ch
Feedback
Network Security Channel

Network Security Channel

前往频道在 Telegram

⭕️Start Channel From 2017⭕️ ✅ Security Operation Center (SOC) ✅ Bug Bounty ✅ Vulnerability ✅ Pentest ✅ Hardening ✅ Linux ✅ Reasearch ✅ Security Network ✅ Security Researcher ✅ DevSecOps ✅ Blue Team ✅ Red Team

显示更多
2 855
订阅者
+1524 小时
+367
+7130
帖子存档
مدیریت ریسک سایبری در انگلیس آخرین نسخه ** بخش مرتبط با نظرات و باورها( ی غلط) در خصوص روش کمی در آنالیز ریسک جالب است Quantifying risk allows you to be explicit about how much uncertainty you have in your analysis, by allowing you to represent the likelihood or impact of a risk occurring as a ‘distribution’ rather than a single value. https://www.ncsc.gov.uk/collection/risk-management@Engineer_Computer

این روزها که هم کاربران برای به روزرسانی مرورگرهایشان آموزش دیده اند و هم مرورگرهایی چون کروم هفته ای یکبار به روزرسانی می‌دهد لذا به روزرسانی امری متداول شده است ؛ هکرها تلاش دارند از طریق به روزرسانی های قلابی ، بدافزار را به قربانی برسانند . در لینک زیر نحوه عمل ۴ گروه هکری برای توزیع بدافزار به قربانیان را می‌خوانیم #آکادمی_روزبه https://www.tomsguide.com/news/fake-chrome-updates-infecting-pcs-with-malware-what-you-need-to-know

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain https://github.com/p0dalirius/ExtractBitlockerKeys@Engineer_Computer

۱۰ متخصص امنیت سایبری که دنبال کردن آنها در شبکه های اجتماعی توصیه می‌شود https://www.techtarget.com/whatis/feature/10-cybersecurity-experts-to-follow-on-social-media@Engineer_Computer

یکی از بهترین مخازن کانتنت های اسپلانک رایگان #آکادمی_روزبه This project gives you access to our repository of Analytic Stories, security guides that provide background on tactics, techniques and procedures (TTPs), mapped to the MITRE ATT&CK Framework, the Lockheed Martin Cyber Kill Chain, and CIS Controls. They include Splunk searches, machine learning algorithms and Splunk Phantom playbooks (where available)—all designed to work together to detect, investigate, and respond to threats https://github.com/splunk/security_content@Engineer_Computer

hardening Tech book Cloud Security AWS Identity and Access Management User Guide 2023. ⁩@Engineer_Computer

Tech book Cloud Security Design and Deploy a Secure Azure: Environment Mapping the NIST Cybersecurity Framework to Azure Services 2023. ⁩@Engineer_Computer

Hardening ‎( امن سازي و مقاوم سازي) Cisco Secure Firewall Management Center Hardening Guide Ver. 7.2 2023 Cisco Hardening Guides: https://www.cisco.com/c/en/us/support/security/defense-center/products-installation-and-configuration-guides-list.html@Engineer_Computer

exploit 1. CVE-2023-20198: Cisco ISO XE Software Web Management User Interface Vulnerability https://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software Checkscript: https://github.com/Atea-Redteam/CVE-2023-20198 2. CVE-2023-36728: Windows SQL Server Pre-Auth Overflow Read https://v-v.space/2023/10/16/sqlserver-dos-CVE-2023-36728 3. CVE-2023-38545: Socks5 heap buffer overflow https://github.com/d0rb/CVE-2023-38545@Engineer_Computer

Fast Detection , Fast Respond PSIRT Advisories FortiOS - Plain-text credentials in GET request via SSL VPN web portal Summary A use of GET request method with sensitive query strings vulnerability [CWE-598] in the FortiOS SSL VPN component may allow an attacker to view plaintext passwords of remote services such as RDP or VNC, if the attacker is able to read the GET requests to those services (found in logs, referers, caches, etc...) Affected Products FortiOS version 7.4.0 FortiOS version 7.2.0 through 7.2.5 FortiOS version 7.0.0 through 7.0.12 Solutions Please upgrade to FortiOS version 7.4.1 or above Please upgrade to FortiOS version 7.2.6 or above Please upgrade to upcoming FortiOS version 7.0.13 or above Timeline 2023-09-29: Initial publication https://www.fortiguard.com/psirt/FG-IR-23-120@Engineer_Computer