#cybersecurity

See tagged statuses in the local BookWyrm community

: Wer hat sich schon einmal vertieft Gedanken darüber gemacht, was in seinem - eigentlich so alles drin steckt?
"Die Firma bietet computertomographische () Scans für Tech-Unternehmen an"
"In den manipulierten Kabeln befinden sich mehrere Chips aufeinandergestapelt, sodass genug Rechenleistung zustande kommt, ohne die Größe oder die Form des Kabels zu verändern."
https://t3n.de/news/ct-scans-deckt-sicherheitsluecken-von-guenstigen-ladekabeln-auf-1662287/

Important reminder, if you own a domain name and don't use it for sending email.

There is nothing to stop scammers from sending email claiming to be coming from your domain. And the older it gets, the more valuable it is for spoofing. It could eventually damage your domain's reputation and maybe get it blacklisted, unless you take the steps to notify email servers that any email received claiming to come from your domain should be trashed.

Just add these two TXT records to the DNS for your domain:
TXT v=spf1 -all
TXT v=DMARC1; p=reject;

The first says there is not a single SMTP server on earth authorized to send email on behalf of your domain. The second says that any email that says otherwise should be trashed.

If you do use your domain for sending email, be sure to add 3 records:
SPF record to indicate which SMTP server(s) …

The Cybersecurity Trinity Artificial Intelligence, Automation, and Active Cyber Defense by Donnie W. Wen, 2024

This book explores three crucial topics for cybersecurity professionals: artificial intelligence (AI), automation, and active cyber defense (ACD). The Cybersecurity Trinity will provide cybersecurity professionals with the necessary background to improve their defenses by harnessing the combined power of these three concepts.

@bookstodon



The book is divided into four sections, one addressing each underlying concept and the final section discussing integrating them to harness their full potential. With the expected growth of AI and machine learning (ML), cybersecurity professionals must understand its core concepts to defend AI and ML-based systems. Also, most cybersecurity tools now incorporate AI and ML. However, many cybersecurity professionals lack a fundamental understanding of AI and ML. The book's first section aims to demystify AI and ML for cybersecurity practitioners by exploring how AI and ML systems work, where they are vulnerable, and how to defend them. Next, we turn our attention to security automation. Human-centered cyber defense processes cannot keep pace with the threats targeting organizations. Security automation can help defenders drastically increase the speed of detection and response. This section will discuss core use cases that security teams can implement, including intelligence processing, incident triage, detection, and response. This section will end with strategies for a successful security automation implementation and strategies that can lead to failure. Accelerating the defense is but one side of the equation. Defenders can also implement ACD methods to disrupt and slow the attacker. Of course, ACD spans a broad spectrum, including some that could raise legal and ethical concerns.

🛡️️ Modernisierung des Computerstrafrechts: GI fordert präzisere Klarstellungen

Der neue Entwurf zur Modernisierung des Computerstrafrechts soll IT-Sicherheitsforschenden mehr Rechtssicherheit bieten. Die GI begrüßt dies, fordert aber Nachbesserungen bei Nachweisführung und dem §202c StGB, um die Cybersicherheit in Deutschland nachhaltig zu stärken.

Jetzt lesen und mitdiskutieren 👇

https://gi.de/meldung/modernisierung-des-computerstrafrechts-gi-fordert-dringende-umsetzung

Sharepic zur Stellungnahme zur Modernisierung des Computerstrafrechts

Draft guidance from Ofcom on encryption ‘could undermine the security protections that millions of people rely on every day.’

Failing to consider how secures everyone’s misses the point that security is online safety.

Read the legal opinion from Index on Censorship ⬇️

https://www.indexoncensorship.org/2024/12/media-regulator-fails-to-properly-protect-freedom-of-expression-in-online-safety-draft-guidance/

Jeden Tag landen Phishing-Mails in unseren Postfächern. Bis vor einigen Jahren fielen diese besonders durch ihre kruden Texte und eine krumme Rechtschreibung auf.

Heutzutage gehen Cyberkriminelle schon deutlich professioneller vor.

Damit ihr solche betrügerischen Mails trotzdem erkennt, haben wir euch eine Checkliste zusammengefasst, mit der ihr in Sekundenschnelle sichere von unsicheren Mails unterscheiden könnt. 😜

Der 3-Sekunden-Security-Check für sichere Mails: Absender bekannt? Betreff sinnvoll? Anhang erwartet?

Why GPS spoofing is more complex than it seems and how it causes unexpected problems for pilots and systems✈️ ...
 
Learn how aviation is tackling a 500% surge in GPS spoofing incidents, affecting 1,500 flights daily, and discover key insights in the OPSGROUP's final report: https://ops.group/blog/gps-spoofing-final-report/

Watch the full episode of Ken Munro with @vpetersson here: https://vpetersson.com/podcast/S01E24.html