Posted by: milos_rs
10-09-2024, 11:05 PM
Forum: Seminari, predavanja, radionice, konferencije
- No Replies
10-09-2024, 11:05 PM
Forum: Seminari, predavanja, radionice, konferencije
- No Replies
Quote:Četvrta po redu Cyber Security Summit konferencija okuplja stručnjake iz industrije, predstavnike vlade, vlasnike malih i srednjih preduzeća, studente i akademsku zajednicu kako bi zajedno istražili i raspravili najnovije trendove i izazove u svijetu cyber sigurnosti.
Kroz holistički pristup, koji uključuje teorijske i praktične perspektive, osiguravamo da svaki učesnik dobije sveobuhvatno znanje i vještine potrebne za suočavanje sa savremenim cyber prijetnjama.
sajt https://yes-css.ba/
agenda https://yes-css.ba/agenda/
Nisam uopšte poznat sa procesom izdavanja fiskalnih računa ali ovde očigledno nešto nije kako treba...
Na X-u je neko ko se ipak razume u celu stvar objavio fiskalni račun koji ima datum u budućnosti :
Što ne bi trebalo da je moguće. Račun je uredno prihvaćen i verifikovan od strane poreske :
Autor sa X-a takođe kaže:
Malo da pomognem oko akronima:
Quote:- ESIR je hardverski ili softverski element uz pomoć kog se kreira fiskalni račun.
- PFR je procesor koji fiskalizuje račun na osnovu podataka koje je dobio od ESIR – a
- Procesori fiskalnih računa dele na:- LPFR je softverski Lokalni Procesor Fiskalnih Računa koji omogućava izdavanje fiskalnih računa čak i u slučaju prekida internet veze i to je i glavna razlika između VPFR i LPFR-a, jer se VPFR koristi isključivo putem stalne konekcije, dok LPFR omogućava izdavanje fiskalnih računa čak i u slučaju prekida internet konekcije.
- VPFR - Virtualne procesore fiskalnih računa koji se nalaze u mreži Poreske uprave
- LPFR - Lokalne procesore fiskalnih računa LPFR, koji se nalaze na lokaciji izdavanja računa.
Moje neko laičko mišljenje:
ESIR tj. kasa u radnji je podnela pogrešan datum za fiskalni račun Poreskoj Upravi, koja je prihvatila taj datum kao verodostojan i izdala verifikovan fiskalni račun sa tim datumom u budućnosti. Ako je ovo to što se desilo, to znači da poreska uprava ne verifikuje podatke koji joj se šalju, ili barem za datum dozvoljava odstupanja što je možda čak i namerno jer svakako može postojati kasa koja nema u potpunosti usklađeno vreme sa Poreskom Upravom, ali nikako ne vidim kako to odstupanje može biti 7 dana.
Inače Delhaize izgleda ima svoj in-house softver za fiskalizaciju prema registru, nisam siguran baš šta znači ovo neprenosivo, valjda znači da je centralizovana softverska kasa a ne fizička.
Quote:“Neprenosivo” znači da su razvili softver za sebe i ne smeju da ga iznajmljuju drugima; tada su “slabije” kontrole tehničkog aspekta za dodeljivanje dozvole.
DDos napad se desio u subotu 05/10/2024
Quote:Russian Cyber Army claims to have targeted the website of Municipality of Hrpelje-Kozina.
ovo je iz linka koji su priložili:
a ovo je trenutna situacija, izgleda da su blokirali većinu zemalja i dozvoljavaju samo Hrvatsku i verovatno Sloveniju ali nema na ovom sajtu proba iz Slovenije
Preko google dorking sam našao na ovaj pastebin
Code:
site:pastebin.com intext:gov.mk
U Makedoniji je neko stavljao navodne parking naplate ispod brisača automobila, na njoj je QR kod koji vodi na naplatu parkinga koja je ustvari stranica koja traži lične podatke i platnu karticu radi krađe i/ili preprodaje istih. Domen sa kojeg je navodno hostovana ova prevara je freezonebelgrade .com. Saznao sam o ovome preko niza na X-u koji se bavio prevarom u Makedoniji (na makedonskom).
QR kod prevare vodi na tinyurl .com/PocParking koji još uvek redirektuje na freezonebelgrade .org/PayDpk.html ali te stranice više nema.
Code:
freezonebelgrade.org has address 185.119.89.240
freezonebelgrade.org mail is handled by 1 mail.freezonebelgrade.org.
freezonebelgrade.org mail is handled by 0 s5.unlimited.rs.Hosting je kod unlimited.rs
Do kompromitacije je najverovatnije došlo usled procurele šifre za hosting nalog.
Stranica je izgledala ovako:
inače čini mi se da je do juče freezonebelgrade.org jednostavno redirektovao na slobodnazona.rs ali sada izgleda ovako:
Izgleda da je još uvek kompromitovana a možda se i koristi za nešto, kontaktiraću provajdera da ih upozorim
Quote:The Tor Project and Tails OS are merging operations to better collaborate for a free internet by protecting users from surveillance and censorship.https://www.bleepingcomputer.com/news/so...-security/
The idea of the merger came late last year from Tails, due to the organization outgrowing the existing structure and to protect its workers from the added stress of expanding the framework.
"By joining forces, the Tails team can now focus on their core mission of maintaining and improving Tails OS, exploring more and complementary use cases while benefiting from the larger organizational structure of The Tor Project," the Tails team says.
Tor (The Onion Router) is a global non-profit project that develops online privacy tools, most notably the Tor Browser, which anonymizes internet activity to protect users against tracking and surveillance.
Tails (The Amnesic Incognito Live System) is a portable Linux-based (Debian) operating system that runs from removable storage media, and uses the Tor browser to route all data exchanges between the local system and the internet, thus providing a fundamental anonymization layer.
Quote:The Irish Data Protection Commission (DPC) has fined Meta €91 million ($101.56 million) as part of a probe into a security lapse in March 2019, when the company disclosed that it had mistakenly stored users' passwords in plaintext in its systems.https://www.bleepingcomputer.com/news/le...plaintext/
The investigation, launched by the DPC the next month, found that the social media giant violated four different articles under the European Union's General Data Protection Regulation (GDPR).
To that end, the DPC faulted Meta for failing to promptly notify the DPC of the data breach, document personal data breaches concerning the storage of user passwords in plaintext, and utilize proper technical measures to ensure the confidentiality of users' passwords.
Meta originally revealed that the privacy transgression led to the exposure of a subset of users' Facebook passwords in plaintext, although it noted that there was no evidence it was improperly accessed or abused internally.
Quote:Law enforcement authorities from 12 countries arrested four suspects linked to the LockBit ransomware gang, including a developer, a bulletproof hosting service administrator, and two people connected to LockBit activity.https://www.bleepingcomputer.com/news/se...ware-gang/
This joint action also led to seizures of LockBit infrastructure servers and involved police officers in Operation Cronos, a task force led by the U.K. National Crime Agency (NCA) behind a global LockBit crackdown and an investigation that began in April 2022.
According to Europol, a suspected LockBit ransomware developer was arrested in August 2024 at the request of French authorities while on holiday outside of Russia.
The same month, the U.K.'s National Crime Agency (NCA) arrested two more individuals linked to LockBit activity: one believed to be associated with a LockBit affiliate, while the second was apprehended on suspicion of money laundering.
In a separate action, at Madrid airport, Spain's Guardia Civil arrested the administrator of a bulletproof hosting service used to shield LockBit's infrastructure.
Today, Australia, the United Kingdom, and the United States also revealed sanctions against an individual the UK NCA believes is a prolific LockBit ransomware affiliate linked to Evil Corp.
The United Kingdom sanctioned 15 more Russian nationals involved in Evil Corp's criminal activities, while the United States sanctioned six individuals and Australia targeted two.
"These actions follow the massive disruption of LockBit infrastructure in February 2024, as well as the large series of sanctions and operational actions that took place against LockBit administrators in May and subsequent months," Europol said.