NEW BOT Телеграм, страница

ISACARuSec

Американский NIST финализировали первые 3 стандарта пост квантовой криптографии. Пока только для электронной подписи.

https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards

NIST

NIST Releases First 3 Finalized Post-Quantum Encryption Standards

NIST is encouraging computer system administrators to begin transitioning to the new standards as soon as possible

438 viewsedited 04:59

ISACARuSec

https://github.com/aquasecurity/traceeshark

GitHub

GitHub - aquasecurity/traceeshark: Deep Linux runtime visibility meets Wireshark

Deep Linux runtime visibility meets Wireshark. Contribute to aquasecurity/traceeshark development by creating an account on GitHub.

778 views05:07

ISACARuSec

https://news.sophos.com/en-us/2024/08/12/the-cybersecurity-kids-arent-all-right/

Sophos News

The cybersecurity kids aren’t all right

A new Sophos-commissioned survey finds burnout, fatigue, cynicism riding high in the workforce

475 views08:02

ISACARuSec

https://csrc.nist.gov/pubs/ir/8532/ipd

CSRC | NIST

NIST Internal or Interagency Report (NISTIR) 8532 (Draft), Workshop on Enhancing Security of Devices and Components Across the…

NIST hosted an in-person, all-day workshop on February 27, 2024, to discuss existing and emerging cybersecurity threats and mitigation techniques for semiconductors throughout their life cycle. The workshop obtained valuable feedback from industry, academia…

490 views17:41

ISACARuSec

462 views17:41

ISACARuSec

https://www.ncsc.gov.uk/blog-post/building-a-nation-scale-evidence-base-for-cyber-deception

www.ncsc.gov.uk

Building a nation-scale evidence base for cyber deception

The NCSC is inviting UK organisations to contribute evidence of cyber deception use cases and efficacy to support our long-term research goals.

394 views04:53

ISACARuSec

Ссылка на немецком.

"Germany's cybersecurity agency wants to introduce a cybersecurity labeling scheme for smartphones and mobile devices. The label would be designed to provide easy-to-understand information about a mobile device's security features. The smartphone labeling scheme would follow a similar scheme German authorities have set up for routers and IoT devices."

https://www.bsi.bund.de/DE/Service-Navi/Presse/Pressemitteilungen/Presse2024/240814_IT-SiK_Mobile-Endgeraete.html

Bundesamt für Sicherheit in der Informationstechnik

BSI veröffentlicht IT-Sicherheitskennzeichen für mobile Endgeräte

Sicherheit wird noch sichtbarer: Mit der TR-03180 A stellt das BSI konkrete Vorgaben für Hersteller zur Verfügung, die ein IT-Sicherheitskennzeichen beantragen wollen.

450 views04:58

ISACARuSec

Хороший отчет для обоснования бюджета и оценки экономической эффективности средств ИБ через риск от угроз.

https://www.cyberresilience.com/threat-actors-exploit-cybersecurity-gaps-from-ma-and-software-consolidation-resilience-finds/

Resilience

Threat actors exploit cybersecurity gaps from M&A and software consolidation, Resilience finds - Resilience

SAN FRANCISCO, CA – August 13, 2024 – Threat actors evolved their tactics in 2024 to take advantage of business and technology consolidation, the leading

520 views05:28

ISACARuSec

524 views05:28

ISACARuSec

https://www.wsj.com/articles/german-cyber-agency-wants-changes-in-microsoft-crowdstrike-products-after-tech-outage-05b82c19

WSJ

German Cyber Agency Wants Changes in Microsoft, CrowdStrike Products After Tech Outage

The regulator aims to limit cyber companies’ access to the Windows kernel, a key part of Microsoft’s operating system, saying it would reduce the risk of another CrowdStrike-style meltdown.

479 views10:12

ISACARuSec

Forwarded from k8s (in)security (Дмитрий Евдокимов)

На портале TryHackMe есть раздел/направление "K8s Best Security Practices", который как не трудно догадаться целенаправленно посвящен безопасности Kubernetes (если честно, то совсем малой части). Из тем там покрывается:
- Service Accounts
- RBAC
- API Запросы
- общие моменты про сканирование образов, SecurityContext и безопасность etcd

Также есть небольшая практика, где нужно немного пошаманить с RBAC.

На все про все нужно минут 10 (если не читать теорию) ;)

👍1

306 views05:45

ISACARuSec

https://www.ncsc.gov.uk/blog-post/cyber-resilience-audit-scheme-open

www.ncsc.gov.uk

Cyber Resilience Audit scheme open to applications

A new NCSC scheme assuring providers of CAF-based audits is now open for potential members.

456 views05:47

ISACARuSec

https://www.ox.security/mitigating-the-risks-of-transitive-vulnerabilities-in-appsec/

OX Security

Will We Survive The Transitive Vulnerability Locusts - OX Security