробке, или видеть того кто рассказывает новости рекомендуем еженедельный дайджест - выпуск новостей с основными значимыми новостями в мире информационной безопасности https://youtu.be/uT9XYwLD2m4

CISO news 1: снова мобильные уязвимости, соцсети vs. Apple, безопасность цепочки поставок

311 viewsedited 05:38

Вам были бы интересны новости в канале про критические уязвимости в широкораспространненых продуктах (например Exim, iOS, Exchange) и больше технических гайдов (например по настройке конкретных средств).

Anonymous Poll

3. Все равно.

59 voters247 views05:42

ISACA’s Medical Device Discovery Appraisal Program (MDDAP) helps device manufacturers go beyond compliance and toward continuous improvement. See the benefits of participation at the FDA/Xavier MedCon Conference

https://www.isaca.org/enterprise/medical-device-discovery-appraisal-program

Medical Device Discovery Appraisal Program (MDDAP) | ISACA

The Medical Device Discovery Appraisal Program (MDDAP) helps medical device manufacturers better understand, measure, and improve their capabilities.

232 viewsedited 07:37