“Today, organizations can build in security as an integrated part of the migration to IaaS services, optimizing security processes so they can be extended to work seamlessly across both local and external services.”


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.17

WATCH OUT!

Hackers have been found to use a new technique to completely disable macro security warnings in Office files—without requiring user interaction—and infect victims' computers with malware.

Read: https://thehackernews.com/2021/07/hackers-use-new-trick-to-disable-macro.html


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

Red Team Tactics
1. Open-Source PE Packer
https://iwantmore.pizza/posts/PEzor4.html
]-> https://github.com/phra/PEzor
2. XNU IPC - Mach messages
https://dmcyk.xyz/post/xnu_ipc_i_mach_messages
3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly
https://securityintelligence.com/posts/net-execution-inlineexecute-assembly
]-> Beacon Object File PoC:
https://github.com/xforcered/InlineExecute-Assembly

Blue Team Techniques
API Security Need to Know:
Top 5 Authentication Pitfalls
https://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls

Threat Research
CVE-2021-28474:
SharePoint RCE via Server-Side Control Interpretation Conflict
https://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict

Cloud Security
REST API Fuzz Testing (RAFT):
Source code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows
https://github.com/microsoft/rest-api-fuzz-testing


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

ما برق نداریم یکی‌تون تلوزیون رو روشن کنه ببینه صداوسیما در مورد مزیت‌های رفتن برق داره چی میگه؟


-😨-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

https://github.com/cado-security/DFIR_Resources_REvil_Kaseya/


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

WLAN Security
1. Reverse Engineering WiFi Driver on RISC-V BL602
https://lupyuen.github.io/articles/wifi
2. Dumping and extracting the SpaceX Starlink User Terminal firmware
https://www.esat.kuleuven.be/cosic/blog/dumping-and-extracting-the-spacex-starlink-user-terminal-firmware

Malware analysis
1. A machine learning approach to inferring the maliciousness of unknown IP addresses, autonomous systems, and ISPs👍🏽
https://ai.sophos.com/2021/05/10/using-ai-to-detect-malicious-ip-addresses-clusters
2. WildPressure macOS Trojan
https://securelist.com/wildpressure-targets-macos/103072


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

براي هر هدفي برنامه لازمه +همت و پشتكار+علاقه بولد👍🏽✌🏼


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

قيمت هاي پرت كم نيست در حوزه امنيت اما،
ا م ا
اگر قيمت رو پايين دادن بدونيم كيفيت هم در قسمت اعظم اين كيس ها سقوط كرده😀

براي هر موضوعي ميتوان قيمت مشخص و حدودي معقول با برآورد كارشناس نفر ساعت و تخصصي بودن موضوع تخمين زد.


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

كلي انرژي رفت و برگشت براتون آرزو ميكنم، اونم با كليد واژه هاي محبوب شما
كه حال ادم و ميسازه، 😁✌🏼دم و بازدم'


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

حمله سايبري به وب سرويس… راه آهن كشور
و يكرسي impact
روي يكسري fcp ها مثل پارس انلاين، هاي وب و….
فارغ از صحت اين موضوع كه معمولا گم ميشه در گزارشات و مرور زمان، فاكتور مهم داشتن برنامه مناسب براي برخورد با اين حملات، مديريت حادثه، ايزوله سازي، بررسي و جرم يابي ،
گزارش rca😊 و لسن لرن ميباشد
و پيشنهاد مي شود در مسير امن
مثل ساختار
Isac
اين يادگيري به اشتراك گذاشته شود !

فقط هي اين خبر رو كپي پبست نكنيم😊
كه اخ هك!هيچ كمكي به امنيت دارايي هاي كشور نميكند!


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

اگر آنچه را که من درباره قدرتِ بخشش‌کردن می‌دانم، می‌دانستی،
حتی وعده ی غذایی را بدون آنکه آن را به‌نحوی با دیگران ‌اشتراک‌بگذاری رها نمی‌کردی.


- خداوند شبان من است-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.18

OSCE³ Study Guide by Joas
OSWE, OSEP, OSED
كامل و جامع😏

https://github.com/CyberSecurityUP/OSCE-Complete-Guide


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

Lets get started with the evergreen Beginning of most of the hacker’s starting Point

A PERFECT STARTER FOR BEGINNERS - TRYHACKME PRE SECURITY PATH

https://hacklido.com/blog/197


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

سی سال بود‌،
تا من می‌گفتم:
خدایا
چنین کن و چنان ده!

چون به قدم اول معرفت رسیدم‌، گفتم:
الهی
تو مرا باش
و هر‌چه خواهی کن.


-آ م ي ن -

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

Cybersecurity has a many free resources, you them before you spend money

You can use free resources to increase your knowledge and value. Cybersecurity offers a lot of free (or affordable) resources. Here, I talk about the red and blue part but do not forget, Cybersecurity is much more than that. On the red side, we have countless options in different fields. The following picture shows a selection,…
https://www.cyberhuntingguide.net/free-resources.html


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

https://github.com/splunk/security_content/releases/tag/v3.24.0


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

#cve #windows #spooler #rce

PrintNightmare (CVE-2021-1675): Remote code execution in Windows Spooler Service

Source :
https://github.com/afwu/PrintNightmare


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

How To Download The Windows 11 Beta Now
https://www.techadvisor.com/how-to/windows/windows-11-beta-3806180/


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

https://start.me/p/ADwq1n/getting-started-in-information-security
😁كلي منبع


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

https://www.netacad.com/courses/networking/networking-essentials

Get free certificate by cisco for networking👆👆


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19

https://www.netacad.com/courses/iot/introduction-iot

Get free certificate by cisco for iot
👆👆


‎-آگاهي رساني امنيت سايبري-

Up2date 4 Defence Today,
Secure Tomorrow
@CisoasaService
1400.04.19