Quote:Video serijal u kojem ćeš se upoznati sa najčešćim bezbednosnim pretnjama na internetu i načinima na koje možeš da se od njih zaštitiš.
- Socijalni inženjering i ozloglašeni phishing
- Sajber higijеna i sajber kultura
- Domain hijacking – gde greše firme?
- Ransomware – zašto je toliko opasan i kako se štititi
- Sajber bezbednost karijera sadašnjosti i budućnosti
Detalji na linku: https://zastitise.rs/
Preporuka za svakoga ko ima posla sa nepreglednim jsonima svakodnevno:
https://jsoncrack.com/
Imaju online verziju i VSCode extenziju.
Domen azk.gov.rs je kompromitovan. U izvornom kodu se mogu naći reklame za razne teme (kazino, sex), a i klikovi po stranici redirektuju na maliciozne spoljašnje veze.
...
ЕОК" target="_blank">Извештај о повезивању Националног оквира квалификација Републике Србије (НОКС) са Европским оквиром квалификација (ЕОК)</a></div></div></div></div></div><div class="vc_row-full-width vc_clearfix"></div><div class="vc_row wpb_row vc_row-fluid vc_custom_1603569138176 vc_row-o-full-height vc_row-o-columns-middle vc_row-flex"><div class="wpb_column vc_column_container vc_col-sm-12"><div class="vc_column-inner"><div class="wpb_wrapper">
<div class="wpb_text_column wpb_content_element " >
<div class="wpb_wrapper">
<p style="overflow: hidden; height: 1px; margin: 0;">If you are the one who likes a spooky atmosphere, then you have to read our top of scary games in the gambling industry. Play something you really like as <a href="https://casinowis.com/buffalo-power-hold-and-win-slot">https://casinowis.com/buffalo-power-hold-and-win-slot</a> and stay in tune with the latest news!</p>
<p style="overflow: hidden; height: 1px; margin: 0;">This online slot game is inspired by the classic horror film of the same name from the 1970s, which starred Michael Myers as the iconic figure. Find scatter symbols to get access to the Trick or Treat Wheel, which has some substantial payouts here <a href="https://joocasinoau.com/bonuses">https://joocasinoau.com/bonuses</a>. The Boogeyman Bonus game is very entertaining since it allows you to look for cash rewards.</p>
</div>
</div>
<div class="vc_row wpb_row vc_inner vc_row-fluid"><div class="wpb_column vc_column_container vc_col-sm-4"><div class="vc_column-inner vc_custom_1603569245778"><div class="wpb_wrapper"><section class="vc_cta3-container"><div class="vc_general vc_cta3 vc_cta3-style-classic vc_cta3-shape-rounded vc_cta3-align-left vc_cta3-color-blue vc_cta3-icon-size-md vc_custom_1639062502285"><div class="vc_cta3_content-container"><div class="vc_cta3-content"><header class="vc_cta3-content-header"><h2>РКиПСВ центар</h2></header><p><a href="http://azk.gov.rs/?page_id=75117">Центар за развој квалификација и подршку секторским већима НОКС-а.</a></p>
...<div class="row middle">
<div class="col-lg-11">
<aside id="text-28" class="widget header-right widget_text"> <div class="textwidget"><div style="display: none;">
saneleon hot sax vedio <a href="https://its-ross-wp1.ur.rochester.edu/rsrb/Rooms/RoomComponents/LoginView/GetSessionAndBack?_webrVerifySession=637584002324910712&redirectback=//www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> sexgals<br />
zorla sikiş <a href="http://aquaculture.seagrant.uaf.edu/click-thru.html?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> tu egalore com<br />
cake farts porn hub <a href="http://fishbiz.seagrant.uaf.edu/click-thru.html?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> kizumonogatari hentai<br />
planetsuzy ava addams <a href="http://cat.sustech.edu/cgi-bin/koha/tracklinks.pl?uri=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> pukejob<br />
abbywintersfree <a href="http://library.sust.edu/cgi-bin/koha/tracklinks.pl?biblionumber=3967&uri=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> hwporner<br />
hrntaihaven <a href="http://openlink.ca.skku.edu/link.n2s?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> okusama ga seitokaichou! hentai<br />
jinx blowjob <a href="https://research.ece.cmu.edu/protoflex/lib/exe/fetch.php?media=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> lindsey woods anal<br />
gifwithsauce <a href="http://web.stanford.edu/cgi-bin/redirect?dest=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> trash nurses 4<br />
anonib alternative <a href="https://www.ece.cmu.edu/~protoflex/lib/exe/fetch.php?media=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> fnaf bonnie porn<br />
fuckyeahhotcouple <a href="https://ecap.hss.edu/eCap/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/&_webrVerifySession=637551295835868790" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> mnfclub updates<br />
barbara borges nude <a href="https://e-irb.jhmi.edu/eirb2/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/&_webrVerifySession=637804005339104182" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> jazmine miner nude<br />
dirtyakira porn <a href="https://login.aup.edu/cas/login?gateway=true&service=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> shemale cum while fucked<br />
erome joi <a href="https://m2.capella.edu/mobile-feed/auth/redirect.feed?token=sOnnlFdVN8eBpDXSDHxrqe-sdmY.*AAJTSQACMDIAAlNLABxlR0JyRi9uSmI0Qzhpb0NKMXlqTWZrKzl5Zk09AAJTMQACMDE.*&url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> czech hunter 271<br />
britney amber boobpedia <a href="https://rrp.rush.edu/researchportal/sd/Rooms/RoomComponents/LoginView/GetSessionAndBack?redirectBack=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> tsunade cosplay porn<br />
kaity sun fuck <a href="https://sunysullivan.edu/urlRedir.php?redir=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> cnnamador<br />
trike patrol celine <a href="https://ur.umich.edu/adfix2.php?id=205&url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> teenshoplyfter<br />
tiffany thompson pov <a href="http://games.lynms.edu.hk/jump.php?url=https://www.indiansexmovies.mobi/" rel="dofollow noopener" target="_self" title="Indian Sex">Indian Sex</a> rachellromeo
</div>
</div>
</aside><aside id="text-3" class="widget header-right widget_text"> <div class="textwidget"><div class="row extra-info center header07-end">
<div class="col-md-1">
</div>VirusTotal: https://www.virustotal.com/gui/url/097fc.../detection
Arhivirano: https://archive.ph/6se7t
Maliciozni kod je verovatno u nekom od .js fajlova, pogledaću detaljno čim nađem malo vremena.
Jel neko od clanova radio CTF takmicenja ?
edt:
https://www.enisa.europa.eu/news/enisa-n...ed-to-know
Jednom prilikom je bio phishing sa mup.gov.rs adrese i nekim cudom sam posmatrao gov.rs kao tld a ne domen (nisam nikada proveravao).
Kad ono medjutim, gov.rs je domen registrovan 10.3.2008 i po history-u nikada nije imao DMARC record DNS zapisu cime je moguce spoofovati SVE adrese sa liste:
Alarmantno!
mozete i sami proveriti: https://www.smartfense.com/en-us/tools/spoofcheck/
![[Image: image.png]](https://i.postimg.cc/Kj8g3gpL/image.png)
Ukoliko tragate za besplatnim alatima otvorenog koda za security, postoji sajt https://securityonline.info/ na kome mozete pored vesti pronaci mnostvo korisnih alata.
To je odlicna pocetna tacka ako ste novi u security-ju i ne znate jos sta sve postoji i cime bi ste se konkretno bavili, pa mozete lako isprobati neke alate i odluciti sta vam je korisno i sta vam se svidja.
Ja koristim ovaj sajt da sa vremena na vreme vidim koji novi alati i za koje napade/odbrane/analize su izasli i ako me opis 'kupi' probam i onda uvrstim u svoj arsenal.
Nadam se da ce i drugima ovaj sajt pomoci ako sto je i meni. 
Svako ima neke svoje sajtove koje prati za vesti u vezi najnovijih sajber vesti.
Bio vam to posao ili ne korisno je cesto informisati se o najnovijim vrstama napada, otkrivenim propustima i hakovanim firmama kako bi znali da li ste i vi ugrozeni, vasi podaci (na vasim uredjajima ili u posedstvu servisa koji koristite) ili softver i hardver koji koristite.
Evo liste sajtova koje ja pratim i sa kojih se informisem za najnovije vesti ali i detaljnije analize virusa i propusta kao i hakerskih taktika.
https://blog.morphisec.com/ (RSS omogucen)
https://unit42.paloaltonetworks.com/
https://www.zscaler.com/blogs
https://www.cynet.com/blog/
https://securelist.com/ (RSS omogucen)
https://www.varonis.com/blog (RSS omogucen)
https://blog.checkpoint.com/
https://www.f5.com/labs
https://www.hornetsecurity.com/en/knowledge-base (RSS omogucen)
https://www.inversecos.com/ (RSS omogucen)
https://www.csoonline.com/category/security/
https://www.kaspersky.com/blog/ (RSS omogucen)
https://www.malwarebytes.com/blog
https://nakedsecurity.sophos.com/ (RSS omogucen)
https://threatpost.com/ (RSS omogucen)
https://www.bleepingcomputer.com/ (RSS omogucen)
https://thehackernews.com/
https://www.darkreading.com/
https://blog.reversinglabs.com/blog (RSS omogucen)
https://www.theregister.com/security/ (RSS omogucen)
https://blog.virustotal.com/ (RSS omogucen)
https://securityaffairs.co (RSS omogucen)
https://www.helpnetsecurity.com/ (RSS omogucen)
https://www.securityweek.com (RSS omogucen - https://feeds.feedburner.com/securityweek)
https://socradar.io/blog/ (RSS omogucen)
https://security.snyk.io/vuln/
https://blog.qualys.com/ (RSS omogucen)
https://www.bitdefender.com/blog/labs/
https://www.elastic.co/security-labs/
https://doublepulsar.com/ (RSS omogucen)
https://heimdalsecurity.com/blog/ (RSS omogucen)
https://duo.com/decipher/ (RSS omogucen)
https://decoded.avast.io/
https://portswigger.net/daily-swig
https://www.securecoding.com/blog/ (RSS omogucen)
10-07-2022, 02:30 PM
Forum: Seminari, predavanja, radionice, konferencije
- Replies (1)
Quote:Centar za nestalu i zlostavljanu decu i Američka ambasada organizovaće 13. oktobra šestu stručnu konferenciju o bezbednosti dece „Bezbednost i odgovornost“ u hotelu Metropol, u Beogradu.
Veliko nam je zadovoljstvo i čast, ponosni smo i zadovoljni što smo i ove godine uspeli da okupimo eminentne stručnjake u različitim oblastima zaštite bezbednosti dece iz zemlje i sveta, i što ćemo zajedno napraviti još jedan važan korak ka bezbednijem i sigurnijem okruženju za našu decu.
Predavači:
- Zoe Colpaert, ICMEC (Međunarodni centar za nestalu i zlostavljanu decu)
- Ph.D. Deanee’ Johnson, Zero Abuse Project, SAD
- Boris Herman, Centar za socijalne inovacije i integracije
- Saša Risojević, Dnevni Centar za Djecu u riziku Udruženja „Nova generacija“, Banja Luka, Republika Srpska
- Dr sci med Sarah Zorica Mitić, telesno orijentisani trauma terapeut
- Prof.dr Gordana Buljan Flander, klinički psiholog, UNICEF, Hrvatska
- Martina Nikolić, Centar za nestalu i zlostavljanu djecu, Hrvatska
- Jeff Ross, FBI Child Exploitation Task Force
- Olivije Zimonja, MUP Republike Srpske, Odeljenje za borbu protiv visokotehnološkog kriminala
- John Peirce, USA Child Abduction Response Team
- Olgica Čekić, Centar za nestalu i zlostavljanu decu
- Ružica Radović, Centar za nestalu i zlostavljanu decu, Srbija
- Igor Jurić, Predsednik Centra za nestalu i zlostavljanu decu
- Nikola Todorović, inženjer, rukovodilac Safe search projekta, Google
Više informacija na linku: https://cnzd.rs/predstavljamo-govornike-...govornost/
Jedan od prijedloga je isao u ovom pravcu: DS200 https://www.essvote.com/products/ds200/
Drugi pisu o tome:
https://www.nbcnews.com/politics/electio...g-n1112436
https://d3n8a8pro7vhmx.cloudfront.net/re...1481829147
https://qz.com/1783766/these-voting-mach...tion-2020/
Odlican spisak ranjivosti: https://verifiedvoting.org/wp-content/up...A-2016.pdf
Odlican spisak ranjivosti: https://votingsystems.cdn.sos.ca.gov/vendors/ess/evs5210/ess5210-sec.pdf
Trebalo bi ovo uzeti u razmatranje. Koristeni su 2016 god prilikom izbora u USA i to 25.000 komada.
Na drugom linku ima opis tehnickih detalja i ranjivosti.
Ovaj post ce biti dopunjen u narednih 24h.
Izvor: https://qutech.nl/2022/10/03/untappable-...echnology/. Termin za istraživanje tehnologije: "The superconducting nanowire single-photon detector (SNSPD or SSPD)".
Glavna razlika u odnosu na dosadašnje sisteme PKI i monitoring je:
Quote:A solution to eavesdropping—now and in the future—is the use of quantum key distribution (QKD). In quantum communication, eavesdropping on a message disturbs transmission of the quantum key. Slater: “If the quantum signals are disturbed, the users know not to use the generated key for their secure communication line. Once the quantum key is successfully shared with the intended recipient, the rest of the secure communication benefits from ‘forward secrecy’: the assurance that the key distribution cannot be cracked now or in the future.”