Полезная сертификация для начала карьеры в ИБ.
CYBERSECURITY FUNDAMENTALS CAREER STARTER
http://isaca.org/info/academicpackage/index.html
CYBERSECURITY FUNDAMENTALS CAREER STARTER
http://isaca.org/info/academicpackage/index.html
Для студентов очных отделений ВУЗ действует промокод CFCSSGZ. Дают бесплатную книжку и стоимость экзамена составит 60 долларов.
В этом году ISACA отмечает 40 лет одной из самых престижных сертификаций в мире ИТ и аудита - CISA.
ISACA’s CISA Certification Continues Momentum After 40 Years
https://www.isaca.org/About-ISACA/Press-room/News-Releases/2018/Pages/ISACA-CISA-Certification-Continues-Momentum-After-40-Years.aspx
ISACA’s CISA Certification Continues Momentum After 40 Years
https://www.isaca.org/About-ISACA/Press-room/News-Releases/2018/Pages/ISACA-CISA-Certification-Continues-Momentum-After-40-Years.aspx
Forwarded from RUSCADASEC news: Кибербезопасность АСУ ТП (Anton Shipulin)
Опубликован плэйлист с записями докладов DEF CON 26
https://www.youtube.com/watch?v=gmgV4r25XxA&list=PL9fPq3eQfaaD0cf5c7wkzMoj2kifzGO4U
https://www.youtube.com/watch?v=gmgV4r25XxA&list=PL9fPq3eQfaaD0cf5c7wkzMoj2kifzGO4U
YouTube
DEF CON 26 - Rob Joyce - NSA Talks Cybersecurity
The National Security Agency (NSA) has authorities for both foreign intelligence and cyber security. This unique position gives NSA insights into the ways networks are exploited and the methods that are effective in defending against threats. Over time…
Отличный пример как надо вести себя компании в случае публичного обвинения в установке закладных устройств.
Super Micro trashes Bloomberg chip hack story in recent customer letter | ZDNet
https://www.zdnet.com/article/super-micro-trashes-bloomberg-chip-hack-story-in-recent-customer-letter/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
Super Micro trashes Bloomberg chip hack story in recent customer letter | ZDNet
https://www.zdnet.com/article/super-micro-trashes-bloomberg-chip-hack-story-in-recent-customer-letter/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
ZDNet
Super Micro trashes Bloomberg chip hack story in recent customer letter | ZDNet
Server vendor calls Bloomberg report a "technical implausibility" and "wrong."
На походе измения по защите больших данных. Хотя и трактовка в источнике, что большие данные это 1000 субьектов, как минимум, спорная.
Написан первый российский закон о больших данных. О чем в нем сказано - CNews
http://www.cnews.ru/news/top/2018-10-23_napisan_zakon_o_sbore_bolshih_dannyh_s_grazhdan
Написан первый российский закон о больших данных. О чем в нем сказано - CNews
http://www.cnews.ru/news/top/2018-10-23_napisan_zakon_o_sbore_bolshih_dannyh_s_grazhdan
CNews.ru
Написан первый российский закон о больших данных. О чем в нем сказано - CNews
Власти задумали законодательно отрегулировать массовый сбор и обработку обезличенной информации о гражданах....
Forwarded from Alis
TRITON Attribution: Russian Government-Owned Lab Most Likely Built Custom Intrusion Tools for TRITON Attackers « TRITON Attribution: Russian Government-Owned Lab Most Likely Built Custom Intrusion Tools for TRITON Attackers | FireEye Inc
https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html
https://www.fireeye.com/blog/threat-research/2018/10/triton-attribution-russian-government-owned-lab-most-likely-built-tools.html
Mandiant
TRITON Attribution: Russian Government-Owned Lab Most Likely Built Custom Intrusion Tools for TRITON Attackers | Mandiant
U.S. Begins First Cyberoperation Against Russia Aimed at Protecting Elections - The New York Times
https://www.nytimes.com/2018/10/23/us/politics/russian-hacking-usa-cyber-command.html
https://www.nytimes.com/2018/10/23/us/politics/russian-hacking-usa-cyber-command.html
NY Times
U.S. Begins First Cyberoperation Against Russia Aimed at Protecting Elections (Published 2018)
American operatives are messaging Russians working on disinformation campaigns to let them know they’ve been identified. It’s a measured step to keep Moscow from escalating.
Identify, Protect, Detect, Respond and Recover: The NIST Cybersecurity Framework | NIST
https://www.nist.gov/blogs/taking-measure/identify-protect-detect-respond-and-recover-nist-cybersecurity-framework
https://www.nist.gov/blogs/taking-measure/identify-protect-detect-respond-and-recover-nist-cybersecurity-framework
NIST
Identify, Protect, Detect, Respond and Recover: The NIST Cybersecurity Framework
The NIST Cybersecurity Framework consists of standards, guidelines and best practices to manage cybersecurity-related risk.
Webinar: Delivering Efficient Ongoing Assurance of Your GDPR Program
https://www.isaca.org/Education/Online-Learning/Pages/webinar-delivering-efficient-on-going-assurance-of-your-gdpr-program.aspx
https://www.isaca.org/Education/Online-Learning/Pages/webinar-delivering-efficient-on-going-assurance-of-your-gdpr-program.aspx
Forwarded from Цифровая подстанция
#Мероприятия: только утром прочитал доклад, а вечером он уже на YouTube — опубликовали два видео с первого дня конференции по #ИБКИИ в Новосибирске. Смотрим на ЦПС — http://bit.ly/ksib-2018
Forwarded from Цифровая подстанция
#ИБКИИ Маленькие спойлеры: в первом видео — обсуждение основных вопросов ИБ, в том числе активности «Россетей» в этой области; во втором — горячая дискуссия на тему категорирования КИИ, спровоцированная рассказом об опыте категорирования объектов Кубани.
ENISA publishes annual report on trust services security incidents 2017 — ENISA
https://www.enisa.europa.eu/news/enisa-news/enisa-publishes-annual-report-on-trust-services-security-incidents-2017
https://www.enisa.europa.eu/news/enisa-news/enisa-publishes-annual-report-on-trust-services-security-incidents-2017
www.enisa.europa.eu
ENISA publishes annual report on trust services security incidents 2017 — ENISA
ENISA publishes the first full-year annual report on security incidents with electronic trust services, covering 2017.
Как раскрывают уязвимости в Голландии :-)
Coordinated Vulnerability Disclosure: Guidelines published by NCSC — ENISA
https://www.enisa.europa.eu/news/member-states/coordinated-vulnerability-disclosure-guidelines-published-by-ncsc
Coordinated Vulnerability Disclosure: Guidelines published by NCSC — ENISA
https://www.enisa.europa.eu/news/member-states/coordinated-vulnerability-disclosure-guidelines-published-by-ncsc
www.enisa.europa.eu
Coordinated Vulnerability Disclosure: Guidelines published by NCSC
The Coordinated Vulnerability Disclosure Guideline that aims to support organisations with their CVD-policy was published last week by the Dutch National Cybersecurity Centre.
Человек самое слабое звено но про DMARC не забывай :-)
Culture the missing link for cybersecurity's weakest link | ZDNet
https://www.zdnet.com/article/culture-the-missing-link-for-cybersecuritys-weakest-link/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
Culture the missing link for cybersecurity's weakest link | ZDNet
https://www.zdnet.com/article/culture-the-missing-link-for-cybersecuritys-weakest-link/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
ZDNet
Culture the missing link for cybersecurity's weakest link | ZDNet
Whether people are your weakest link and falling for phishing attacks, or your strongest link and looking out for anything suspicious, is down to your organisation's culture.
Соблюдение privacy ограничивает внедрение новых технологий.
Wells Fargo: Banks entering a legal quagmire in the name of technology | ZDNet
https://www.zdnet.com/article/wells-fargo-banks-entering-a-legal-quagmire-in-the-name-of-technology/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
Wells Fargo: Banks entering a legal quagmire in the name of technology | ZDNet
https://www.zdnet.com/article/wells-fargo-banks-entering-a-legal-quagmire-in-the-name-of-technology/?ftag=TRE-03-10aaa6b&bhid=28344448326425311432786055085055
ZDNet
Wells Fargo: Banks entering a legal quagmire in the name of technology
Wells Fargo's Financial Institutions Group Head of Compliance and Operational Risk is cognisant of the need to adopt machine learning and artificial intelligence, but she said the law isn't exactly ready for it.