Skip to content
Home
About Us
Contact Us
Register to apply for a free CISO2CISO Membership
CISO2CISO Network
CISO2CISO Services
Sitemap
Submit News
Twitter
Linkedin-in
Youtube
Rss
CISO2CISO Notepad Series
SOC -CSIRT – Incidents & Attacks Notepad
Vendors & – MSSP Ecosystem
Cybersecurity Latest News
User Private Area
Login
Register – Create Account Member
Account
LATEST NEWS
05
/
03
:
8:01 pm
:
North Korean Hackers Spoofing Journalist Emails to Spy on Policy Experts – Source: www.infosecurity-magazine.com
05
/
03
:
8:01 pm
:
Indonesia is a Spyware Haven, Amnesty International Finds – Source: www.infosecurity-magazine.com
05
/
03
:
8:00 pm
:
LockBit published data stolen from Simone Veil hospital in Cannes – Source: securityaffairs.com
05
/
03
:
8:00 pm
:
Russia-linked APT28 and crooks are still using the Moobot botnet – Source: securityaffairs.com
05
/
03
:
8:00 pm
:
Dirty stream attack poses billions of Android installs at risk – Source: securityaffairs.com
05
/
03
:
8:00 pm
:
ZLoader Malware adds Zeus’s anti-analysis feature – Source: securityaffairs.com
05
/
03
:
6:01 pm
:
Top 5 Global Cyber Security Trends of 2023, According to Google Report – Source: www.techrepublic.com
05
/
03
:
6:01 pm
:
U.K., U.S. and Canadian Cyber Authorities Warn of Pro-Russia Hacktivist Attacks on Operational Technology Systems – Source: www.techrepublic.com
05
/
03
:
6:01 pm
:
How Are APAC Tech Salaries Faring in 2024? – Source: www.techrepublic.com
05
/
03
:
6:00 pm
:
It may take decade to shore up software supply chain security, says infosec CEO – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Indonesia sneakily buys spyware, claims Amnesty International – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Chinese government website security is often worryingly bad, say Chinese researchers – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Microsoft, Google do a victory lap around passkeys – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Google cools on cookie phase-out while regulators chew on plans – Source: go.theregister.com
05
/
03
:
6:00 pm
:
US charges Iranians with cyber snooping on government, companies – Source: go.theregister.com
05
/
03
:
6:00 pm
:
If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers? – Source: go.theregister.com
05
/
03
:
6:00 pm
:
Mandiant: Orgs are detecting cybercriminals faster than ever – Source: go.theregister.com
05
/
03
:
6:00 pm
:
UnitedHealth admits IT security breach could ‘cover substantial proportion of people in America’ – Source: go.theregister.com
05
/
03
:
4:01 pm
:
My TED Talks – Source: www.schneier.com
CISO STRATEGICS
CYBER ARCHITECTURE
SOC CSIRT OPERATIONS
CYBERSECURITY TOOLS
CYBERSECURITY VENDORS
CYBERSECURITY MSSP
CYBER ORGANIZATIONS
CYBER REGULATIONS
EVENTS & CONFERENCES
VULNs & ZERO DAYS
LATEST CYBER NEWS
The Register Security
It may take decade to shore up software supply chain security, says infosec CEO –...
The Register Security
Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters – Source: go.theregister.com
The Register Security
Indonesia sneakily buys spyware, claims Amnesty International – Source: go.theregister.com
The Register Security
Chinese government website security is often worryingly bad, say Chinese researchers – Source: go.theregister.com
The Register Security
Microsoft, Google do a victory lap around passkeys – Source: go.theregister.com
The Register Security
Google cools on cookie phase-out while regulators chew on plans – Source: go.theregister.com
The Register Security
US charges Iranians with cyber snooping on government, companies – Source: go.theregister.com
The Register Security
If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad...
The Register Security
Mandiant: Orgs are detecting cybercriminals faster than ever – Source: go.theregister.com
The Register Security
UnitedHealth admits IT security breach could ‘cover substantial proportion of people in America’ – Source:...
The Hacker News
Expert-Led Webinar – Uncovering Latest DDoS Tactics and Learn How to Fight Back – Source:thehackernews.com
The Hacker News
Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications – Source:thehackernews.com
CISO2CISO Editors' Picks
Microsoft
Microsoft Zero Trust Maturity Model
SCYTHE
Better Cybersecurity Metrics – SOC Metrics – Threat Hunting...
CSA Cloud Security Alliance
Security Implications of ChatGPT RC by Cloud Security Alliance...
Marcos Jaimovich
Why do we compare a SOC (Security Operations Center)...
LOGPOINT
396 Use Cases & Siem Rules Code ready for...
ACSC Australia
Personal Cyber Security First Steps by Australian Government –...
CISO2CISO Notepad Series
How Can We Structure Cybersecurity Teams To Better Integrate...
Chris Davis
Blue Team Cheat Sheets by Chris Davis
HADESS
DevSecOps Guides – Comprehensive resource for integrating security into...
Delinea
The Impact of Business Alignment on Cybersecurity Effectiveness –...
Microsoft
Microsoft 365 and the NIST Cybersecurity Framework
SentinelOne
90 DAYS A CISO´s Journey to Impact define your...
SCYTHE
Better Cybersecurity Metrics – SOC Metrics – Threat Hunting...
WILEY
Cybercrime Investigators Handbook by WILEY
CISO
STRATEGICS
CISO Strategics
CISO Learn & Leadership
Cybersecurity for C-Levels
Cybersecurity Trends & Insights
Cyberseurity Awareness
Cybercrimen Ecosystem
Cybersecurity Measure & Metrics
Cybersecurity Frameworks
Cybersecurity Policy & Standars
Fraud
Information Security
Osint - Humint
Privacy
Risk & Compliance
Resilience
Social Engineering
Supply Chain Security
CYBER
ARCHITECTURE
API Security
Application Security
Blockchain Security
Cloud Security
Data Security
Defense in Depth
DevSecOps
Endpoint Security
IA Security
IOT Security
MAC-OS Security
Metaverse Security
Micro segmentation
Mitre Att&ck
Mobile & 5G Security
Network Security
OT Security
OWASP Security
Perimeter Security
SAP Security
Telco & Carrier Security
Zero Trust Security
SOC CSIRT
OPERATIONS
Cyber Incidents & Attacks Notepad
CSIRT Operations
Data Leak & Breach Incidents Notepad
DDOS Attacks
DFIR - Forensics & Incident Response
Dark & Deep Web
SOC Operations
SIEM Use Cases & Playbooks
SOAR Authomation & Playbooks
Malware & Ransomware
Red - Blue & Purple Teams Operations
Threat Intelligence
Threat Hunting
Vulnerabilities
CYBERSECURITY
TOOLS
Anti DDOS
AWS Security
CASB
DLP
DNS Security
EDR - MDR - XDR
Firewalls
Google GCP Security
Hacking Tools
IAM - Identity
IPS
MFA-2FA
MS Azure Security
MS Office 365 Security
SIEM
SDWAN
SOAR
VPNs - Remote Access
WAF
CYBER
ORGs
CCN-EU
CSA
CIS
CISA
DHS-US
ENISA
ISACA
INCIBE-EU
Mitre Att&ack
NSA
NIST Security
SANS
WEF
CYBER
ATTACKS
Cyber Incidents & Attacks Notepad
Data Leak & Breach Incidents Notepad
Crypto theft , stealing & attacks
DDOS Attacks
Mallware & Ransomware
Phising Attacks
Social Engineering
Supply Chain Attacks
BEC
CYBER
CONFERENCES
RSA Conference
Defcon
Blackhat
Cybertech
C1b3rwall
Ekoparty - Hispam
Segurinfo - Hispam
CYBER
REGULATIONS
PCI - DSS
ISO 27001
SOX
Latest Published Posts
NIS COOPERATION GROUP
Cybersecurity and resiliency of Europe’s communications infrastructures and networks
SEQRITE
DarkRace Ransomware
IGNITE Technologies
The Art of Data Exfiltration
CYTAD
DATA PRIVACY
DevSecOps Guide
DEFENDING APIS
CCISO
Conversational Server Access Security
Project Management Institute
Building Resilience Through Strategic Risk Management
CSA Cloud Security Alliance
How to Design a Secure Serverless Architecture
Detecting Brute Force Attacks
National Security Agency
CSI Cloud Top10 Key Management
CSA Cloud Security Alliance
Defining the Zero TrustProtect Surface
HANIM EKEN
CONTAINER SECURITY INTERVIEW QUESTIONS ANSWERS
CNIL
PRACTICE GUIDE GDPR – SECURITY OF PERSONAL DATA Version...
PWNED LABS
Cloud Security Engineer Roadmap
tutorialspoint.com
Cloud Computing Tutorial Simply Easy Learning
SMITHA SRIHARSHA
CISSP Preparation Notes
CISSP Mind Map: All Domains
Lansweeper
CIS 18 CRITICAL SECURITY CONTROLS CHECKLIST
CYBERSECURITY
VENDORS
Akamai
A10 Networks
Blackberry Cylance
Cisco
Cyberark
Cloudfare
Crowdstrike
Checkpoint
F5 Networks
FyreEye
Fortinet
Guardicore
IBM
Kaspersky
Mcafee - Trellix
Mandiant
Maltego
Microsoft
Netscope
Palo Alto Networks
RSA Security
Redhat
Splunk
Symantec
Tenable
Trendmicro
CYBERSECURITY
MSSP
Accenture
Attos
AT&T Cybersecurity
BT Security
BASE 4 - Hispam
Deloitte
Entelgy Security
KPMG
NTT Security
Novared - Hispam
Neosecure - Hispam
Orange Cyberdefense
PwC
Telefonica Tech
Thales
Verizon Security
CISO2CISO Editors' Picks
Cybertalk.org
ChatGPT Security Risks -A Guide for Cyber Security Professionals...
Marcos Jaimovich
Why do we compare a SOC (Security Operations Center)...
Feedspot.com
146 Best Cyber Security Blogs and Websites by Feedspot.com
Microsoft
Microsoft Zero Trust Maturity Model
National Cyber Security
Cyber Security Toolkit for Boards – Helping board members...
Apress
Jump-start Your SOC Analyst Career – A Roadmap to...
Marcos Jaimovich
Presentación “ModoSOC in Real Life” por Marcos Jaimovich en...
IZZMIER
Incident Response Playbooks & Workflows Ready for use in...
MITRE
11 STRATEGIES OF A WORLD-CLASS CYBERSECURITY OPERATIONS CENTERS HIGHLIGHTS...
SANS
SANS Faculty Cybersecurity Free Tools – SANS Instructors have...
WILEY
Cybercrime Investigators Handbook by WILEY
Elevate Security
High Risk Users and Where to Fin Them by...
LATEST CYBER NEWS
The Hacker News
New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data...
The Hacker News
NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources – Source:thehackernews.com
The Hacker News
Google Announces Passkeys Adopted by Over 400 Million Accounts – Source:thehackernews.com
Data Breach Today
Critical Flaw in R Language Poses Supply Chain Risk – Source: www.databreachtoday.com
Data Breach Today
Correlating Cyber Investments With Business Outcomes – Source: www.databreachtoday.com
Data Breach Today
Rehab Hospital Chain Hack Affects 101,000; Facing 6 Lawsuits – Source: www.databreachtoday.com
Data Breach Today
Breach Roundup: REvil Hacker Gets Nearly 14-Year Sentence – Source: www.databreachtoday.com
Data Breach Today
Permira Takes Majority Stake in BioCatch at $1.3B Valuation – Source: www.databreachtoday.com
The Hacker News
Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks – Source:thehackernews.com
The Register Security
Florida man gets 6 years behind bars for flogging fake Cisco kit to US military...
The Register Security
Patch up – 4 critical bugs in ArubaOS lead to remote code execution – Source:...
The Register Security
Federal frenzy to patch gaping GitLab account takeover hole – Source: go.theregister.com
Latest Published Posts
SMITHA SRIHARSHA
CISSP Preparation Notes
South East Technological University
Cybersecurity for Industrial Networks
CISSP Mind Map: All Domains
Centre for Cyber Security Belgium
CYBER SECURITY INCIDENT MANAGEMENT GUIDE
Lansweeper
CIS 18 CRITICAL SECURITY CONTROLS CHECKLIST
Europol
CYBER-ATTACKS: THE APEX OF CRIME AS A SERVICE
INCIDENT RESPONSE METHODOLOGIES
Shared Responsibility Model
KROLL
Cyber Risk and CFOs: Over-Confidence is Costly
fn Cyber
Cyber Kill Chain – A Comprehensive Overview
CYBER SECURITY COOPERATIVE RESEARCH CENTRE
Governing Through a Cyber Crisis
CUJOAI
CYBERSECURITY REPORT
Semaphore
CI-CD with Docker and Kubernetes
The Cyber Security Forum Initiative
THE CYBER SECURITY FORUM INITIATIVE
EC-MSP
BUSINESS CONTINUITY PLAN & DISASTER RECOVERY PLAN TEMPLATE
CHAINUP
Constructing a Robust Architecture for Digital Asset Trading Platforms
PWC
Building a risk-resilient organisation
IGNITE Technologies
Credential Dumping Applications
Accenture
THE NEXT-GENERATION Building a Digital Central Bankfor a Digital Age
FIRST Improving Security Together
Computer Security Incident Response Team (CSIRT)Services Framework
Thecyphere
Microsoft EntraID (Azure)ConditionalAccess
COMPUTER AND INFORMATION SECURITY
aws
AWS Security Incident Response Guide
Government of South Australian
South Australian Cyber Security Framework
IGNITE Technologies
A DETAILED GUIDE ON DIRBUSTER
NAO -National Audit Office
Audit and Risk Assurance Committee Effectiveness Tool
PWNED LABS
CLOUD SECURITY ENGINEER ROADMAP
WWW. D E V S E COP S G U I D E S . CO M
Attacking Docker
W W W . D E V S E C O P S G U I D E S . C O M
Attacking AWS – Offensive Security Aproach
ENISA
Artificial Intelligence and Cybersecurity Research 2023
MuleSoft
API Security Best Practices – Protect your APIs with Anypoint Platform
Green Circle
All about Security Operations Center
DAZZ
A Guide to Building a Secure SDLC – Which Scanning Tools Should I look at,...
zimperium
2023 Mobile Banking Heists Report
40 under 40
40 under 40 in CyberSecurity 2024
HADESS
40 Days in DeepDark Web About Crypto Scam
Everbridge
8 Principles of Supply Chain Risk Management
CHAOSSEARCH
Threat Hunter’s Handbook – Using Log Analytics to Find and Neutralize Hidden Threats in Your...
ENDGAME
The Hunters Handbook Endgame’s Guide to Adversary Hunting
THE EU’S MOST THREATENING by EUROPOL
National Cyber Security Centre
Responding to a cyber incident – a guide for CEOs
IGNITE Technologies
CREDENTIAL DUMPING
HADESS
Pwning the Domain Lateral Movement
NIST
Implementing the Health Insurance Portability and Accountability Act(HIPAA) Security Rule
NIST SPECIAL PUBLICATION 1800-22
Data Confidentiality: Identifying and Protecting Assets Against Data Breaches
Jorgen Lanesskog
PING Basic IP Network Troubleshooting
NIST CSF 2.0
The NIST Cybersecurity Framework (CSF) 2.0
TELESOFT
Layer 7 Visibility What are the Benefits?
TIGERA
Introduction to Kubernetes Networking and Security
Department of Defense's (DoD)
Defense Industrial Base Cybersecurity Strategy 2024
IGNITE Technologies
Nmap for Pentester – PORT STATE
Dummies
Zero Trust Access for Dummies Fortinet
Homeland Security
Zero Trust Implementation Strategy
National Australia Bank Limited
Your Business and Cyber Security
CYFIRMA
Xeno RAT- A New Remote Access Trojan
IGNITE Technologies
Windows Persistence COM Hijacking MITRE T1546 015
IGNITE Technologies
Windows Exploitation Rundll32
IGNITE Technologies
Windows Exploitation Msbuild
HADESS
Web LLM Attacks
HADESS
Trended Protocols for Security Stuff
Red Iberoamericana de Protección de Datos
Transferencia Internacional de Datos Personales – Guia de Implementación
CYFIRMA
TRACKING RANSOMWARE January 2024
CDPSE
NIST CSF 2.0: What has changed?
ICS Security Engineer
Industrial Control Systems: Engineering Foundations and Cyber-Physical Attack Lifecycle
CISO2CISO Editors' Picks
ACSC Australia
Cyber Incident Response Plan Template by ACSC & Australian...
CYBER LEADERSHIP INTITUTE
CISO PLAYBOOK: FIRST 100 DAYS Setting the CISO up...
Microsoft
Microsoft Zero Trust Maturity Model
NCSC
NCSC Cyber Security for Small Business “SMEs” Guide.
CISO2CISO Notepad Series
The sqreen DevSecOps Security Checklist
MITRE
11 STRATEGIES OF A WORLD-CLASS CYBERSECURITY OPERATIONS CENTERS HIGHLIGHTS...
HADESS
DevSecOps Guides – Comprehensive resource for integrating security into...
Codrut Andrei
Cybersecurity Talent Crisis Today and Tomorrow by Codrut Andrei
IZZMIER
Incident Response Playbooks & Workflows Ready for use in...
CISO Forum
CISO’s – First 100 Days Roadmap – Your success...
RedHat
State of Kubernetes Security Report 2022 by RedHat
Feedspot.com
146 Best Cyber Security Blogs and Websites by Feedspot.com
Elevate Security
High Risk Users and Where to Fin Them by...
ACSC Australia
Personal Cyber Security First Steps by Australian Government –...
CYBER LEADERSHIP INTITUTE
CISO PLAYBOOK – Protecting The Crown Jewels by Cyber...
Marcos Jaimovich
Why do we compare a SOC (Security Operations Center)...
SentinelOne
90 DAYS A CISO´s Journey to Impact define your...
BUTTERWORTH-HEINEMANN
Security Operations Center Guidebook – A Practical Guide for...
INCIBE & SPAIN GOVERNMENT
DIRECTOR MASTER PLAN OF SECURITY BY INCIBE & SPAIN...
Practical DevSecOps
API Security Fundamentals – Your Handy Guide to Building...
IBM Security
How much does a data breach cost in 2022?...
Cybertalk.org
ChatGPT Security Risks -A Guide for Cyber Security Professionals...
FIRE EYE
The Cyber Risk Playbook – What boards of directors...
Harvard Business Review
Boards Are Having the Wrong Conversations About Cybersecurity –...
Nathalie Cole
How Much 10 Companies Paid Their Virtual CISO Service...
SALT
State of the CISO – a global report on...
Joas Antonio
100 Security Operation Tools for SOCs by Joas Antonio
National Cyber Security
Cyber Security Toolkit for Boards – Helping board members...
Joas Antonio
ChatGPT for Cybersecurity by Joas Antonio dos Santos –...
US Deparment of Defense
DevSecOps Fundamentals Guidebook – Tools & Activities by American...
OCCUPYTHEWEB
Linux Basics for Hackers by Occupytheweb
LOGPOINT
396 Use Cases & Siem Rules Code ready for...
CISO2CISO Notepad Series
How Can We Structure Cybersecurity Teams To Better Integrate...
Gartner
A CISOs Guide for Conversations with the CFO by...
Latest Published Posts
How SPF, DKIM, and DMARK work in your Email Flow
IBM
X-Force Threat Intelligence Index 2024
DRAGOS
How well do you know your OT assets?
Australian Goverment
Guide to securing personal information
protiviti
Guide to Enterprise Risk Management
National Cyber Security Centre
Guide to Cyber Security Measures
ANY RUN
Malware Analysis Guide
ACN
PAUTAS – FUNCIONES – CRIPTOGRÁFICO
CROWDSTRIKE
GLOBAL THREAT REPORT
Foresiet
Global Cybersecurity Trends
Incibe
Gestión de riesgos
VIEH GROUP
How to bypass Firewall
THOMSONREUTERS
FINTECH, REGTECH AND THE ROLE OF COMPLIANCE 2021
https://www.linkedin.com/in/harunseker/
TOP Cyber Attacks Detected by SIEM Solutions
TRAVARSA
Top 100 Cyber Threats and Solutions 2024
Top 50 Cybersecurity Threats
OWASP
Top 10 Considerations for Incident Response
EXECWEB
Tips for Cybersecurity Vendors to Connect with CISOs
WITH SECURE
Threat Landscape Report 2024
ThreatRadar
Threat Intel Roundup Phar SEO Poisoning ScreenConnect
ThreatRadar
Threat Intel Roundup Outlook, QNAP, Okta
ThreatRadar
Threat Intel Roundup Outlook SmartScreen Lockbit
ThreatRadar
Threat Intel Roundup FortiOS Super Bowl Chrome APT15
Microsoft
Network Security Groups
INFOSECTRAIN
Third Party Information Security Assessment Checklist
INFOSECTRAIN
THE ULTIMATE SOC – CAREER GUIDE FOR BEGINNERS
Waterfall Security Solutions LTD.
THE TOP 20 CYBERATTACKS on Industrial Control Systems
CSA Cloud Security Alliance
The State of SecurityRemediation 2024
THE LINUX FUNDATION
The Open Source Software Security Mobilization Plan by OpenSSF
HITRUST
The HITRUST Approach to NIST CSF 2.0
Gavin Phillips
The Deep and Dark Web Guide
The Computer and Information Security
Deloitte
The CISOs guide to Generative AI
Ahmed Medhat
Suspicious Traffic Detection and Analysis
INFOSECTRAIN
Third Party Information Security Assessment Checklist
INFOSECTRAIN
THE ULTIMATE SOC – CAREER GUIDE FOR BEGINNERS
Waterfall Security Solutions LTD.
THE TOP 20 CYBERATTACKS on Industrial Control Systems
CSA Cloud Security Alliance
The State of SecurityRemediation 2024
THE LINUX FUNDATION
The Open Source Software Security Mobilization Plan by OpenSSF
HITRUST
The HITRUST Approach to NIST CSF 2.0
Gavin Phillips
The Deep and Dark Web Guide
The Computer and Information Security
Deloitte
The CISOs guide to Generative AI
Ahmed Medhat
Suspicious Traffic Detection and Analysis
KPMG
Supply Chain Risk Management – A data driven approach to protecting your organization
Standford University
Rethinking Privacy in the AI Era Policy Provocations for a Data-Centric World
Orangeava
Ultimate SplunkforCybersecurity
Michael Tchuindjang
Splunk – SIEM Log Monitoring
Spam and Phishing Report for 2023
iExperts
SOC Audit Report Type1 Type2
Cybersecurity & Infrastructure Security Agency
Secure Cloud Business Applications
OAG
Security Basics for ProtectingCritical Infrastructure fromCyber Threats
InstaSafe
TIPS TOAVOID ROMANCE SCAMS
GISF
Securityto go: A Risk Management Toolkit for Humanitarianaid Agencies
COSO
R I S K A P P E T I T E –C R I...
ISACA
Reporting Cybersecurity Risk to the Board of Directors
Freddy Dezeure
Reporting Cyber Risk to Boards
Joas A Santos
Red Team Operations Concepts
Stellar
UNDERSTANDING CBDCS
National Cyber Security Centrum
Ransomware Incident Response Plan The incident response cycle, applied to ransomware
CCN
Gestión deincidentes de ransomware INFORME DE BUENAS PRÁCTICAS
CSO.IE
Public Sector Cyber Security Baseline Standards
Mark Settle
Privacy By Design:From Principles toRequirements
Netpoleon India
DemystifyingPublic KeyInfrastructure (PKI)& CertificateLifecycle Management
Users Most Viewed Posts
Interpol
GUIDELINES FOR DIGITAL FORENSICS FIRST RESPONDERS BY INTERPOL
Microsoft Security
Building a Holistic Insider Risk Management Program – 5 elements that help companies have stronger...
Canadian Centre for CyberSecurity
BASELINE CYBER SECURITY CONTROLS FOR SMALL AND MEDIUM ORGANIZATIONS V1.2 by Canadian Centre for CYBERSECURITY
Boma Canada
BOMA Canada 2022 Cyber Incidents Response Guide
Microsoft
Protecting critical Infrastructure against cyber threats – An analysis of relevant regulation, good practices, international...
Lockheed Martin
Applying Cyber Kill Chain® Methodology to Network Defense by Lockheed Martin
CardinalOps
The State of SIEM Detection Risk 2022 Report – Quantifying the gaps in MITRE ATT&CK...
CISA
Chemical Sector Cybersecurity – Framework Implementation Guidance by CISA
Splunk
The Transformational CISOs Guide to Security Orchestration, Automation and Response – How giving security teams...
THALES
2022 Thales Data Threat Report Critical Infrastructure Edition – Security threats to critical infrastructure.
rpi
THE IoT LANDSCAPE – The next decade of the Internet of Things by rpi –...
NSA and NISA
Control System Defense – Know the Opponent by NSA and NISA
Apress
Financial Cybersecurity Risk Management by Paul Rohmeyer & Jennifer Bayuk- Springer – APRESS
World Economic Forum
The Zero Trust Model in Cybersecurity – Towards undesstanding and deployment – Community Paper –...
infosecn1nja
Active Directory Kill Chain – Attack and defend active directory using modern post exploitation adversary...
CISA
CISA 5G Security Evaluation Process Investigation v1
Apress
Professional Red Teaming – Conducting Successful Cybersecurity Engagements by Jacob G Oakley – Apress
Kaspersky
Common TTPs of modern ransomware groups by Kaspersky Crimeware
ConversationalGeek Series
ConversationalGeek Series – Cyber Insurance by Joseph Brunsman – Delinea
BeyondTrust
2022 Microsoft Vulnerabilities Report by BeyondTrust (you must read).
OPEN RESEARCH SOCIETY
The Cyber Intelligence Analyst’s Cookbook by The OPEN RESEARCH SOCIETY
WILEY
Mitre Attack for Dummies
CISO2CISO Notepad Series
“CISO Mind Map”, an interesting approach to talk about cyber & CISOs responsibilities in our...
National Cyber Security Centre
Joint Ventures in the Construction Sector – Information Security Best Practice Guidance by National Cyber...
TOP Featured POSTS
Microsoft Security
Microsoft Implements Brute Force Attack Protection for All Windows Versions – As of October 11th,...
CAREER UP
7 Steps to your Cybersecurity Career – How to begin your career in Cibersecurity By...
CIS
CIS Critical Security Controls Version 8 – Mapping to PCI Data Security Standar (PCI DSS)...
infosecn1nja
Active Directory Kill Chain – Attack and defend active directory using modern post exploitation adversary...
stottandmay.com
The CISO Survival Guide – Practical advice for Security Leaders by stottandmay.com
offs.ec
PEN-200 and the OSCP prep book by offs.ec
Google Cybersecurity Action Team
Modern Data Security – A path to autonomic data security by Dr. Anton Chuvakin and...
Practical DevSecOps
You are probably doing DevSecOps Wrong by Practical DevSecOps – DevSecOps can seem like a...
rpi
THE IoT LANDSCAPE – The next decade of the Internet of Things by rpi –...
Alejandro Corletti - Darfe.es
Libro Ciberseguridad – Una estrategia Informatica-Militar by Alejandro Corletti Estrada – darfE.es
Aristeidis Michail
Security Operations Center – A Business Perspective by Aristeidis Michail
Joas Antonio
100 Security Operation Tools for SOCs by Joas Antonio
Codrut Andrei
Secure Software Development Lifecycle Fundamentals by Codrut Andrei
Interpol
GUIDELINES FOR DIGITAL FORENSICS FIRST RESPONDERS BY INTERPOL
MALTEGO
Maltego handbook for Incident Response
Marcos Jaimovich
Presentación “ModoSOC in Real Life” por Marcos Jaimovich en SEGURINFO Chile 2022.
Packt
Guia de Implementacion y Estrategia de Azure cuarta edicion by Packt
Think Big Blog
Top 10 TED Talks to Learn about Cyber Security
CYFIRMA
ADVANCED SOCIAL ENGINEERING ATTACKS DECONSTRUCTED BY CFYRMA
Joas Antonio
Windows Persistence Techniques by Joas Antonio
Unbound Security
The Cybersecurity Acronym Book
expel
MITRE ATT&CK in Google Cloud Platform (GCP) – A defender’s cheat sheet by expel
HADESS
GITHUB IN THE WILD – Some examples of offensive security used github by HADESS
MANDIANT
Remediation and Hardering Strategies for Microsoft 365 to Defend Against APT29 Group – Threat Intelligence...
CSBS.ORG
Cybersecurity 101 – A Resource Guide for BANK EXECUTIVES – Executive Leadership of Cybersecurity
TRIMARC
10 WAYS TO IMPROVE AD SECURITY QUICKLY – list of widely applicable “easy” wins for...
help net security
Compliance does not equal security !!
HADESS
TALE OF PHIHING – Some Phishing Techniques & Awareness by HADESS.IO
ALEX SIDORENKO & ELENA DEMIDENKO
GUIDE TO EFFECTIVE RISK MANAGEMENT 3.0 – ALEX SIDORENKO – ELENA DEMIDENKO
BUTTERWORTH-HEINEMANN
Security Operations Center Guidebook – A Practical Guide for a Successful SOC
Microsoft
Microsoft Zero Trust Maturity Model
SLOWMIST
Blockchain Security and AML Analysis Report 2022 Mid-Year by SLOWMIST
FORGEROCK
2022 Consumer Identity Breach Report by ForgeRock – Eve Maler.
Microsoft
Microsoft_Azure_Active_Directory_Data_Security_Considerations by Microsoft
O´REILLY
10 Steps Every CISO Should Take to Secure Next-Gen Software by Cindy Blake – O´REILLY...
Sittikorn Sangrattanapitak
Indicator of Attack (IoAs) and Activities – SOC-SIEM – A Detailed Explanation by GBHackers On...
Cobalt
The Estate of Pentesting 2022 by Cobalt
BCG Global Cybersecurity Forum
Turning a Cybersecurity Strategy Into Reality A Holistic Performance Management Framework by BCG & STC
WILEY
Cybercrime Investigators Handbook by WILEY
Chris Davis
Blue Team Cheat Sheets by Chris Davis