Turan Security

CyberHack Conference 2026 muvaffaqiyatli yakunlandi! Konferensiya turli ekspertlar tomonidan ma'ruzalar, workshoplar (amaliyotga asosanlangan darslar) hamda O'zbekistondagi eng katta offline CTF - CyberHack CTF 2026 musobaqasini o'z ichiga oldi va 450 dan ortiq kiber xavfsizlikka qiziquvchilarni o'ziga jamladi. Ma'ruzalar: - Andrey Shishkin (CISO,Uzcard) - Strategic Cyber Leadership; - Muhayyo Rasulova (PhD, Senior Researcher, Institute of Mathematics) - Quantum Cryptography; - Zhassulan Zhussupov (Malware Researcher, Author of Malware Development for Ethical Hackers, etc) - AI & Malware R&D va boshqa eskpertlar tomonidan o'tkazildi. Mutaxassislar tomonidan Web, Mobile security, SEIM - blue team mavzularida amaliy darslar olib borildi. Turan Security jamoasi CyberHack CTF 2026 musobaqasini xalqaro darajada o'tkazishga harakat qildi, musobaqada oliy ta'lim muassasalari va maktablardan 50 ta jamoa, 200 ga yaqin ishtirokchi qatnashdi. Musobaqa O'zbekistonda birinchilardan bo'lib - white box pentest (web), kernel pwn va h.k (pwn) kabi murakkab topshiriqlarni hamda dinamik flag, instancer tizimlaridan foydalandi. Musobaqada ushbu jamoalar g'alaba qozondi: 🥇shebang (NewUU) 🥈Dark Void (Cyber University) 🥉pwn4kun (NewUU) Ushbu topshiriqlar yoshlarni xalqaro musobaqalarga tayyorlanishiga katta hissa qo'shadi va tajribalarini orttiradi. Jamoamiz nomidan konferensiyani muvaffaqiyatli o'tkazishga yordam bergan hamkor va homiylarimiz - Yangi O'zbekiston universiteti, Domo (former HGT), MilliSec, Bitwalls jamoasiga katta minnatdorchilik bildiramiz! P.S. Tez orada yana bir yirik tadbir o'tkaziladi. Bizni kuzatib boring! @turansecurity | www.turansec.uz | info@turansec.uz

CyberHack CTF platformasi 2-mart, 12:00 gacha ochiq holatda turadi. Registratsiya hamma qiziquvchilar uchun ochiq! - ctf.cyberhackconf.uz @cyberhackconf

#agenda Ro'yxatdan o'tish ertaga 8:30 dan 9:30 gacha davom etadi! Workshoplar uchun o'zingiz bilan laptop olib kelishni unutmang (mobile, web hacking, SIEM) :) Ready to hack? @cyberhackconf

🌟 “Markaziy Osiyo uchun FIRST mintaqaviy simpoziumi – 2026” tadbirining ikkinchi kunidan fotoreportaj 🌐Website | 📝Telegram | 🌐Facebook | 📹Youtube | 📱Instagram

#update #ctf CTF uchun ushbu jamoalar saralab olindi! - havola O'rinlar to'lganligi sababli boshqa jamoalar qabul qilinmadi. Saralashdan o'ta olmagan qatnashuvchilar konferensiya davomida bo'lib o'tadigan workshoplarda qatnashishi mumkin! Darslar amaliy ko'rinishda: - Web ilovalar xavfsizligi; - Mobil dasturlarda zaifliklar aniqlash va xavfsizlikni ta'minlash; - SIEM - bank infratuzilmalarida kiber hujumlarni aniqlash va o'rganish kabi mavzularda kun davomida bo'lib o'tadi. Speakerlar tomonidan: - Malware development; - Hozirgi kundagi bank sektori mobil dasturlaridagi eng ko'p uchraydigan zaifliklar; - Kriptografiya kabi mavzular bo'yicha tajribalar almashiniladi. #share #love #hack @cyberhackconf

Speakerlarimiz bilan tanishib olamiz. 🎤 Andrey Shishkin UZCARD CISO’si va moliyaviy kiberxavfsizlik sohasida strategik yetakchi. Milliy to‘lov tizimlari va bank infratuzilmasi himoyasini yangi bosqichga olib chiqayotgan tajribali spiker. 🎤 Azam Gafurov CSEC direktor o‘rinbosari va UZCERT sobiq rahbari. Milliy kiberhimoya va insidentlarga javob berish tizimini yuqori darajada boshqarayotgan yetakchi mutaxassis. 🎤 Zhassulan Zhussupov Xalqaro darajadagi malware eksperti va “Malware Development for Ethical Hackers” kitobi muallifi. Black Hat, DEFCON va boshqa nufuzli konferensiyalar spikeri, ilg‘or offensive security yo‘nalishida chuqur tajribaga ega. 🎓 Muhayyo Rasulova Matematika va kriptografiya yo‘nalishida ilmiy tadqiqotchi. Zamonaviy kiberxavfsizlikning nazariy asoslarini mustahkamlovchi ilmiy ekspert. Davomi OSINT qiling. www.turansec.uz | info@turansec.uz

🔥 CyberHack Conference 2026 🔥 🚀 CyberHack is an offline cybersecurity conference designed to bring like-minded people together with real-world practices, hands-on experience, and an active cybersecurity community. 🎆 What’s inside CyberHack? 🎤 Guest Lecture Sessions 🎤 Learn from cybersecurity practitioners as they share real-world cases, industry experience, and career insights. 🛠 Technical Workshops 🛠 Hands-on workshops focused on practical skills, tools, and real attack/defense scenarios. 🎯 Extra Activities 🎯 Interactive zones, networking, challenges, and prizes for active participants. 🚩 CyberHack CTF 🚩 A separate Capture The Flag competition for university and school students with real cybersecurity challenges with prize pool: 100,000,000 UZS. 📍 New Uzbekistan University 🗓 February 28, 2026 ⏰ 09:00 – 19:00 🔗 Register Now: Registration Link ❗️ Participation is possible only with prior registration

🚩 CyberHack CTF 2026 🚩 🔥 CyberHack CTF - an offline Capture The Flag competition held as part of the CyberHack Conference. 🤖 The competition focuses on practical cybersecurity skills through real-world challenges across multiple domains. 💻 Web|🔓 Cryptography | 🦠 Malware Analysis/Reverse Engineering | 🔎 Digital Forensics | 👀 OSINT | 🤖 Mobile Security | 🤖 AI 🥷 Team Rules & Requirements

- For university and school students Only - 4 members per team (Captain + 3 Participants) - A participant may compete in only one team - Maximum 50 teams — limited slots available - The team captain registers the team - The captain must provide a student ID or official letter from university (for each team member) - Bring your own laptop

🏆 Prize Pool: 100,000,000 UZS 📍 New Uzbekistan University 🗓 February 28, 2026 ⏰ 09:00 – 19:00 🔗 Register Now: Registration Link ⏳ Spots are limited — early registration is recommended

Turan Security jamoasi siz va yaqinlaringizni muqaddas Ramazon oyi bilan tabriklaydi!🌙 Ushbu oy xonadoningizga tinchlik, xotirjamlik va ma’naviy yangilanish olib kelsin. Sizga mustahkam sog‘liq, yorug‘ niyatlar va barcha ezgu duolaringiz ijobat bo‘lishini tilaymiz. www.turansec.uz | info@turansec.uz

Yaqin qoldi.. www.turansec.uz | info@turansec.uz

🎨 Turan Security jamoasiga Grafik Dizayner kerak! Turan Security – axborot xavfsizligi va kiberxavfsizlik sohasida faoliyat yurituvchi kompaniya. Biz jamoamizga Infosecga qiziqqan, kreativ va kuchli Grafik Dizayner qidirmoqdamiz. 📌 Talablar: Axborot xavfsizligi (Infosec / Cybersecurity) sohasiga qiziqish Grafik dizayn tajribasi Quyidagi dasturlar bilan ishlay olishi: Canva Figma Adobe Photoshop (Illustrator bo‘lsa ustunlik) SMM postlar, prezentatsiyalar, infografikalar tayyorlay olish Brand identity va vizual konsept yaratish tajribasi Kreativ fikrlash va deadline bilan ishlay olish 🎯 Vazifalar: Ijtimoiy tarmoqlar uchun vizuallar tayyorlash Kiberxavfsizlik bo‘yicha infografikalar yaratish Prezentatsiyalar va marketing materiallarini dizayn qilish Turan Security brend stilini rivojlantirish 💼 Biz taklif qilamiz: Professional Infosec muhit Kuchli jamoa Rivojlanish imkoniyati Qiziqarli loyihalar Maosh – suhbat asosida 📩 CV va portfolio yuborish uchun: @turan_admin

#Workshop 🌐 Workshop boshlandi: Web va mobil ilovalar bilan ishlash bo‘yicha amaliy seminar Avval xabar berganimizdek, ayni daqiqalarda workshop boshlandi. Tadbirda talabalarimiz faol ishtirok etib, nazariy bilimlarini amaliy tajriba bilan boyitmoqda.

14-fevral — Web ilovalar bilan ishlash

Bugungi mashg‘ulot “Web ilovalar ichki dunyosiga sayohat” mavzusida o‘tkazilmoqda. Workshop 3 qismdan iborat: 🔹 1-qism — Asoslar Web-sayt va web ilovalar arxitekturasi, ularning ishlash mexanizmi hamda Burp Suite va Caido kabi vositalar bilan ishlash amaliy tarzda ko‘rsatib berilmoqda. 🔹 2-qism — Real zaifliklar va tahlil Loyihalarda uchraydigan eng muhim 4–5 ta zaiflik misollar orqali tahlil qilinib, xatolar va e’tibor qaratilishi lozim bo‘lgan jihatlar batafsil tushuntirilmoqda. 🔹 3-qism — Amaliy laboratoriya Ishtirokchilar maxsus tayyorlangan laboratoriyalarni proxy tool’lar yordamida mustaqil bajarib, real tajriba orttirmoqda. Nazariya va amaliyot uyg‘unligi talabalar uchun haqiqiy tajriba maydonini yaratmoqda. 15-fevral — Mobil ilovalar bilan ishlash Ertaga workshop mobil ilovalar xavfsizligi va ularni tahlil qilish mavzusida davom etadi. Unda mobil ilovalar arxitekturasi, keng tarqalgan zaifliklar hamda ularni aniqlash bo‘yicha amaliy mashg‘ulotlar tashkil etiladi. Mazkur seminar talabalarning kiberxavfsizlik sohasidagi bilim va ko‘nikmalarini mustahkamlashga xizmat qilmoqda. Workshop ertaga ham davom etadi.

😑😑😑😑😑😑😑😑 🌐 Workshop has started: Practical seminar on working with web and mobile applications

As we previously reported, the workshop has started right now. Our students are actively participating in the event, enriching their theoretical knowledge with practical experience. February 14 — Working with web applications Today's session is on the topic of "Journey to the inner world of web applications". The workshop consists of 3 parts: 🔹 Part 1 — Fundamentals The architecture of websites and web applications, their working mechanism, and working with tools such as Burp Suite and Caido are shown in a practical way. 🔹 Part 2 — Real vulnerabilities and analysis The most important 4-5 vulnerabilities encountered in projects are analyzed through examples, and errors and aspects that need attention are explained in detail. 🔹 Part 3 — Practical laboratory Participants independently complete specially prepared laboratories using proxy tools and gain real experience. The combination of theory and practice creates a real field of experience for students. February 15 — Working with mobile applications Tomorrow, the workshop will continue on the topic of mobile application security and analysis. It will include practical exercises on mobile application architecture, common vulnerabilities and their detection.

This seminar serves to strengthen students' knowledge and skills in the field of cybersecurity. The workshop will continue tomorrow. 🌐Website 🚀Telegram 📷Instagram 🔵Facebook 🎬Youtube 🎰Linkedin

#TodayBoburDay Jonimdin o'zga yori vafodor topmadim, Ko'nglumdin o'zga mahrami asror topmadim. Jonimdin o'zga jonni dilafkor ko'rmadim, Ko'nglum kibi ko'ngulni giriftor topmadim. Usruk ko'ziga toki ko'ngul bo'ldi mubtalo, Hargiz bu telbani yana hushyor topmadim. Nochor furqati bila xo'y etmisham, netay, Chun vaslig'a o'zumni sazovor topmadim. Bore boray eshigiga bu navbat, ey ko'ngul, Nechaki borib eshigiga bor topmadim. Bobur, o'zungni o'rgatako'r yorsizki, men Istab jahonni muncha qilib yor topmadim. www.turansec.uz | info@turansec.uz

15 mln zaif nuqta: Nima uchun Turan Security’ning jahon darajasidagi tajribasi bugun O‘zbekiston biznesiga kerak? Batafsil — https://daryo.uz/TuranSecurity Turan Security kompaniyasidan tavsiyalar: ✅ Parollarni mustahkamlang Kamida 12 ta belgili, katta-kichik harf, raqam va maxsus belgilardan iborat parollar qo'ying. ✅Barcha tizimlar va ijtimoiy tarmoqlarda 2FA ni faollashtiring. ✅ Dasturiy ta'minotni muntazam yangilang Operatsion tizim, brauzer, antivirus va boshqa tizimlarni doimo oxirgi versiyada saqlang. ✅ Ma'lumotlarning zaxira nusxasini yarating (backup) Muhim fayllarni kamida 2 ta alohida joyda saqlang. Kunlik yoki haftada minimum 1 marta backup qiling. ✅Kiberhujumlarning 90%+ inson xatosi orqali amalga oshadi. Xodimlarni phishing, parol siyosati va ijtimoiy muhandislik bo'yicha o'qiting. ✅ Muntazam pentest (penetration test) o'tkazing. Professional xavfsizlik auditi orqali zaif nuqtalarni xakerlardan oldin aniqlab bartaraf qiling. Yiliga kamida 1–2 marta. www.turansec.uz | info@turansec.uz

That's why... @TuranSecurity | www.turansec.uz

🔥 Mutaxassislarimiz Winter Cyber Security Camp’da muvaffaqiyatli ishtirok etdi! Gruziyaning Bakuriani shahrida bo‘lib o‘tgan Xalqaro qishki kiberxavfsizlik oromgohida mutaxassislarimiz bilim va ko‘nikmalarini oshirib qaytishdi. Mazkur xalqaro dastur doirasida Gruziya Ilmiy Kiberxavfsizlik Assotsiatsiyasi (SCSA) tomonidan: Axloqiy xakerlik (Ethical Hacking), Kriptografiya, Python dasturlash va Penetration testing yo‘nalishlarida intensiv ma’ruza va amaliy treninglar tashkil etildi. 🏆 Treninglar yakunida kiberxavfsizlikning real ssenariylarini simulyatsiya qiluvchi xakatonda mutaxassisimiz Behzod Hamroyev faxrli 1-o‘rinni egalladi. 📌 P.S. Ushbu dasturga taklif uchun Toshkent shahridagi Inha universitetiga o‘z minnatdorligimizni bildiramiz.

⚠️ Hurmatli fuqarolar! Firibgarlik qurboni bo‘lib qolmaslik uchun shaxsi va faoliyati aniq tasdiqlanmagan manzillarga hech qachon pul o‘tkazmang! ✅ Kiberxavfsizlik markazining UZCERT xizmati tomonidan olib borilgan o‘rganishlar hamda fuqarolardan kelib tushgan murojaatlar asosida “Pioneer Global Media LTD” nomi ostida faoliyat yuritayotgan firibgarlar aniqlangan. ⌨️ Mazkur shaxslar fuqarolarni onlayn ishga taklif qilish bahonasida, go‘yoki har hafta muntazam daromad topish mumkinligini va’da qilib, eng kamida 3 500 000 (uch million besh yuz ming) so‘m miqdorida to‘lovlarni aldov yo‘li bilan undirish bilan shug‘ullanib kelayotganligi ma’lum bo‘ldi. 🔎 Aniqlanishicha, hozirgi kunda respublikaning bir nechta viloyatlarida “Pioneer Global Media LTD”, qisqacha PGM, nomi ostida Telegram messenjerida maxfiy guruhlar tashkil etilgan. Ushbu guruhlarga faqat administratorlar tomonidan tasdiqlangan foydalanuvchilargina qo‘shilishi mumkin. O‘rganishlar davomida ma’lum bo‘lishicha, maxfiy guruhga qo‘shilgan fuqarolarga kamida 3 500 000 so‘m to‘lovni amalga oshirish evaziga onlayn ishga qabul qilinishi va ma’lum topshiriqlarni bajarganidan so‘ng har hafta xizmat haqi to‘lab berilishi aytilgan. Shu yo‘l bilan fuqarolar firibgarlik sxemasiga jalb etilgan. Shuningdek, to‘lovni amalga oshirib, go‘yoki onlayn ishga kirgan shaxslarga o‘z tanishlariga taklif havolasini yuborish imkoniyati berilgan. Agar taklif havolasi orqali boshqa fuqarolar to‘lovni amalga oshirsa, ushbu mablag‘ning 10 foizi havolani yuborgan shaxsga mukofot sifatida to‘lab berilishi va’da qilingan. ⚠️ Mazkur holatlar moliyaviy piramida va firibgarlik alomatlariga ega bo‘lib, fuqarolardan bunday takliflarga ishonmaslik, shubhali guruhlar va shaxslarga pul o‘tkazmaslik qat’iy tavsiya etiladi. #Firibgarlik #uzcert #piramida #moliyaviy 🚀 UZCERT xizmatining rasmiy telegram sahifasiga a’zo bo‘ling!

2026-yildagi birinchi CVE - NVIDIA dasturiy ta'minotida Security Research guruhimiz a'zosi Javohir Abduxalilov kapitalizatsiyasi bo'yicha dunyoda birinchi o'rinda turuvchi NVIDIA kompaniyasidan jiddiy zaiflikni aniqladi va bu kompaniya tomonidan e'tirof etildi! Zaiflik Nvidia Merlin dasturiy ta'minotiga ta'sir qiladi, ushbu dastur Tencent/WeChat, Snapchat, Netflix, Fidelity, Spotify, Walmart, Postmates/Uber, Meituan, Microsoft kabi kompaniyalar tomonidan foydalaniladi. 📋 CVE-2025-33233 (Nvidia Merlin - Transformers4Rec library) 🔴 Zaiflik darajasi: High (7.8 CVSS) ⚠️ Ta'siri: Code Execution, Escalation of Privileges, Information Disclosure, Data Tampering 🔗 Security Bulletin Bunday natijalar O'zbekistonning kiberxavfsizlik sohasidagi xalqaro nufuzini oshirishga xizmat qiladi. P.S. Eslatib o'tamiz mutaxassislarimiz tomonidan NASA, Google, Amazon, Toyota kabi dunyoning yetakchi texnologik kompaniyalaridan ham zaifliklar aniqlangan. www.turansec.uz | info@turansec.uz

⚠️ AuraAudit (AuraInspector): Salesforce Aura muhitidagi noto‘g‘ri sozlamalarni aniqlovchi ochiq manbali xavfsizlik vositasi ✅ Kiberxavfsizlik sohasida yetakchi kompaniyalardan biri bo‘lgan Mandiant Salesforce platformasida xavfsizlikni kuchaytirishga qaratilgan yangi ochiq manbali vositani taqdim etdi. AuraInspector (ko‘pincha AuraAudit deb ham ataladi) — bu buyruqlar satrida ishlovchi (CLI) audit vositasi bo‘lib, Salesforce Aura framework’idagi kirish huquqlarining noto‘g‘ri sozlanishini aniqlash va tahlil qilish uchun mo‘ljallangan. ⚠️ Mazkur vosita, ayniqsa, Salesforce Experience Cloud muhitlarida tez-tez uchraydigan va jiddiy oqibatlarga olib kelishi mumkin bo‘lgan xavfsizlik bo‘shliqlarini aniqlashga yordam beradi. 📱 Batafsil #AuraAudit #AuraInspector #Salesforce #Aura #xavfsizlik #vosita 🚀 UZCERT xizmatining rasmiy telegram sahifasiga a’zo bo‘ling!