ISACARuSec

Законопроект демократов в США предлагает обосновывать отсутствие экспертизы в области кибербезопасности в правлении компаний торгуемых на бирже.

House Dem introduces bill requiring public firms to disclose cybersecurity expertise in leadership | TheHill
https://thehill.com/policy/cybersecurity/433880-house-dem-introduces-cyber-bill-that-would-require-publicly-traded

TheHill

House Dem introduces bill requiring public firms to disclose cybersecurity expertise in leadership

A Democrat on the House Intelligence Committee introduced a bill on Wednesday that would require publicly traded companies to disclose to investors whether any members of their board of directors

367 viewsedited 16:47

ISACARuSec

https://www.gartner.com/en/webinars/3899671/the-gartner-top-strategic-predictions-for-2019-and-beyond

Gartner

The Gartner Top Strategic Predictions for 2019 and Beyond

EDT: 11:00 a.m. | PDT: 8:00 a.m. | GMT: 15:00 Continuous change drives instability and often overwhelms us. To cope with this change, we must learn to find order in chaos and see how seemingly unrelated trends actually overlap to affect our plans and solutions.…

312 views06:31

ISACARuSec

https://blogs.gartner.com/anton-chuvakin/2019/03/19/our-applying-network-centric-approaches-for-threat-detection-and-response-paper-publishes/

Anton Chuvakin

Our "Applying Network-Centric Approaches for Threat Detection and Response" Paper Publishes - Anton Chuvakin

After many discussions and a bit of a re-write, our new paper “Applying Network-Centric Approaches for Threat Detection and Response” is finally ready (Gartner GTP access required). The abstract states “The escalating sophistication of threats requires organizations…

334 viewsedited 06:37

ISACARuSec

Свежий номео журнала ISACA

Volume 6 20 March 2019

In This Issue
Vendor Risk Management: An Essential Tool for GDPR

Diving Into NIST Risk Management Framework Revision 2

Find Talented Professionals and Employers at ISACA Online Career FairThe

Top Concern for the State of CybersecurityAccelerate

Your Way to Becoming a CSXP

33 Years of COBIT

http://m.isaca.org/About-ISACA/-ISACA-Newsletter/Pages/@-isaca-volume-6-20-march-2019.aspx?utm_referrer=

398 viewsedited 06:52

ISACARuSec

Посмотрите, о чем твитнул(а) @isacala: https://twitter.com/isacala/status/1107658194346827776?s=09

Twitter

ISACA Los Angeles

ISACA Press Release: ISACA to Host Online Career Fair for Business and IT Professionals and Employers https://t.co/UdrM7amP0y

336 views15:34

ISACARuSec

Посмотрите, о чем твитнул(а) @isacala: https://twitter.com/isacala/status/1108006919736885248?s=09

Twitter

ISACA Los Angeles

ISACA Press Release: ISACA Issues New Blockchain, CASB Solutions and GDPR Audit Programs https://t.co/p4LWkIJl99

340 views15:51

ISACARuSec

Прогресс в развитии honeypot. HADES позволят создать сети "хозяйства Семибаба"из 70 000 хостов.

Sandia’s synthetic network offers new insight into how cyber attackers work - Federal News Network
https://federalnewsnetwork.com/ask-the-cio/2019/03/sandias-synthetic-network-offers-new-insight-into-how-cyber-attackers-work/

Federal News Network

Sandia’s synthetic network offers new insight into how cyber attackers work

Vince Urias, a distinguished member of the technical staff at Sandia National Laboratories, said the HADES programs creates a fake environment where cyber defenders can lure hackers and better understand their techniques.

340 viewsedited 18:57

ISACARuSec

Посмотрите, о чем твитнул(а) @3dwave: https://twitter.com/3dwave/status/1108064292195188736?s=09

Twitter

Andrey Prozorov

Я наконец-то пересмотрел и обновил свои рекомендации по составу документов, необходимых для #СУИБ по ISO 27001. Прошло всего-то 4 года. Встречайте версию 4.0, теперь она на английском... #ISMS https://t.co/K6A8jIdM8c

365 views19:05

ISACARuSec

https://www.darkreading.com/cloud/the-12-worst-serverless-security-risks/a/d-id/1334079

Dark Reading

The 12 Worst Serverless Security Risks

A new guide from the Cloud Security Alliance offers mitigations, best practices, and a comparison between traditional applications and their serverless counterparts.

359 views05:12

ISACARuSec

Forwarded from Hacker News

Вебинар «Безопасность машинного обучения: естественные проблемы искусственного интеллекта»
https://goo.gl/c9968u

Хабр

Вебинар «Безопасность машинного обучения: естественные проблемы искусственного интеллекта»

21 марта специалисты Digital Security представят свой критический взгляд на повсеместное внедрение искусственного интеллекта (ИИ) и машинного обучения (МО).

6 views10:15

ISACARuSec

https://blogs.gartner.com/anton-chuvakin/2019/03/20/psychoanalyzing-security-cloud-fears/

Anton Chuvakin

Psychoanalyzing Security Cloud Fears - Anton Chuvakin

Here is a funny one: why so many security professionals (and leaders) still hate the cloud? OK, OK, I get it, many of you want to respond to this with a WHAT YEAR IS THIS? meme right away, but let me finish… To set the context for this, I am not talking about…

374 viewsedited 16:03

ISACARuSec

Посмотрите, о чем твитнул(а) @alukatsky: https://twitter.com/alukatsky/status/1108343311838969856?s=09

Twitter

Alexey Lukatsky

Применение блокчейна в кибербезопасности (презентация) https://t.co/90GJ5py2IC

375 views16:04

ISACARuSec

Хорошее исследование по управлению уязвимостями в организациях.

https://www.kennasecurity.com/the-race-to-remediation-is-on/

Kenna Security

Don’t Stop Me Now: The Race to Remediation Is On

“That’s why they call me Mr. Fahrenheit, cause I’m patching at the speed of light!” – Freddie Mercury(ish). Over the past several months, my team and I have worked with the Cyentia Institute to build out data that begins to tell the story about modern vulnerability…

447 viewsedited 07:32

ISACARuSec

SP 800-56B Rev. 2, Pair-Wise Key Establishment Integer Factorization Cryptography | CSRC
https://csrc.nist.gov/publications/detail/sp/800-56b/rev-2/final#pubs-abstract-header

CSRC | NIST

NIST Special Publication (SP) 800-56B Rev. 2, Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography

This Recommendation specifies key-establishment schemes using integer factorization cryptography (in particular, RSA). Both key-agreement and key transport schemes are specified for pairs of entities, and methods for key confirmation are included to provide…

316 views03:47

ISACARuSec

SP 800-131A Rev. 2, Transitioning the Use of Crypto Algorithms and Key Lengths | CSRC
https://csrc.nist.gov/publications/detail/sp/800-131a/rev-2/final

CSRC | NIST

NIST Special Publication (SP) 800-131A Rev. 2, Transitioning the Use of Cryptographic Algorithms and Key Lengths

The National Institute of Standards and Technology (NIST) provides cryptographic key management guidance for defining and implementing appropriate key management procedures, using algorithms that adequately protect sensitive information, and planning ahead…

318 views03:49

ISACARuSec

Nist опубликовал 2 стандарта по криптографии. Первый про алгоритмы обмена ключами, второй про более надежные алгоритмы для защиты коефиденциальной информации, в том числе про отказ от использования Triple Data Encryption Algorithm (TDEA) описанного в SP 800-67 Rev. 2.

299 views03:52

ISACARuSec

MS анонсировали выпуск своего антивирусного агента Defender APT под Mac. Управление будет осуществлятся с помощью mdm (intune и т.д.).

Также анонсирован функционал по поиску уязвимостей и оценке их риска в Defender APT.

https://techcommunity.microsoft.com/t5/Windows-Defender-ATP/Announcing-Microsoft-Defender-ATP-for-Mac/ba-p/378010

TECHCOMMUNITY.MICROSOFT.COM

Announcing Microsoft Defender ATP for Mac

Update: Microsoft Defender ATP for Mac is generally available as of June 28, 2019. Today, we’re announcing our advances in cross-platform next-generation protection and endpoint detection and response coverage with a new Microsoft solution for Mac. Core…

321 viewsedited 03:59

About

Blog

Apps

Platform