Что важнее - уметь быстро принимать решения или много знать?
С определенного времени я пришел к выводу, что часть устоявшихся жизненных подходов - архаичны по отношению к текущим реалиям и это порой вызывает ряд проблем в обществе, общении, взаимодействии с другими людьми, компаниями, коллегами и тп.
Оглавление
- Преамбула
- Подход - мозг это хранилище данных
- Фоновая рутина - Внутренний диалог
- Подход - мозг это процессор
- Немного философии
- Вывод
- Эпилог
https://sys-adm.in/live/992-chto-vazhnee-umet-bystro-prinimat-resheniya-ili-mnogo-znat.html
С определенного времени я пришел к выводу, что часть устоявшихся жизненных подходов - архаичны по отношению к текущим реалиям и это порой вызывает ряд проблем в обществе, общении, взаимодействии с другими людьми, компаниями, коллегами и тп.
Оглавление
- Преамбула
- Подход - мозг это хранилище данных
- Фоновая рутина - Внутренний диалог
- Подход - мозг это процессор
- Немного философии
- Вывод
- Эпилог
https://sys-adm.in/live/992-chto-vazhnee-umet-bystro-prinimat-resheniya-ili-mnogo-znat.html
sys-adm.in
Что важнее - уметь быстро принимать решения или много знать - Для сисадминов и не только
Sys-Adm.in - Сайт для сисадминов и не только. Здесь собраны различные материалы основанные на личной практике. Блог Евгения Гончарова.
BLACK BASTA RANSOMWARE | ATTACKS DEPLOY CUSTOM EDR EVASION TOOLS TIED TO FIN7 THREAT ACTOR
https://assets.sentinelone.com/sentinellabs22/SentinelLabs-BlackBasta
https://assets.sentinelone.com/sentinellabs22/SentinelLabs-BlackBasta
SentinelOne Inc
Black Basta Ransomware | Attacks Deploy Custom EDR Evasion Tools Tied to FIN7 Threat Actor
Black Basta operational TTPs are described here in full detail, revealing previously unknown tools and techniques, and revealing a link to FIN7.
How to mitigate OWASP vulnerabilities while staying in the flow
https://github.blog/2022-11-04-how-to-mitigate-owasp-vulnerabilities-while-staying-in-the-flow/
https://github.blog/2022-11-04-how-to-mitigate-owasp-vulnerabilities-while-staying-in-the-flow/
GitHub flaw could have allowed attackers to takeover repositories of other users
https://securityaffairs.co/wordpress/137866/hacking/github-flaw-repojacking.html
https://securityaffairs.co/wordpress/137866/hacking/github-flaw-repojacking.html
Security Affairs
GitHub flaw could have allowed attackers to takeover repositories of other users
A critical flaw in the cloud-based repository hosting service GitHub could've allowed attackers to takeover other repositories.
Microsoft Digital Defense Report 2022
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE5bUvv?culture=en-us&country=us
https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE5bUvv?culture=en-us&country=us
Lessons Learned from Cloning Windows Binaries and Code Signing Implants
https://captmeelo.com/redteam/maldev/2022/11/07/cloning-signing.html
https://captmeelo.com/redteam/maldev/2022/11/07/cloning-signing.html
Hack.Learn.Share
Lessons Learned from Cloning Windows Binaries and Code Signing Implants
Lessons learned and observed while experimenting with code signing and cloning file attributes.
2022-10-13-csiac-dod-cybersecurity-policy-chart.pdf
855.2 KB
DoD Security Chart
Я не люблю, когда наполовину, или когда прервали разговор.
Я не люблю, когда стреляют в спину, я также против выстрелов в упор.
Я не люблю себя, когда я трушу. Досадно мне, когда невинных бьют.
Я не люблю, когда мне лезут в душу, тем более, когда в нее плюют...
Я не люблю, когда стреляют в спину, я также против выстрелов в упор.
Я не люблю себя, когда я трушу. Досадно мне, когда невинных бьют.
Я не люблю, когда мне лезут в душу, тем более, когда в нее плюют...
CISA Stakeholder-Specific Vulnerability Categorization Guide
https://www.cisa.gov/sites/default/files/publications/cisa-ssvc-guide%20508c.pdf
https://www.cisa.gov/sites/default/files/publications/cisa-ssvc-guide%20508c.pdf
Configuring private vulnerability reporting for a repository
https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository
https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository
GitHub Docs
Configuring private vulnerability reporting for a repository - GitHub Docs
Owners and administrators of public repositories can allow security researchers to report vulnerabilities securely in the repository by enabling private vulnerability reporting.
How to speed up Ansible
https://www.toptechskills.com/ansible-tutorials-courses/speed-up-ansible-playbooks-pipelining-mitogen/
https://www.toptechskills.com/ansible-tutorials-courses/speed-up-ansible-playbooks-pipelining-mitogen/
TopTechSkills.com
How to Speed Up Your Ansible Playbooks Over 600%
Can Mitogen really give a 7x speed increase, and is it any faster than good ol' pipelining? Let's put these questions to the test.
Csi_software_memory_safety.pdf
316.2 KB
NSA Guidance on How to Protect Against Software Memory Safety Issues
SharpGmailC2
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol
https://github.com/reveng007/SharpGmailC2
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol
https://github.com/reveng007/SharpGmailC2
GitHub
GitHub - reveng007/SharpGmailC2: Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read…
Our Friendly Gmail will act as Server and implant will exfiltrate data via smtp and will read commands from C2 (Gmail) via imap protocol - reveng007/SharpGmailC2
Phishing campaigns continue to grow more common globally, with over one million attacks observed in Q2 2022
They offer an easy and attractive way for cybercriminals to generate revenue, steal credentials and spread malware. Many sophisticated phishing kits have been developed. Some of these are sold on underground forums using a Malware-as-a-Service model, while others are used exclusively by a single threat actor group. Some cybercriminals also offer lead generation services, selling packages of clicks to fraudulent sites...
https://www.cyjax.com/app/uploads/2022/11/Fangxiao-a-Chinese-threat-actor.pdf
They offer an easy and attractive way for cybercriminals to generate revenue, steal credentials and spread malware. Many sophisticated phishing kits have been developed. Some of these are sold on underground forums using a Malware-as-a-Service model, while others are used exclusively by a single threat actor group. Some cybercriminals also offer lead generation services, selling packages of clicks to fraudulent sites...
https://www.cyjax.com/app/uploads/2022/11/Fangxiao-a-Chinese-threat-actor.pdf