#ict Archives - Alireza Gharib Blog

January 9, 2025

Autonomous SOC Is a Journey, Not a Destination | Introducing The Autonomous SOC Maturity Model

Learn about autonomous SOC and how SentinelOne uses a maturity model to frame the shifts it will bring to day-to-day security operations. The autonomous SOC: A well-grounded vision for the future of machine speed, AI-driven cyber defense, or nothing more than a pipe dream? Few concepts in modern security have been as polarizing, with sides…

#attack, #ict, #innovation, #investigation, #secure
January 9, 2025

S Ventures Invests in poolside, Next Generation AI for Software Engineering

S Ventures invests in poolside, one of the most watched and highest valued startups in generative AI for software engineering today. In October 2024, SentinelOne’s venture arm, S Ventures, made a strategic investment in poolside as part of the AI assistive coding startup’s $500 million Series B round. It was one of S Ventures notable…

#bug, #ict, #innovation, #programming, #tech
January 9, 2025

Securing AWS Lambda | How Misconfigurations Can Lead to Lateral Movement

Learn how several misconfigurations and user-defined code issues in AWS Lambda could lead to potential credential theft and lateral movement. As serverless computing continues to revolutionize the cloud landscape, AWS Lambda has emerged as a pivotal service, offering a Function-as-a-Service (FaaS) model that allows developers to focus solely on code while AWS manages the underlying…

#attack, #author, #ict, #malicious, #secure
January 9, 2025

LABScon24 Replay | The Ransomware Trust Paradox

Max Smeets explores how ransomware groups leverage public reporting and why we must disrupt the trust dynamic between threat actors and victims. In his Keynote talk at LABScon 24, Max Smeets explores how ransomware operators build a unique relationship between themselves and their victims. In contrast to most other threat actors, ransomware operators rely on…

#attack, #author, #ict, #military, #national-security
January 9, 2025

LABScon24 Replay | Let Them Eat Cake: “Secure by Upgrade” Software is a National Security Threat

Kymberlee Price reveals the technical chaos facing SMBs as they struggle with solutions aimed at bigger fish in the face of expanding crimeware. Ransomware is doing more to change the security landscape than the last 20 years of Secure Development Lifecycle, DevSecOps, Zero Days, Breaches, or any corporate memo. Pair this with predatory pricing models…

#author, #bug, #ict, #investigation, #tech
January 9, 2025

Cloud Malware | A Threat Hunter’s Guide to Analysis, Techniques and Delivery

Learn about cloud threats, how to hunt for them and how to analyze them in this post based on Alex Delamotte’s recent LABScon workshop. As many researchers have noticed, malware in the cloud is different. Perhaps more strikingly different than Windows versus Linux threats, cloud services are targeted through entirely different methods altogether. At LABScon…

#attack, #ict, #investigation, #programming, #tech
January 9, 2025

DPRK IT Workers | A Network of Active Front Companies and Their Links to China

SentinelLabs has identified multiple deceptive websites linked to businesses in China fronting for North Korea’s fake IT workers scheme. Executive Summary SentinelLabs has identified unique characteristics of multiple websites, now seized by the US Government, associated with the DPRK IT Worker front companies. We assess with high confidence that DPRK actors seek to impersonate US…

#data-protection, #health, #ict, #investigation, #tech
January 9, 2025

China’s Influence Ops | Twisting Tales of Volt Typhoon at Home and Abroad

China’s CVERC attempts to attribute Volt Typhoon activities to the U.S., but the fact-free claims reveal much about the PRC’s real agenda. Executive Summary The latest CVERC report reflects China’s ongoing efforts to undermine support for U.S. surveillance activities by attempting to fuel debate over Section 702. The CVERC report also draws Microsoft into its…

#author, #hack, #ict, #japanese, #tech
January 9, 2025

Protecting Web-Based Work

This blog was originally published on Security Boulevard. Connecting People, Web Browsers and Security The web browser has transformed significantly in recent years, becoming one of the most used tools for work today. However, as organizations adopt hybrid work models and cloud-based operations, securing this work tool has proved a challenge. Security infrastructures haven’t evolved…

#attack, #author, #browser, #cyberattack, #ict
January 9, 2025

Dealing with internet addiction

Guten Morgen. Wish I could know who drew the cover image. It’s very well done. Would suggest you to check out their work, but sadly not even I know. Moving on, I wanted to write about what I’m going through. This is by no means an exhaustive research made alongside a mental health professional, and…

#health, #ict, #internet, #un

Tag: #ict