Juan Carlos Cerquera Vela

Modelo de Amenazas - Threat Modeling

3

Cybersecurity Awareness - CAPC by CertiProf Cybersecurity Awareness Professional Certification Importance: A strong awareness program is crucial for establishing a culture of cybersecurity. Certification Validation: Validates expertise in identifying cyber threats, implementing robust security measures, and developing effective awareness strategies. Objective: Transform organizational culture to embed cybersecurity, educate, prepare, and protect employees, creating a more efficient organization through continuous learning and awareness. Key Points: Understand common cybersecurity threats and vulnerabilities. Identify and prevent social engineering attacks (e.g., phishing, smishing). Apply best practices for password management and account security. Recognize and report suspicious emails and websites. Safely use public Wi-Fi and mobile devices. Protect sensitive personal and company data. Understand the importance of software updates and patches. Develop a cybersecurity-conscious mindset. Commitment: Highlights dedication to staying current with industry best practices. #CyberThreatIntelligence #Certified #Cybersecurity #CareerGrowth #LearningAchievement #InfoSec #ThreatIntelligence #CyberSecurityAwareness #OnlineLearning #ProfessionalDevelopment #SecurityCertification #CyberWarfare #NetworkSecurity #InformationSecurity

10

4 comentarios

Interbank : banco reconoce hackeo a su sistema en comunicado https://lnkd.in/eiEjPzyM 🔗 DarkWebInformer.com - Cyber Threat Intelligence 📅 Date: 2024-10-30 16:29:01 🚨 Title: Database of Interbank allegedly leaked 🛡️ Victim Country: Peru 🏭 Victim Industry: Financial Services 🏢 Victim Organization: interbank 🌐 Victim Site: interbank.pe 📜 Category: Data Breach 🔗 Claim: https://lnkd.in/eg2zK4jB 🕵️‍♂️ Threat Actor: kzoldyck 🌍 Network: openweb 📝 Description: The threat actor claims to have leaked data from Interbank.The leaked data reportedly contains 3.7 TB of 3 million customers, which includes Name, Date of Birth, Address, Phone Number, Email, CC data, CVVs, Password, etc. The threat actor also have access to the API credentials, LDAP and Azure credentials. Screenshots: #interbank #ciberincidente #riesgos #ISO #NIST #HACKEO #Ciberseguridad

7

1 comentario

NIST Cybersecurity Framework (CSF) checklist to help guide your implementation of cybersecurity practices: As always, credits goes to the Ministry of Security and team 1. Identify (ID): Asset Management: Inventory assets, devices, and software. Business Environment: Understand your role in the ecosystem. Governance: Establish policies, risk management, and regulatory requirements. Risk Assessment: Identify cybersecurity risks. Supply Chain Risk: Manage third-party risks. 2. Protect (PR): Access Control: Restrict access to sensitive systems/data. Data Security: Implement encryption, DLP tools. Awareness Training: Train staff on cybersecurity risks. Maintenance: Conduct timely system and software updates. Protective Technology: Utilize firewalls, intrusion detection, etc. 3. Detect (DE): Anomalies and Events: Identify suspicious behavior. Continuous Monitoring: Establish a process for threat monitoring. Detection Processes: Develop playbooks for incident detection. 4. Respond (RS): Response Planning: Prepare a formal incident response plan. Communication: Establish incident notification channels. Mitigation: Define actions to contain incidents. Improvements: Post-incident reviews to enhance security. 5. Recover (RC): Recovery Planning: Develop plans to restore operations. Improvements: Implement lessons learned. Communications: Inform stakeholders of recovery progress. Regularly review and update each element to align with changing threat landscapes and organizational needs. Follow us at SMIIT CyberAI #CyberSecurity #NISTCSF #RiskManagement #DataSecurity #IncidentResponse #AssetManagement #AccessControl #ThreatDetection #VulnerabilityManagement #BusinessContinuity #CyberResilience #Misnterofsecurity #SMIITCyberai

77

8 comentarios

Cybersecurity Awareness - CAPC by CertiProf Cybersecurity Awareness Professional Certification Importance: A strong awareness program is crucial for establishing a culture of cybersecurity. Certification Validation: Validates expertise in identifying cyber threats, implementing robust security measures, and developing effective awareness strategies. Objective: Transform organizational culture to embed cybersecurity, educate, prepare, and protect employees, creating a more efficient organization through continuous learning and awareness. Key Points: Understand common cybersecurity threats and vulnerabilities. Identify and prevent social engineering attacks (e.g., phishing, smishing). Apply best practices for password management and account security. Recognize and report suspicious emails and websites. Safely use public Wi-Fi and mobile devices. Protect sensitive personal and company data. Understand the importance of software updates and patches. Develop a cybersecurity-conscious mindset. Commitment: Highlights dedication to staying current with industry best practices. #CyberThreatIntelligence #Certified #Cybersecurity #CareerGrowth #LearningAchievement #InfoSec #ThreatIntelligence #CyberSecurityAwareness #OnlineLearning #ProfessionalDevelopment #SecurityCertification #CyberWarfare #NetworkSecurity #InformationSecurity

29

1 comentario

Buen día , aquí un aporte para los estudiosos de la seguridad cibernética. Top 50 herramientas de Ciberseguridad 1. 🔒 Wireshark 2. 🛡️ Snort 3. 🖥️ Metasploit 4. 📡 Nmap 5. 🛠️ Burp Suite 6. 🌐 OWASP ZAP 7. 📊 Security Onion 8. 🚀 Kali Linux 9. 🛡️ Suricata 10. 🌐 Nessus 11. 🚪 OpenVAS 12. 🛡️ ModSecurity 13. 🗝️ Hashcat 14. 🧱 OSSEC 15. 🛡️ Fail2ban 16. 🤖 YARA 17. 📜 SELinux 18. 🧬 ClamAV 19. 🛡️ Security+Plus 20. 🔐 GPG 21. 📡 Aircrack-ng 22. 🛠️ Sysinternals Suite 23. 🖥️ Wireshark 24. 🔑 KeePass 25. 🛡️ Tripwire 26. 📝 Ophcrack 27. 📡 Netcat 28. 🛡️ Wazuh 29. 🛠️ Microsoft Baseline Security Analyzer 30. 📊 AlienVault OSSIM 31. 🔐 VeraCrypt 32. 📡 Hping 33. 🛡️ OSQuery 34. 🛠️ Acunetix 35. 🔑 LastPass 36. 🛡️ Lynis 37. 📜 AppArmor 38. 🛠️ SQLMap 39. 🗝️ John the Ripper 40. 📡 Zenmap 41. 🛡️ Sn1per 42. 🖥️ Wireshark 43. 🧱 Rkhunter 44. 🛠️ Splunk 45. 🔐 1Password 46. 🛡️ Bro IDS 47. 📡 Angry IP Scanner 48. 🛠️ Security Onion 49. 🔑 Bitwarden 50. 🛡️ McAfee ESM #sec #ops #defend

39

2 comentarios

I need to delve further into this topic

2

En este modulo con informaciones practicas "Extending Your Network" puede aprender de los siguientes conceptos : -- Introduction to Port Forwarding ✅ -- Firewalls 101 ✅ -- Practical - Firewall ✅ -- VPN Basics ✅ -- LAN Networking Devices ✅ -- Practical - Network Simulator ✅

6

Artigo Publicado (Cyber Security): https://lnkd.in/dgphgrCh Abstract: Information security is a critical aspect for organizations, and a problem in this regard consists of knowing the level of vulnerability in which organizations. Therefore, this article aims to present a Cybersecurity Framework (FSRA) based on the ISO/IEC 27002:2022 standard. In addition, a Fuzzy Risk Inference System (FRIS) is presented, which uses FSRA controls - Security Practices (SP), Software (S), and People (P) as input, a total of 93 sub-items. A FRIS output is the Security Risk (SR) in which the organization is due to non-compliance or partial compliance with FSRA controls. Thus, if each control is fully met, its entry value in the FRIS will be 100%. Otherwise, it will be proportional. Therefore, when the FRIS returns the SR, whose output values can be Low (13% to 39.99%), Medium (40% to 59.99%), or High (60% to 100%), the security analyst can measure the risk security, in which the organization is located, according to ISO/IEC 27002:2022 and from that know where to act and how to act. Link GitHub: https://lnkd.in/dCD4PDsv

1

InfoSec Vulnerability Assessments, Active Vs Passive Active and passive vulnerability assessments are two common methods used to identify vulnerabilities in a system or network. Here is the difference between the two: 1. Active Vulnerability Assessment: - In an active vulnerability assessment, security tools are used to actively scan the system or network for vulnerabilities. - This involves sending requests to the target system to trigger responses that can help identify potential weaknesses. - It may involve simulated attacks to test the system's response to various threats. - Active assessments can be more intrusive and may affect the performance of the system being tested. - It provides real-time results and can help identify vulnerabilities that may not be visible passively. 2. Passive Vulnerability Assessment: - Passive vulnerability assessments involve monitoring network traffic and analyzing data without directly interacting with the target system. - It gathers information on the system's vulnerabilities without actively scanning for weaknesses. - This method is less intrusive and does not involve sending requests that may affect the system's performance. - Passive assessments are more stealthy, making them suitable for detecting vulnerabilities without triggering alarms or causing disruptions. - It may not provide real-time results, but can continuously monitor for vulnerabilities over time. In summary, active vulnerability assessments involve actively scanning and testing a system for vulnerabilities, while passive vulnerability assessments focus on monitoring network traffic and analyzing data to identify weaknesses without direct interaction. Both methods have their advantages and can be used in combination to provide a comprehensive assessment of a system's security posture. #InformationSecurity #InformationTechnology #VulnerabilityAssessment

27

NIST Cybersecurity Framework Policy Template Guide The Multi-State Information Sharing & Analysis Center (MS-ISAC) has published a guide to help organizations implement the NIST Cybersecurity Framework through policy templates. The guide covers policies across the five core functions of the framework: Identify - Asset management, risk management, and supply chain risk Protect - Identity and access management, awareness and training, data security, information protection, maintenance, and protective technology Detect - Anomaly detection, continuous monitoring, and detection processes Respond - Response planning, communications, analysis, and improvements Recover - Recovery planning, improvements, and communications The templates can be customized by organizations and used as a starting point for developing their own cybersecurity policies. The guide also links to additional cybersecurity resources. This policy template guide is a valuable tool to help align organizational policies with the leading NIST Cybersecurity Framework.

58

Cloud Forensics: Key Artifacts and Best Practices for Successful Investigations #Part5 Best Practices in Cloud Forensics: 7. Implement proper access controls and segregation of duties:   - Limit access to forensic data on a need-to-know basis   - Use multi-factor authentication for accessing sensitive information   - Implement role-based access control for investigative tools   - Maintain separate accounts for forensic activities   - Regularly audit access logs to detect unauthorized access attempts 8. Develop and maintain cloud-specific incident response plans:   - Create procedures tailored to different cloud deployment models (IaaS, PaaS, SaaS)   - Define roles and responsibilities for cloud forensic investigations   - Establish communication protocols with cloud providers   - Regularly update and test the incident response plan   - Integrate cloud forensics into the overall organizational security strategy 9. Use secure and encrypted channels for data transfer:   - Implement end-to-end encryption for data in transit   - Use secure protocols (e.g., SFTP, HTTPS) for evidence transfer   - Verify the integrity of transferred data using checksums   - Employ VPNs or dedicated connections for large data transfers   - Securely store encryption keys used in the investigation 10. Maintain a library of known-good baselines:   - Regularly capture baseline configurations of cloud resources   - Document standard operating procedures and expected behaviors   - Maintain an inventory of approved cloud services and applications   - Use these baselines to quickly identify deviations during investigations   - Regularly update baselines to reflect authorized changes 11. Prioritize data privacy and confidentiality:   - Anonymize or pseudonymize personal data when possible   - Implement data minimization principles in evidence collection   - Adhere to data protection regulations (e.g., GDPR, CCPA)   - Use secure data disposal methods for unnecessary information   - Implement strict access controls for sensitive customer data 12. Conduct regular training and awareness programs:   - Provide cloud forensics training to relevant team members   - Raise awareness about cloud security best practices across the organization   - Conduct simulated incident response exercises involving cloud scenarios   - Keep the legal team informed about cloud forensics capabilities and limitations   - Foster a culture of security awareness and incident reporting By following these best practices, organizations can enhance the effectiveness and reliability of their cloud forensics investigations, ensuring that evidence is collected, analyzed, and presented in a manner that is both technically sound and legally admissible. #CloudForensics #CyberSecurity #DigitalInvestigation #CloudComputing #ForensicAnalysis #IncidentResponse #DataPrivacy #LegalTech #CyberCrime #ITSecurity #ITForensics #CyberDefense #CloudAudit #DigitalForensics #CyberForensics #LegalTechnology

4

Hacking and Security: The Comprehensive Guide to Penetration Testing and Cybersecurity (Rheinwerk Computing)  -------------------------------- 🔧 Key Concepts and Tools: Set up your environment with Metasploitable and Juice Shop. Install Kali Linux and explore hacking tools like nmap, hydra, and Armitage. 🔒 Penetration Testing and Security Practices: Learn client-side and network penetration testing techniques. Master security practices including password security, IT forensics, and safety checks. Secure Windows servers, Linux systems, Samba file servers, and web applications. 🌐 Advanced Security Concepts: Understand cloud, mobile, and Internet of Things (IoT) security. Secure Office 365 with multi-level authentication and conditional access. Implement protective measures for Android and iOS devices. Explore IoT protocols and services to enhance security. ----------------------------- get here https://amzn.to/3MCMHU4

3

🚨 BSI Guideline TR-03183 Part 3: Vulnerability Reports and Notifications for Cybersecurity 🚨 The third part of the BSI Technical Guideline #TR03183 focuses on Vulnerability Reports and Notifications—a critical area in maintaining product security post-deployment. This guideline emphasizes the importance of establishing clear processes for managing #vulnerabilities, ensuring that issues are identified, reported, and resolved in a structured and timely manner. Key Elements of Part 3 - Vulnerability Reports and Notifications: Secure Reporting Channels – Requires manufacturers to provide secure, anonymous channels for reporting vulnerabilities, enabling researchers and users to share findings without risk. Coordinated Vulnerability Disclosure – Outlines a structured process for coordinating responses to vulnerabilities. This includes timely acknowledgment, assessment, and communication of vulnerability status with stakeholders. Rapid Response Mechanisms – Details protocols for evaluating vulnerabilities and implementing fixes, minimizing exposure time. Manufacturers are encouraged to develop a vulnerability response plan that is both efficient and transparent. Continuous Improvement – The guidelines encourage organizations to conduct post-resolution assessments to learn from each vulnerability, thereby strengthening overall resilience and informing future security improvements. By implementing these measures, manufacturers can not only comply with expected regulations but also reinforce user trust by demonstrating a commitment to proactive cybersecurity practices. These guidelines underscore the responsibility of manufacturers to protect users and maintain the integrity of their products, even after they are released into the market. 🕒 For more information and to review the guidelines, visit the link in the comment below. 👇 #VulnerabilityManagement #CyberResilience #IncidentResponse #cybersecurity #BSIGuidelines #ITGRC #ITGRCAdvisory #BWAdvisory #AkademiaITGRC #thesoc2 CyberMadeInPoland Cyber London

6

2 comentarios