Louay Saleh

Shodan.io هو محرك بحث يسمح للمستخدمين بالعثور على الأجهزة المتصلة بالإنترنت واستكشافها، مثل الخوادم وكاميرات الويب وأجهزة التوجيه وأجهزة إنترنت الأشياء. يقوم بفهرسة المعلومات حول هذه الأجهزة بناءً على عناوين بروتوكول الإنترنت الخاصة بها ويوفر رؤى حول تكويناتها ونقاط ضعفها والخدمات التي تعمل عليها. غالبًا ما يُستخدم Shodan في الأبحاث الأمنية ومراقبة الشبكة. Shodan.io is a search engine that allows users to find and explore devices connected to the internet, such as servers, webcams, routers, and IoT devices. It indexes information about these devices based on their IP addresses and provides insights into their configurations, vulnerabilities, and services running on them. Shodan is often used for security research and network monitoring. #Shodan #Cybersecurity #PenTest #Penetration #CyberSkills ##InfoSec

١٧

١ تعليق واحد

Justifying the cybersecurity budget post-incident is straightforward, but convincing decision-makers beforehand is the real challenge. Proactive security is crucial. #Cybersecurity #ProactiveSecurity #RiskManagement #CISO #HeadInfoSec #CBB #CISSP #Trainer #CISA #CISM #CISP #PrivacyExpert #CBBApproved #InformationSecurity

٦٦

١ تعليق واحد

🚑 #IH/IR 🚒 The Certified Incident Handler (CIH) program, equips students with the knowledge and skills needed to effectively prepare for, handle, and eradicate threats in incidents. It is the second step toward joining a Security Operations Center (#SOC). Please find the attached file to discover some key areas that #SOC #IR should focus on it. like: 1.Incident Handling Basics 2.Types of Incidents 3.Risk Assessment and Threat Analysis 4.Laws and Policies 5.Tactical Procedures and Techniques 6.Post-Incident Activities 7.Holistic Approach 8.#Wazuh Capabilities as IR 9. IR Scenario using #Wazuh Stay tuned for more insights as I continue to delve deeper into this educational expedition! 💻🔒 ⚔ #SIEM #SecurityAwareness #Wazuh #BlueTeam #SOC #Alert #Incident #Analysis #Log #Event #IR #Handling #Basics #Types #Risk #Assessment #Threat #Laws #Policies #Tactical #Techniques #Post-Incident #Response

٤٥

٤ تعليق

The 20th Control under Technology Controls in ISO 27001:2022 A.8.20 - Networks Security #ISMS #ISO27001 #ISO27002

٣١

🔐 NIST Cybersecurity Framework (CSF): Understanding Subcategory GV.SC-05 🔐 Cybersecurity isn’t just about protecting your own organization—it’s also about ensuring your partners and suppliers are secure too. That’s where NIST CSF Subcategory GV.SC-05 comes in. GV.SC-05 is all about establishing and prioritizing requirements to address cybersecurity risks in your supply chains. It ensures that these requirements are not just discussed but also integrated into contracts and agreements with suppliers and other third parties. Why does this matter? In today’s interconnected world, the security of your supply chain is just as important as your internal security. A vulnerability in a supplier’s system can quickly become a vulnerability in yours. By embedding cybersecurity requirements into contracts, you ensure that your partners are held to the same standards, reducing overall risk. For those new to the NIST Cybersecurity Framework, it’s a set of guidelines designed to help organizations manage and reduce cybersecurity risks. It’s widely adopted across industries for its practical and flexible approach. 🌐 Protecting your organization means protecting the entire network it depends on. GV.SC-05 helps ensure that your cybersecurity efforts extend beyond your walls. #Cybersecurity #NISTCSF #SupplyChainSecurity #RiskManagement #ThirdPartyRisk

١١

SSCP Exam Changes – Effective September 2024 A title change is occurring for Domain 1. Security Operations and Administration will have a new title of Security Concepts and Practices. https://lnkd.in/dDmPu3iG #isc2 #sscp #cybersecurity #certification

٣

OWASP Vulnerability Management Guide [𝐅𝐑𝐄𝐄 𝐆𝐔𝐈𝐃𝐄] 7 𝐒𝐭𝐞𝐩𝐬 𝐭𝐨 𝐠𝐞𝐭 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐉𝐨𝐛 𝐢𝐧 90 𝐝𝐚𝐲𝐬 https://buff.ly/3X7koCZ 📱Telegram Channel https://buff.ly/4b4NHee

١٦

𝐔𝐧𝐝𝐞𝐫𝐬𝐭𝐚𝐧𝐝 𝐓𝐨𝐩 𝐏𝐢𝐥𝐥𝐚𝐫𝐬 𝐨𝐟 𝐙𝐞𝐫𝐨 𝐓𝐫𝐮𝐬𝐭 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 ⏩ 𝐆𝐞𝐭 𝐂𝐨𝐦𝐩𝐥𝐞𝐭𝐞 𝐏𝐃𝐅: https://lnkd.in/dmnfigZH 🔹𝐈𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐚𝐧𝐝 𝐀𝐜𝐜𝐞𝐬𝐬 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 (𝐈𝐀𝐌) ➼Single Sign-On (SSO) ➼Multi-Factor Authentication (MFA) ➼Role-Based Access Control (RBAC) ➼Privileged Access Management (PAM) ➼Adaptive Authentication ➼User Activity Monitoring 🔹𝐄𝐧𝐝𝐩𝐨𝐢𝐧𝐭 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 ➼Antivirus and Anti-Malware Protection ➼Endpoint Detection and Response (EDR) ➼Device Compliance Management ➼Mobile Device Management (MDM) ➼Patch Management ➼Disk Encryption 🔹𝐍𝐞𝐭𝐰𝐨𝐫𝐤 𝐌𝐢𝐜𝐫𝐨-𝐒𝐞𝐠𝐦𝐞𝐧𝐭𝐚𝐭𝐢𝐨𝐧 ➼Virtual LAN (VLAN) Segmentation ➼Software-Defined Perimeter (SDP) ➼Firewall Policies for Micro-Segmentation ➼Zero Trust Network Access (ZTNA) ➼Virtual Private Cloud (VPC) Segmentation ➼Micro-Segmented Zones for IoT Devices 🔹𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 ➼Web Application Firewalls (WAFs) ➼API Security ➼Runtime Application Self-Protection (RASP) ➼Application Vulnerability Scanning ➼DevSecOps Integration ➼Container Security 🔹𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐧𝐝 𝐄𝐧𝐜𝐫𝐲𝐩𝐭𝐢𝐨𝐧 ➼Data Encryption at Rest and in Transit ➼Data Loss Prevention (DLP) ➼Access Control Policies for Sensitive Data ➼Data Masking ➼Cloud Data Security Solutions ➼File-Level Encryption 🔹𝐓𝐡𝐫𝐞𝐚𝐭 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞 𝐚𝐧𝐝 𝐀𝐧𝐚𝐥𝐲𝐭𝐢𝐜𝐬 ➼Security Information and Event Management (SIEM) ➼User and Entity Behavior Analytics (UEBA) ➼Threat Intelligence Platforms (TIPs) ➼Intrusion Detection and Prevention Systems (IDPS) ➼AI-Powered Threat Detection ➼Automated Incident Response 🔹Zero Trust security market size is projected to grow from USD 36.5 billion in 2024 to USD 78.7 billion by 2029 at a compound annual growth rate (CAGR) of 16.6% during the forecast period. #zerotrust #zerotrustsecurity #cybersecurity #informationsecurity #hacking #CyberSec #networksecurity #securityanalyst #cyberattack #securityanalyst #intelligence #security #malware #threatintelligence #threathunting #technology #AI #MachineLearning #GenerativeAI

١٩

🛡️ Network Forensics for IR 🚨 ------------------------------------ 🔍Why Network #Forensics is Crucial in Today’s Digital Age? 1- Proactive Threat Detection 🛡️ 2- Regulatory Compliance 📜 3- Digital Evidence Integrity 🔒 4- Incident Response 🚨 5- Data Security 🔐 🔗 Check out the attached document for more details. Investing in network forensics is not just about security; it’s about building a resilient and trustworthy digital environment. 🌐💼 #CyberSecurity #Network #Forensics #DigitalSafety #DataProtection #SOC #Wazuh #MISP #TheHive #IR #Phishing #Analyzing #Email #Malware #sandbox #IOCs #Patterns #Anomalous #UBA #EDR #FIM #tcpflow #Wireshark

٣٥

Just finished the learning path “CCNP Security: Prepare for the Implementing and Operating Cisco Security Core Technologies (350-701 SCOR) Exam”! #contentsecurity

١٣

١ تعليق واحد

Practical hacking and pentesting course for beginners. Free until 21 November 2024 https://lnkd.in/dUCjeWD5 #Free_course #cybersecurity #network #Hacking #Pentesting

١٢

٣ تعليق

The 24th control under Technical Controls in ISO 27001:2022 A.8.24 - Use of Cryptography #ISMS #ISO27001 #ISO27002

٢١

#Kyureeus Certification Training: ISO & SOC2 Certified Course 1: Network Defense Elements Overview: This training program offers foundational knowledge and practical skills to effectively protect your organization's network from evolving threats. What You Will Learn:  Network Security Principles: Fundamental concepts including protocols and encryption.  Threat Protection: Use advanced tools and practices for threat identification and mitigation.  Risk Management: Strategies for assessing and managing network risks.  Practical Exercises: Real-world simulations for hands-on experience. Key Features:  Industry-Relevant Skills: Gain up-to-date, practical knowledge for real-world network defense.  Career Advancement: Boost your professional profile with industry-recognized certifications.  Flexible Learning: Choose from online, in-person, or hybrid learning options.  Hands-on Training: Engage in practical exercises that simulate real-world scenarios.  Foundational Knowledge: Build a solid base in key areas such as threat analysis and risk management.    #Kyureeus: Elevating your cybersecurity expertise through top-tier training and certification.    #cybersecuritytips #ITSecurity #OTSecurity #informationsecurity #CyberSec #networking #networksecurity #infosecurity #cyberattacks #security #cybersecurityawareness #WorkforceTraining #itsecurityawareness #itsecuritytraining

١٧

𝐏𝐮𝐛𝐥𝐢𝐜 𝐀𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬: 𝐄𝐧𝐜𝐫𝐲𝐩𝐭𝐢𝐨𝐧 𝐢𝐧 𝐀𝐈 𝐯𝐬. 𝐓𝐫𝐚𝐝𝐢𝐭𝐢𝐨𝐧𝐚𝐥 𝐃𝐚𝐭𝐚 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 “Encryption algorithms designed for deep neural networks and AI safeguard model weights and training data, ensuring privacy and robustness against adversarial attacks, while traditional data encryption primarily secures static information in transit or storage.” It should be one if the points that nedd to focused on while we are checking data theft and data poisoning in our AI applications. Stay informed and stay secure! #AI #Encryption #CyberSecurity #DataProtection

٣

Vulnerability Details : CVE-2024-38872 Zohocorp ManageEngine Exchange Reporter Plus versions 5717 and below are vulnerable to the authenticated SQL injection in the monitoring module. CVSS 8.3

١