ISACARuSec – Telegram
ISACARuSec
@IsacaRuSec
2.27K subscribers
1.77K photos
13 videos
303 files
5.64K links
Канал направления ИБ Московского отделения ISACA

Направление канала новости ISACA, новости в области управления ИБ в России и мире, обмен лучшими практиками.

https://engage.isaca.org/moscow/home

Связь с администрацией
@popepiusXIII
Download Telegram
About
Blog
Apps
Platform
Join
ISACARuSec
2.27K subscribers
ISACARuSec
https://www.welivesecurity.com/2021/12/01/jumping-air-gap-15-years-nation-state-effort/
WeLiveSecurity
Jumping the air gap: 15 years of nation‑state effort
ESET research releases a comparison of the most important TTPs used by all known malicious frameworks that have been used to attack air-gapped networks.
421 views
ISACARuSec
https://www.gartner.com/en/articles/17-network-security-concepts-and-acronyms-you-need-to-know
Gartner
17 Network Security Concepts and Acronyms You Need to Know
For organizational networks, the “protect the network perimeter” model of the past no longer works, & network security leaders are embracing new approaches. Explore @Gartner_IT's guide to 17 network security concepts & acronyms you need to know. #GartnerSEC
434 views
ISACARuSec
https://twitter.com/jhencinski/status/1466773492750245894
Twitter
Jon Hencinski
au·to·di·dact: a self-taught person Teach yourself infosec! The guide below from my friend @wifi_ve intends to provide a basic (and generally, free) set of resources for getting started with learning computer security. teachyourselfinfosec.com
551 viewsedited  
ISACARuSec
https://csrc.nist.gov/publications/detail/sp/800-213/final
CSRC | NIST
NIST Special Publication (SP) 800-213, IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity…
Organizations will increasingly use Internet of Things (IoT) devices for the mission benefits they can offer, but care must be taken in the acquisition and implementation of IoT devices. This publication contains background and recommendations to help organizations…
387 views
ISACARuSec
https://csrc.nist.gov/publications/detail/sp/800-213a/final
CSRC | NIST
NIST Special Publication (SP) 800-213A, IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity…
This publication provides a catalog of internet of things (IoT) device cybersecurity capabilities (i.e., features and functions needed from a device to support security controls) and non-technical supporting capabilities (i.e., actions and support needed…
367 views
ISACARuSec
https://www.nist.gov/blogs/cybersecurity-insights/convergent-evolution-sp-800-213-federal-profile-and-iot-cybersecurity
NIST
Convergent Evolution: SP 800-213, the Federal Profile, and the IoT Cybersecurity Catalog
NIST has been engaged for several years in developing guidance for Internet of Things (IoT) cybersecurity.
362 views
ISACARuSec
Спустя 5 лет рассмотрения выпущен Гост 27001-2021, срок вступления в силу 01.01.2022

https://twitter.com/ValeriyKomarov_/status/1466792854651645965?
Twitter
Валерий
Взамен ГОСТ Р ИСО/МЭК 27001-2006 утвержден новый ГОСТ Р ИСО/МЭК 27001-2021 fstec.ru/tk-362/deyatel…
349 viewsedited  
ISACARuSec
351 views
ISACARuSec
https://twitter.com/GabrielLandau/status/1466773122774970376
Twitter
Gabriel Landau
Microsoft won't fix this Windows LPE, but I'll show you how to detect and block it: elastic.co/blog/detect-bl…
308 viewsedited  
ISACARuSec
https://twitter.com/cloudsa/status/1466837815447146522
Twitter
CloudSecurityAlliance
There is a lot of confusion surrounding cloud native IT and cloud security tools. In this blog by JupiterOne, discover the definitions and uses of four different #cloudsecurity solutions: CSPM, CWPP, CNAP and CMDB → bit.ly/3EmszzP
291 viewsedited  
ISACARuSec
https://www.brighttalk.com/webcast/10415/519145
BrightTALK
Malware in the Cloud: Challenges, Latest Research, and Best Practices
Bad actors are compromising cloud applications and assets with malware and Trojans. After establishing a foothold, they use command and control servers to manipulate cloud applications and other resources to move laterally towards crown jewel data.

Join…
290 views
ISACARuSec
https://www.scmagazine.com/analysis/cybercrime/securities-industry-tests-ransomware-preparedness-in-cybersecurity-exercise
Scmagazine
Securities industry tests ransomware preparedness in cybersecurity exercise
Last month, more than 900 participants from over 240 financial firms, central banks, regulators, law enforcement and information-sharing groups acted out their response and recovery plans based on a series of simulated ransomware attacks.
306 views
ISACARuSec
Драма в 4 актах. Известный разработчик систем компьютерного зрения перешёл от энтузиазма до явного противника технологий.

https://twitter.com/mikko/status/1231566954152046592
Twitter
@mikko
A play in four acts: 1: Computer vision researcher Joseph Redmon invents and develops the groundbreaking YOLO algorithm, which uses machine learning for Computer Vision, ie. detecting objects. github.com/ultralytics/yo…
321 viewsedited  
ISACARuSec
http://rusrim.blogspot.com/2021/12/x9-ansi-x9141-2021.html
Blogspot
США: «Аккредитованный комитет по стандартизации X9» опубликовал новый стандарт ANSI X9.141-2021 защиты персональных данных и уведомления…
Данная новость была опубликована 18 ноября 2021 года на сайте «Аккредитованного комитета по стандартизации X9». Для справки: Организация «Ак...
358 views
ISACARuSec
https://twitter.com/ITguySoCal/status/1466897828685385728
Twitter
Joe Stocker
Good news for Organizations who own Defender but not Intune. You now get to use the Endpoint Security blade in the Endpoint manager console *for free* to manage Windows 10,11, or Server 2012R2+. And it auto enrolls into Intune?!? Nice! techcommunity.micr…
373 viewsedited  
ISACARuSec
Forwarded from Vulnerability Management and more
Hello everyone! This episode is about Qualys Security Day 2021 Las Vegas, Qualys VMDR, VMDR Training and exam.

Video: https://youtu.be/jBdD0lNcJCY
Text: https://avleonov.com/2021/12/06/qsc21-vmdr-training-and-exam/
YouTube
QSC21, VMDR Training and Exam
Hello everyone! On the one hand, because of the pandemic, we have become more distant from each other. We work mostly remotely from home. Traveling to a conference in another country has become much more difficult than it used to be. Now it is not only expensive.…
183 views
ISACARuSec
https://www.enisa.europa.eu/news/enisa-news/beware-of-the-sim-swapping-fraud
ENISA
Beware of the Sim Swapping Fraud!
How do Sim Swapping attacks work and what can you do to protect yourself? Learn it all in the new technical deep dive by the European Union Agency for Cybersecurity.
369 views
ISACARuSec
Forwarded from k8s (in)security (D1g1)
Задумывались ли вы когда-нибудь как у облачных провайдеров в managed Kubernetes решается к каким облачным сервисам тот или иной Pod имеет доступ, а к каким нет? Если вопрос у вас такой проскакивал, то для вас статья "IAM roles for Kubernetes service accounts - deep dive". В статье все на примере с AWS, но подобное есть уже и у других облачных провайдеров (у российских пока нет):

1) AWS: IRSA (KSA↔️IAM Role) - ServiceAccount annotation eks.amazonaws.com/role-arn
2) Google: Workload Identity (KSA↔️GSA) - ServiceAccount annotation iam.gke.io/gcp-service-account
3) Azure: AAD Pod Identity (KSA↔️AAD) - Workload label aadpodidbinding (Preview статус)

Как вы можете заметить по описанию реализации связей и воплощению они все отличаются от провайдера к провайдеру ...
180 views
ISACARuSec
https://www.pwc.ru/ru/publications/global-digital-trust-insights-2022.html
PwC
Глобальное исследование «Доверие к цифровым технологиям – 2022»
Это опрос 3602 руководителей бизнеса, технологий и безопасности (генеральные директора, корпоративные директора, финансовые директора, директора по информационной безопасности, ИТ-директора и руководители C-Suite), проведенный в июле и августе 2021 года в…
358 views
ISACARuSec
soc-forum выступление представителя НКЦКИ
378 views