Канал: Cyber Security Entertainment

Firewall Security Policy vs Micro-Segmentation

Firewall Security Policy vs Micro-Segmentation

IoCs & IoAs

IoCs & IoAs

STIX and TAXII - Cyber Threat Intelligence

STIX and TAXII - Cyber Threat Intelligence

Dynamic Web Application Security Testing (DAST)

Dynamic Web Application Security Testing (DAST)

Firewall Deployment - Security Zone, Security Policy, Address Book, RVI, VLAN, Subnet, App Traffic

Firewall Deployment - Security Zone, Security Policy, Address Book, RVI, VLAN, Subnet, App Traffic

MITRE ATT&CK

MITRE ATT&CK

Zoombombing Attack on Video conferencing platforms

Zoombombing Attack on Video conferencing platforms

Evolution of WLAN Security

Evolution of WLAN Security

Cyber Risk Management Terminologies

Cyber Risk Management Terminologies

DHCP Snooping

DHCP Snooping

Enticement vs Entrapment

Enticement vs Entrapment

Services of SIEM

Services of SIEM

Cryptographic Key Management Practices

Cryptographic Key Management Practices

Process for Attack Simulation & Threat Analysis (PASTA)

Process for Attack Simulation & Threat Analysis (PASTA)

Functions & Types of Cloud Access Security Broker (CASB)

Functions & Types of Cloud Access Security Broker (CASB)

Phases of Data Loss/ Leakage Prevention (DLP)

Phases of Data Loss/ Leakage Prevention (DLP)

Protection for Intellectual Property

Protection for Intellectual Property

NIST CyberSecurity Framework (CSF)

NIST CyberSecurity Framework (CSF)

Supply Chain Security Guidance - UK National Cyber Security Center

Supply Chain Security Guidance - UK National Cyber Security Center

Privacy by Design (PbD)

Privacy by Design (PbD)

Limitations of CIA Triad

Limitations of CIA Triad

Just in Time (JIT) Access

Just in Time (JIT) Access

SOC Functions by SANS

SOC Functions by SANS

6 x Access Control Models (RBAC, RuBAC, MAC, DAC, ABAC, Risk BAC)

6 x Access Control Models (RBAC, RuBAC, MAC, DAC, ABAC, Risk BAC)

NIST Security Recommendations for Server-based Hypervisor Platforms (NIST SP 800-125A )

NIST Security Recommendations for Server-based Hypervisor Platforms (NIST SP 800-125A )

Lockheed Martin's Cyber Kill Chain

Lockheed Martin's Cyber Kill Chain

Virtual Patching (External Patching, Just-in-Time Patching)

Virtual Patching (External Patching, Just-in-Time Patching)

Breach Attack Simulation (BAS)

Breach Attack Simulation (BAS)

Same-Origin Policy (SOP)

Same-Origin Policy (SOP)

Broken Object Level Authorization (BOLA)

Broken Object Level Authorization (BOLA)

Software Assurance Maturity Model (SAMM)

Software Assurance Maturity Model (SAMM)

Software defined Security (SDS / SDSec)

Software defined Security (SDS / SDSec)

Risk Treatment / Risk Response

Risk Treatment / Risk Response

RTO, RPO, MTD - Disaster Recovery Metrics

RTO, RPO, MTD - Disaster Recovery Metrics

Whitelisting & Blacklisting

Whitelisting & Blacklisting

DevSecOps

DevSecOps

Digital Forensics Procedures

Digital Forensics Procedures

Audit Program for Software Development

Audit Program for Software Development

Types of Cyber Investigation Techniques

Types of Cyber Investigation Techniques

Type of Information security Documents

Type of Information security Documents

Types of Application Security Testing

Types of Application Security Testing

Cyber Threat Intelligence (CTI)

Cyber Threat Intelligence (CTI)

Media Sanitization

Media Sanitization

Cyber Security Controls Selection and Implementation

Cyber Security Controls Selection and Implementation

Data Roles

Data Roles

Evaluation of Cyber Security Awareness Program

Evaluation of Cyber Security Awareness Program

Timing Attack (Side Channel Attack)

Timing Attack (Side Channel Attack)

Cyber Asset Attack Surface Management (CAASM)

Cyber Asset Attack Surface Management (CAASM)

CIS Critical Security Controls

CIS Critical Security Controls

Misuse Case Testing

Misuse Case Testing

VXLAN Concepts and Architecture

VXLAN Concepts and Architecture

Interface Testing

Interface Testing

Test Coverage Analysis

Test Coverage Analysis

Vulnerability Scan - Mitigating DoS Effects

Vulnerability Scan - Mitigating DoS Effects

Li-Fi

Li-Fi

Overview of PKI Services

Overview of PKI Services

Intro to Zero Trust Architecture (ZTA)

Intro to Zero Trust Architecture (ZTA)

Cloud Access Security Broker (CASB)

Cloud Access Security Broker (CASB)

Security Information & Event Management (SIEM)

Security Information & Event Management (SIEM)

User & Entity Behavior Analytics (UEBA)

User & Entity Behavior Analytics (UEBA)

Security of MicroServices

Security of MicroServices

Security Orchestration Automation & Response (SOAR)

Security Orchestration Automation & Response (SOAR)

eXtensible Access Control Markup Language (XACML)

eXtensible Access Control Markup Language (XACML)

Sender Policy Framework (SPF) - Email Security

Sender Policy Framework (SPF) - Email Security

OAUTH (Secure Access Delegation)

OAUTH (Secure Access Delegation)

SAML Web SSO

SAML Web SSO

Firewall Deployment Architecture

Firewall Deployment Architecture

Smurf & Fraggle Attacks

Smurf & Fraggle Attacks

DNS Tunneling Attack

DNS Tunneling Attack

Parkerian Hexad

Parkerian Hexad

NAT Traversal for IPSec

NAT Traversal for IPSec

Electronic Discovery Reference Model

Electronic Discovery Reference Model

Testing Disaster Recovery

Testing Disaster Recovery

Types of System Backups

Types of System Backups

Network Discovery Scan

Network Discovery Scan

Guidelines for Firewalls (NIST SP 800-41)

Guidelines for Firewalls (NIST SP 800-41)

Offline Password Attacks

Offline Password Attacks

Cloud Access Control (NIST SP 800-210)

Cloud Access Control (NIST SP 800-210)

Access Control Process

Access Control Process

System & Organization Controls (SOC) Reports

System & Organization Controls (SOC) Reports

Zero Trust Architecture (NIST SP 800-207)

Zero Trust Architecture (NIST SP 800-207)

Attacks on DNS

Attacks on DNS

Kerberos Flow (Network Authentication Protocol)

Kerberos Flow (Network Authentication Protocol)

Security Modes of Operation of IT System

Security Modes of Operation of IT System

NIST Risk Management Framework (RMF)

NIST Risk Management Framework (RMF)

Public Key Infrastructure (PKI)

Public Key Infrastructure (PKI)

Data Pseudonymization & Anonymization

Data Pseudonymization & Anonymization

VLAN Hopping Attack

VLAN Hopping Attack

Control Objectives for Information & related Technologies (COBIT)

Control Objectives for Information & related Technologies (COBIT)

Network Access Control (NAC)

Network Access Control (NAC)

Security Content Automation Protocol (SCAP)

Security Content Automation Protocol (SCAP)

File Transfer Protocols (SFTP, SCP, FTP)

File Transfer Protocols (SFTP, SCP, FTP)

MBR Virus

MBR Virus

Information Security Continuous Monitoring (ISCM)

Information Security Continuous Monitoring (ISCM)

Subnetting & Suppernetting - The Easy Way

Subnetting & Suppernetting - The Easy Way

VLAN, Subnet & Routing

VLAN, Subnet & Routing

IPSec VPN Configurations

IPSec VPN Configurations

RARP, BOOTP, DHCP, ARP, DHCP Spoofing, ARP Spoofing, ARP Poisoning, DHCP Snooping, Dynamic ARP Insp

RARP, BOOTP, DHCP, ARP, DHCP Spoofing, ARP Spoofing, ARP Poisoning, DHCP Snooping, Dynamic ARP Insp

Capability Maturity Model Integration (CMMI)

Capability Maturity Model Integration (CMMI)

VLAN (Access, Trunk, Native, Private, RVI, Hoping)

VLAN (Access, Trunk, Native, Private, RVI, Hoping)

Subnetting (zero to advance)

Subnetting (zero to advance)

Security of Cloud Computing

Security of Cloud Computing

Security of Domain Name System (DNS)

Security of Domain Name System (DNS)

IPsec (AH, ESP, ISAKMP, IKE, SA, Transport & Tunnel Modes)

IPsec (AH, ESP, ISAKMP, IKE, SA, Transport & Tunnel Modes)

Data Sanitization

Data Sanitization

Smart Card Security

Smart Card Security

Legal Systems (Information Security)

Legal Systems (Information Security)

Types of Intrusion Detection Systems (IDS)

Types of Intrusion Detection Systems (IDS)

Trusted Computing Base (TCB)

Trusted Computing Base (TCB)

Awareness, Training, Education (Information Security)

Awareness, Training, Education (Information Security)

TACACS, XTACACS, RADIUS, TACACS+, DIAMETER

TACACS, XTACACS, RADIUS, TACACS+, DIAMETER

Security Modes of Information System

Security Modes of Information System

Process States (Animation)

Process States (Animation)

Product Acceptance (Verification, Validation, Certification, Accreditation)

Product Acceptance (Verification, Validation, Certification, Accreditation)

Botnet Animation (Architecture, Uses, Countermeasures)

Botnet Animation (Architecture, Uses, Countermeasures)

Power Issues

Power Issues

Fax Security (Working, Vulnerabilities, Safeguards)

Fax Security (Working, Vulnerabilities, Safeguards)

MAC & HMAC (with Animations)

MAC & HMAC (with Animations)

Access Control Models (DAC, Non-DAC, IBAC, RBAC, RuBAC, TBAC, ABAC, MAC, LBAC)

Access Control Models (DAC, Non-DAC, IBAC, RBAC, RuBAC, TBAC, ABAC, MAC, LBAC)

Bluetooth Attacks (BlueJacking, BlueSnarfing, Blue bugging)

Bluetooth Attacks (BlueJacking, BlueSnarfing, Blue bugging)

Off-site Backup Technologies (Electronic Vaulting, Remote Journaling, Remote Mirroring)

Off-site Backup Technologies (Electronic Vaulting, Remote Journaling, Remote Mirroring)

Fuzz Testing/ Fuzzing (Software Security Testing)

Fuzz Testing/ Fuzzing (Software Security Testing)

6 x Threat Modeling (SDL, STRIDE, DREAD, VAST, TRIKE, PASTA)

6 x Threat Modeling (SDL, STRIDE, DREAD, VAST, TRIKE, PASTA)

Kerberos Network Flow (Wikipedia)

Kerberos Network Flow (Wikipedia)

Security Baseline - Scoping vs Tailoring

Security Baseline - Scoping vs Tailoring

Bluetooth Security & Attacks

Bluetooth Security & Attacks

Relational Database Security

Relational Database Security

Time of Check/ Use (TOC/TOU) Attack - Race Condition

Time of Check/ Use (TOC/TOU) Attack - Race Condition

System Redundancy

System Redundancy

Security of Network File Transfer - FTP, SFTP, FTPS, TFTP

Security of Network File Transfer - FTP, SFTP, FTPS, TFTP

Hash, MAC & HMAC

Hash, MAC & HMAC

LAN Technologies & Security - ARCNET, Token Ring, FDDI, CDDI, Ethernet, CSMA, CSMA/CA, CSMA/CD

LAN Technologies & Security - ARCNET, Token Ring, FDDI, CDDI, Ethernet, CSMA, CSMA/CA, CSMA/CD

PCI DSS - Payment Cards Security

PCI DSS - Payment Cards Security

DES Modes of Operations

DES Modes of Operations

WLAN Security - WEP/ WPA/ WPA2/ WPA3

WLAN Security - WEP/ WPA/ WPA2/ WPA3

Business Continuity Planning (BCP)

Business Continuity Planning (BCP)

Data Classification

Data Classification

Kerberos - Network Authentication Protocol

Kerberos - Network Authentication Protocol

NASA got Hacked

NASA got Hacked

BCP & DRP Activation/ Execution

BCP & DRP Activation/ Execution

Redundant Array of Independent Disks (RAID)

Redundant Array of Independent Disks (RAID)

Backup Security Operations

Backup Security Operations

Overview of Endpoints Security

Overview of Endpoints Security

Overview of IDS & IPS

Overview of IDS & IPS

Overview of Incident Response

Overview of Incident Response

Digital forensic

Digital forensic

Administrative Access Controls

Administrative Access Controls

Uber (UK) is Fined for Data Breach after Uber (US)

Uber (UK) is Fined for Data Breach after Uber (US)

Huawei being banned from Critical Infrastructures

Huawei being banned from Critical Infrastructures

Authentication Methods, Attacks & Controls

Authentication Methods, Attacks & Controls

Network Access/Admission Control (NAC)

Network Access/Admission Control (NAC)

MiSafes Smart Watches put Kids Safety in Danger

MiSafes Smart Watches put Kids Safety in Danger

Network Authentication Protocols at Layer 2 (PAP, CHAP & EAP)

Network Authentication Protocols at Layer 2 (PAP, CHAP & EAP)

Firewall Deployment Architectures

Firewall Deployment Architectures

DJI's Drones Web Portal Hacked using XSS

DJI's Drones Web Portal Hacked using XSS

Zero Day vulnerability allows to escape Virtualbox into Guest OS

Zero Day vulnerability allows to escape Virtualbox into Guest OS

Samsung & Crucial SSDs can be decrypted without password

Samsung & Crucial SSDs can be decrypted without password

Nvidia GPU effected by a Side Channel Attack

Nvidia GPU effected by a Side Channel Attack

A Side channel Attack is stealing Data from Intel's CPUs

A Side channel Attack is stealing Data from Intel's CPUs

US Government published Framework for managing Insider Threat

US Government published Framework for managing Insider Threat

2 x Zero-days in Bluetooth Chips of Cisco & other vendors

2 x Zero-days in Bluetooth Chips of Cisco & other vendors

5 x EndPoints attacks that Antivirus won't detect

5 x EndPoints attacks that Antivirus won't detect

How to protect your Enterprise against Ransomware

How to protect your Enterprise against Ransomware

China is hijacking Internet of Western Countries

China is hijacking Internet of Western Countries

Hong Kong Airline got Hacked

Hong Kong Airline got Hacked

UK Fined Facebook for Users Data mis-used in US Election

UK Fined Facebook for Users Data mis-used in US Election

Russian linked to cyber attack on Saudi Plant

Russian linked to cyber attack on Saudi Plant

Ex Israeli Military are establishing 8 x Cyber Security Firms

Ex Israeli Military are establishing 8 x Cyber Security Firms

75k Citizens Records Hacked from ObamaCare Health Insurance

75k Citizens Records Hacked from ObamaCare Health Insurance

Amazon OS for IoTs Devices, found with multiple Vulnerabilities

Amazon OS for IoTs Devices, found with multiple Vulnerabilities

WikiLeaks released Secret locations of Amazon Data Centers

WikiLeaks released Secret locations of Amazon Data Centers

GCHQ (UK) Cyber Security Guidelines for Legal Sector

GCHQ (UK) Cyber Security Guidelines for Legal Sector

VLC player can get your system Hacked

VLC player can get your system Hacked

Cyber Operation OceanSalt against S.Korea, USA & Canada

Cyber Operation OceanSalt against S.Korea, USA & Canada

Twitter released 12 Million Records of State-Sponsored Compaigns

Twitter released 12 Million Records of State-Sponsored Compaigns

Paycheck system getting hacked through phishing email

Paycheck system getting hacked through phishing email

News website's scareware hacker got busted by FBI

News website's scareware hacker got busted by FBI

Facebook established Election War Room to counter Political Compaigns

Facebook established Election War Room to counter Political Compaigns

Pics from locked iPhone could get Hacked

Pics from locked iPhone could get Hacked

UK published IoTs Security Guidelines for Manufacturers & Users

UK published IoTs Security Guidelines for Manufacturers & Users

US Voters Database on sale over Dark Web

US Voters Database on sale over Dark Web

FiveEye Countries published 5 x Post-Exploitation Hacking Tools

FiveEye Countries published 5 x Post-Exploitation Hacking Tools

phishing compaign imitating as police department

phishing compaign imitating as police department

Data of 30K US DoD's employees got Hacked

Data of 30K US DoD's employees got Hacked

Facebook will notify 30 Million hacked Users

Facebook will notify 30 Million hacked Users

Famous Ransomware Notpetya, linked to industrial malware Industroyer

Famous Ransomware Notpetya, linked to industrial malware Industroyer

APT 38 - North Korean Hacking Group

APT 38 - North Korean Hacking Group

DoD Weapon Systems are Vulnerable to Cyber Attacks

DoD Weapon Systems are Vulnerable to Cyber Attacks

Google Plus Service shutting Down due to exposure of 500K accounts

Google Plus Service shutting Down due to exposure of 500K accounts

Cyber Security Challenge Australia - CTF Exercise 2018

Cyber Security Challenge Australia - CTF Exercise 2018

New DoD Tool for Cyber incidents Response

New DoD Tool for Cyber incidents Response

WhatsApp getting hacked through VoiceMail

WhatsApp getting hacked through VoiceMail

Global Trojan compaign is Hacking Bank's Credentials

Global Trojan compaign is Hacking Bank's Credentials

Saudi used Israeli Spyware against Human Rights Activist in Canada

Saudi used Israeli Spyware against Human Rights Activist in Canada

Drug Smugglers Caught due to Crashed Drone

Drug Smugglers Caught due to Crashed Drone

Cyber Threats to Agriculture

Cyber Threats to Agriculture

Google Introduced Android App for User Privacy

Google Introduced Android App for User Privacy

FBI Prosecuted Admin of Dark Web Marketplace

FBI Prosecuted Admin of Dark Web Marketplace

State-sponored Russian hackers caught by Dutch hacking official WiFi

State-sponored Russian hackers caught by Dutch hacking official WiFi

Chinese military installed hardware backdoors into US Servers

Chinese military installed hardware backdoors into US Servers