OpenAI's New GPT Store May Carry Data Security Risks.
https://www.darkreading.com/cyber-risk/openai-new-gpt-store-data-security-risks
https://www.darkreading.com/cyber-risk/openai-new-gpt-store-data-security-risks
Dark Reading
OpenAI's New GPT Store May Carry Data Security Risks
Third-party developers of custom GPTs (mostly) aren't able to see your chats, but they can access, store, and potentially utilize some other kinds of personal data you share.
GitHub - francoismichel/ssh3: SSH3: faster and rich secure shell using HTTP/3, checkout our article here: https://arxiv.org/abs/2312.08396
https://github.com/francoismichel/ssh3
https://github.com/francoismichel/ssh3
arXiv.org
Towards SSH3: how HTTP/3 improves secure shells
The SSH protocol was designed in the late nineties to cope with the security problems of the telnetf family of protocols. It brought authentication and confidentiality to remote access protocols...
Gophish - Open Source Phishing Framework
https://getgophish.com/
https://getgophish.com/
Getgophish
Gophish - Open Source Phishing Framework
Gophish - An Open-Source Phishing Framework
Firefox Lets You Erase Leaked Personal Information With Mozilla Monitor Plus
https://news.itsfoss.com/mozilla-monitor-plus/
https://news.itsfoss.com/mozilla-monitor-plus/
It's FOSS
Firefox Lets You Erase Leaked Personal Information With Mozilla Monitor Plus
Take back your personal data with Mozilla's new offering.
Key strategies for ISO 27001 compliance adoption.
https://www.helpnetsecurity.com/2024/02/09/robin-long-kiowa-security-iso-27001-implementation/
https://www.helpnetsecurity.com/2024/02/09/robin-long-kiowa-security-iso-27001-implementation/
Help Net Security
Key strategies for ISO 27001 compliance adoption
Orgs can implement ISO 27001 without certification or choose partial implementation. Some like the concept but hesitate to fully commit.
Herramientas OSINT: Una recopilación de tools para obtener datos y convertirlos en ciberinteligencia
https://derechodelared.com/herramientas-osint-recopilatorio/
https://derechodelared.com/herramientas-osint-recopilatorio/
Derecho de la Red
Herramientas OSINT: Una recopilación de tools para obtener datos y convertirlos en ciberinteligencia - Derecho de la Red
En este artículo recopilamos una serie de herramientas OSINT que no serán de ayuda a hora de hacer una investigación,
An EU Prime! EU adopts first Cybersecurity Certification Scheme — ENISA
https://www.enisa.europa.eu/news/an-eu-prime-eu-adopts-first-cybersecurity-certification-scheme
https://www.enisa.europa.eu/news/an-eu-prime-eu-adopts-first-cybersecurity-certification-scheme
ENISA
An EU Prime! EU adopts first Cybersecurity Certification Scheme
The European Cybersecurity Scheme on Common Criteria (EUCC) drafted by the European Union Agency for Cybersecurity (ENISA) has been adopted as the first scheme within the EU cybersecurity certification framework.
EU Court of Human Rights Rejects Encryption Backdoors.
https://www.schneier.com/blog/archives/2024/02/eu-court-of-human-rights-rejects-encryption-backdoors.html
https://www.schneier.com/blog/archives/2024/02/eu-court-of-human-rights-rejects-encryption-backdoors.html
Forwarded from Codigo Abierto "FOSS"
Spam Bluetooth LE
Aplicación Android para realizar ataques Bluetooth Spam.
La aplicación puede falsificar solicitudes de conexión Bluetooth Low Energy que imitan los servicios Google Fast Pair y Microsoft Swift Pairing.
Esto puede provocar una afluencia de mensajes emergentes no deseados.
https://github.com/simondankelmann/Bluetooth-LE-Spam
====================
Si encuentra software interesante, compártalo con la comunidad: @SCAyL_bot
Aplicación Android para realizar ataques Bluetooth Spam.
La aplicación puede falsificar solicitudes de conexión Bluetooth Low Energy que imitan los servicios Google Fast Pair y Microsoft Swift Pairing.
Esto puede provocar una afluencia de mensajes emergentes no deseados.
https://github.com/simondankelmann/Bluetooth-LE-Spam
====================
Si encuentra software interesante, compártalo con la comunidad: @SCAyL_bot
GitHub - JPCERTCC/LogonTracer: Investigate malicious Windows logon by visualizing and analyzing Windows event log
https://github.com/JPCERTCC/LogonTracer
https://github.com/JPCERTCC/LogonTracer
GitHub
GitHub - JPCERTCC/LogonTracer: Investigate malicious Windows logon by visualizing and analyzing Windows event log
Investigate malicious Windows logon by visualizing and analyzing Windows event log - JPCERTCC/LogonTracer
Attack Flow | Threat-Informed Defense Project
https://mitre-engenuity.org/cybersecurity/center-for-threat-informed-defense/our-work/attack-flow/
https://mitre-engenuity.org/cybersecurity/center-for-threat-informed-defense/our-work/attack-flow/
Toca usar proxy o cambiar las DNS de dispositivos. Es fácil saltarse esa restricción. Llevan años haciéndose en sitios donde se censura la red, como Turquía, Egipto o Irán. La gente aprende a usar formas de sortear la censura....