NEW BOT Телеграм, страница

ISACARuSec

https://www.nist.gov/itl/executive-order-improving-nations-cybersecurity

Today, NIST is announcing the release of five new documents called for in the EO:

Software Security Practices

Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e
NIST Special Publication 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities
Software Security Labeling

Recommended Criteria for Cybersecurity Labeling of Consumer Internet of Things (IoT) Products
Recommended Criteria for Cybersecurity Labeling of Consumer Software
Consumer Cybersecurity Labeling Pilots: The Approach and Feedback

458 views19:19

ISACARuSec

http://80na20.blogspot.com/2022/02/iso-27001.html

Blogspot

Обновился стандарт ISO 27001, новый список контролей

Управление информационной безопасностью

560 views17:36

ISACARuSec

Forwarded from Записки админа

👨🏻‍💻 Открытые практикумы DevOps, Linux, White hacking, AWS и Golang by Rebrain: расписание на Февраль

👉Регистрация

- 8 февраля DevOps: Как жить если у вас появился nginx?
- 9 февраля Linux: Linux. Что Вы хотите узнать? / Сессия вопросов-ответов
- 9 февраля White Hacking: Обезличивание данных по 152-ФЗ
- 10 февраля AWS: Учимся управлять несколькими аккаунтами AWS сразу
- 15 февраля DevOps: Модульное управление инфраструктурой с помощью Terraform + Terragrunt
- 16 февраля Linux: Маршрутизатор на базе Linux
- 16 февраля White Hacking: Основы сканирования сетей, знакомство с утилитой nmap
- 17 февраля AWS: Serverless: пожалуйста, не надо
- 22 февраля DevOps: Подходы к автоматическому тестированию (АТ)
- 24 февраля Golang:Context в Go
- 24 февраля AWS: Делаем статический сайт на AWS безопасно

Посмотреть программу практикумов и записаться бесплатно. Успевайте зарегистрироваться. Количество мест строго ограничено! Запись практикума DevOps by Rebrain в подарок за регистрацию!

#реклама

233 views05:44

ISACARuSec

Antivirus Event Analysis Cheat Sheet version 1.9.0.

It includes updates in almost all sections

add special indicators for all kinds of Microsoft Exchange exploitation activity (ProxyLogon, ProxyShell etc.)

moves Ransomware indicators to highly relevant column

https://www.nextron-systems.com/2022/02/06/antivirus-event-analysis-cheat-sheet-v1-9-0/

427 viewsedited 05:50

ISACARuSec

https://twitter.com/thor_scanner/status/1459549486070513670

https://youtu.be/ONuK9NIXoOs

https://t.co/tdt4CNt9Yz

Twitter

Nextron Systems

Aurora - Free Sigma-based EDR Agent Preview - Introduction - Features - Advantages over other solutions - Response Actions - Roadmap - Live Demo Video session youtube.com/watch?v=ONuK9N… Slides nextron-systems.com/wp-content/upl…

448 viewsedited 05:56

ISACARuSec

https://www.scmagazine.com/analysis/security-awareness/mastercard-launches-cybersecurity-group-focused-on-third-party-risk

Scmagazine

Mastercard launches cybersecurity group focused on third-party risk

Mastercard announced the launch of its own global “cybersecurity alliance” to help financial firms and their vendors reduce the ever-growing threats they face.

422 views05:41

ISACARuSec

https://cloudsecurityalliance.org/artifacts/devsecops-pillar-4-bridging-compliance-and-development/

cloudsecurityalliance.org

DevSecOps - Pillar 4 Bridging Compliance and Development | CSA

This document provides guidance to ensure the gap between compliance and development is addressed by recognizing compliance objectives, translating them to appropriate security measures, and identifying inflection points within the software development lifecycle…

430 views05:50

ISACARuSec

https://twitter.com/cyb3rops/status/1491156207029334019

https://docs.google.com/spreadsheets/d/1BhR3cymZ53ZJfJdKAGKszuB-jgsr8GBJBOCJl50WGKE/htmlview

Twitter

Florian Roth ⚡️

Years ago I've created a spreadsheet that maps audit policy settings to corresponding events It's an outdated list but people still find it useful It also contains columns in which I've estimated the volume & rated the usefulness of these events docs.goo…

441 viewsedited 05:54

ISACARuSec

первый пост в серии по разделу ответственности в public cloud.

https://medium.com/anton-on-security/who-does-what-in-cloud-threat-detection-a7a4f44e7672

Medium

Who Does What In Cloud Threat Detection?

This post is a somewhat random exploration of the cloud shared responsibility model relationship to cloud threat detection.

450 views06:03

ISACARuSec

Forwarded from Пост Лукацкого

Росстандарт утвердил ГОСТ Р 59548-2022 "Защита информации. Регистрация событий безопасности. Требования к регистрируемой информации", который был введен в действие с 1-го февраля 2022 года.

fstec.ru

Приказ от 13 января 2022 г. N 2-ст - ФСТЭК России

Официальный сайт Федеральной службы по техническому и экспортному контролю (ФСТЭК России)

173 views10:54

ISACARuSec

Forwarded from Пост Лукацкого

В пару с ГОСТом по регистрации событий, Росстандарт утвердил еще и ГОСТ Р 59547-2021 "Защита информации. Мониторинг информационной безопасности. Общие положения", который введен в действие с 4-го января 2022 года.

202 views11:23

ISACARuSec

Forwarded from Пост Лукацкого

gost_r_59547-2021.pdf

91.3 KB

206 views11:23

ISACARuSec

https://cloudsecurityalliance.org/artifacts/manufacturing-industry-cybersecurity-challenges/

CSA

Cybersecurity Best Practices for the Manufacturing Industry | CSA

437 views05:32

ISACARuSec

https://docs.microsoft.com/en-us/azure/security/fundamentals/steps-secure-identity

Docs

Secure your Azure AD identity infrastructure - Azure Active Directory

This document outlines a list of important actions administrators should implement to help them secure their organization using Azure AD capabilities

446 views05:36

ISACARuSec

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-prerequisites#harden-your-azure-ad-connect-server

Docs

Azure AD Connect: Prerequisites and hardware - Microsoft Entra

This article describes the prerequisites and the hardware requirements for Azure AD Connect.

443 views05:38

ISACARuSec

https://www.enisa.europa.eu/news/enisa-news/why-security-concerns-drive-customers-towards-public-dns-resolvers

ENISA

Why Security Concerns Drive Customers Towards Public DNS Resolvers

The European Union Agency for Cybersecurity (ENISA) analyses the security pros and cons of using public DNS resolvers.

421 views16:59

ISACARuSec

NIST has published NISTIR 8286B, Prioritizing Cybersecurity Risk for Enterprise Risk Management. This report builds on the risk strategy and risk identification activities described in NISTIR 8286A and illustrates the need to ensure that enterprise context, priorities, and strategies are considered when making decisions about how best to respond to cybersecurity risks.

Additionally, a draft companion document – NISTIR 8286C, Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight – describes activities to help complete the CSRM/ERM integration cycle throughout the enterprise and is currently available for public comment. Submit your public comments by March 11, 2022.
https://csrc.nist.gov/publications/detail/nistir/8286/final

CSRC | NIST

NIST Internal or Interagency Report (NISTIR) 8286, Integrating Cybersecurity and Enterprise Risk Management (ERM)

The increasing frequency, creativity, and severity of cybersecurity attacks means that all enterprises should ensure that cybersecurity risk is receiving appropriate attention within their enterprise risk management (ERM) programs. This document is intended…

447 viewsedited 04:16

ISACARuSec

https://cloud.google.com/blog/products/identity-security/security-automation-lessons-from-site-reliability-engineering-for-security-operations-center

Google Cloud Blog

Security Automation Lessons from Site Reliability Engineering for Security Operations Center (SOC) | Google Cloud Blog

Your Security Operations Center (SOC) can learn a lot from what IT operations learned during the SRE revolution. In this post of the series, we plan to extract the lessons for your SOC centered on another SRE principle - automation as a force multiplier.

383 views11:24

ISACARuSec

https://twitter.com/cloudsa/status/1491850240290398215

https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4/