1.重大弱點漏洞/後門/Exploit/Zero Day
Zimbra Collaboration Suite 信息洩露漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15131
ZyXEL P-660HN-T1 V2 Missing Authentication / Password Disclosure
https://packetstormsecurity.com/files/153144/zyxelp660hn-bypass.txt
Fortinet產品存在多個漏洞
https://www.nccst.nat.gov.tw/VulnerabilityNewsDetail?lang=zh&seq=1440
phpMyAdmin 多個漏洞
https://www.auscert.org.au/bulletins/ESB-2019.2016/
New RCE vulnerability impacts nearly half of the internet's email servers
https://www.zdnet.com/article/new-rce-vulnerability-impacts-nearly-half-of-the-internets-email-servers/#ftag=RSSbaffb68
Huawei P30和Huawei P30 Pro 安全漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5307
京晨科技(NUUO Inc.)網路監控錄影系統(Network Video Recorder, NVR)存在安全漏洞(CVE-2019-9653)
http://net.nthu.edu.tw/2009/mailing:announcement:20190606_01
Apache Jenkins Exploited to Mine Monero Cryptocurrency
https://medium.com/pwnpizza/apache-jenkins-exploited-to-mine-monero-cryptocurrency-dc9a7281c663
Google研究人員發現微軟記事本漏洞
https://www.ithome.com.tw/news/131044
文本編輯器Vim/Neovim被曝任意代碼執行漏洞，含POC
http://bit.ly/2JZrMft
校園數位學習平台 WMP 智慧大師含有 Command Injection 漏洞
https://cert.tanet.edu.tw/prog/shownews.php?sel=1&id=3003
HTC VIVEPORT 安全漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12176
Oracle MySQL Server組件未授權操作漏洞
https://www.cnvd.org.cn/flaw/show/CNVD-2019-07347
Cisco IOS軟件認證繞過漏洞（CVE-2019-1758）
https://www.linuxidc.com/Linux/2019-06/158980.htm
思科產品多個漏洞
https://tools.cisco.com/security/center/publicationListing.x
Micro Focus Service Manager 安全漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11646
IBM PureApplication System 安全漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-4235
FreeBSD bro 安全漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12175
Liferay Portal 7.1 CE GA4跨站脚本漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6588
Laravel 5.8 SQL 注入漏洞詳解
https://xz.aliyun.com/t/5331
macOS 0-Day Flaw Lets Hackers Bypass Security Features With Synthetic Clicks
http://bit.ly/2IwAvTt
macOS零日漏洞曝光，允許黑客繞過系統安全功能執行惡意代碼
https://zhuanlan.zhihu.com/p/68010379
前NSA研究員發現Mac漏洞安全提示可被“合成點擊”繞過
https://www.aqniu.com/news-views/49503.html
Nvidia修補GeForce Experience漏洞
https://www.ithome.com.tw/news/131059
pfSense 2.4.4-p3 (ACME Package 0.59_14) - Persistent Cross-Site Scripting
https://www.exploit-db.com/exploits/46936
Oracle Application Testing Suite - WebLogic Server Administration Console War Deployment (Metasploit)
https://www.exploit-db.com/exploits/46942
HP Service Manager SQL注入漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6494
Docker暴安全漏洞主機文件有被獲取讀寫權限的風險
http://www.dalbll.com/Group/Topic/IT/8324
戴爾電腦預裝軟件嚴重漏洞使用戶易受局域網劫持
http://www.sohu.com/a/318306744_621613?sec=wd
Android 多個漏洞
https://www.hkcert.org/my_url/zh/alert/19060401
Apache Hadoop遠程權限提升漏洞（CVE-2018-8029）
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8029
Oracle MySQL Server拒絕服務漏洞
https://www.oracle.com/technetwork/security-advisory/cpuapr2019verbose-5072824.html
OneLogin ruby-saml身份驗證繞過漏洞
https://github.com/onelogin/ruby-saml
Linux Kernel 'marvell/mwifiex/scan.c'堆溢出漏洞（CVE-2019-3846）
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3846
Red Hat JBoss 多個漏洞
https://www.auscert.org.au/bulletins/ESB-2019.1949/
Lenovo Bootable Generator代碼問題漏洞
https://support.lenovo.com/us/en/product_security/LEN-25401
Artifex MuJS棧緩衝區溢出漏洞
https://github.com/ccxvii/mujs/commit/da632ca08f240590d2dec786722ed08486ce1be6
0patch出面修補了Windows工作排程器漏洞
https://www.ithome.com.tw/news/131109
微軟公告目前仍有超過 100 萬 Windows 裝置存在嚴重漏洞
http://bit.ly/2Wq45Ul
微軟警告XP、Win7用戶 逾100萬裝置有惡意攻擊風險
http://www.limedia.tw/tech/4441/
微軟視窗遠端桌面服務網路級身分驗證繞過保安限制漏洞
https://www.hkcert.org/my_url/zh/alert/19060502
為了緩解舊版win10中的這些漏洞，Microsoft今天發布了以下新更新
http://www.ylmfwin100.com/ylmf/14582.html
Windows 10 RDP漏洞可讓駭客綁架連線
https://www.ithome.com.tw/news/131133?fbclid=IwAR0_Ec9EowlWa6_985hy1YKi1cFrvVo6vMlsRZk2j4T2nNC0Fl0pU6gHTNg
Microsoft Word信息泄露漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0561
Microsoft Edge和ChakraCore緩衝區溢出漏洞
https://portal.msrc.microsoft.com/zh-CN/security-guidance/advisory/CVE-2019-0914
Microsoft Windows內核信息洩露漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0536
Windows 10 RDP漏洞可讓駭客綁架連線
https://www.ithome.com.tw/news/131133
Microsoft issues second warning about patching BlueKeep as PoC code goes public
https://zd.net/2KBic1R
Microsoft Sounds Second Alarm Over BlueKeep Vulnerability
https://www.bankinfosecurity.com/microsoft-sounds-second-alarm-over-bluekeep-vulnerability-a-12541
CVE-2019-0703 | Windows SMB Information Disclosure Vulnerability
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2019-0703
Unpatched Bug Let Attackers Bypass Windows Lock Screen On RDP Sessions
http://bit.ly/2QUDetH
Even the NSA is urging Windows users to patch BlueKeep (CVE-2019-0708)
https://www.zdnet.com/article/even-the-nsa-is-urging-windows-users-to-patch-bluekeep-cve-2019-0708/#ftag=RSSbaffb68
Critical Vulnerability Found In Convert Plus WordPress Plugin
http://bit.ly/318PgUY
網站安全狗(IIS版)存在Webshell繞過漏洞
https://www.cnvd.org.cn/flaw/show/CNVD-2018-02515
結構全版本漏洞利用總結
http://www.heibai.org/post/1352.html
Cyrus IMAP 安全漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11356
2.銀行/金融/保險/證券/支付系統/ 新聞及資安
純網銀LINE Bank將推出？「資安」是關鍵核心
http://www.limedia.tw/tech/4076/
LINE信用評等機制將來台 憑分數可享金融服務
https://www.cna.com.tw/news/afe/201905300255.aspx
LINE Bank網銀有三大優勢 強化反洗錢、金融犯罪防制
https://www.wantgoo.com/news/content/index?ID=981419
Hit FinTech高峰會 6/12台北登場
https://money.udn.com/money/story/11799/3841802
Fin Tech 資安機制要跟上腳步
https://money.udn.com/money/story/12952/3857897
行政院發函！籲請金管會督導南山 6月底前改好資訊系統
https://ec.ltn.com.tw/article/breakingnews/2808601
金融創新 57％高階保守看
https://www.chinatimes.com/newspapers/20190604000240-260202?chdtv
另類外交！偵破一銀盜領案全球首例 英公司來台拍紀錄片
https://m.ltn.com.tw/news/society/breakingnews/2812372
用LINE群組炒股要通報 金管會增訂南山條款
https://money.udn.com/money/story/5613/3853879
效益不如預期 八大行庫指定分行延長營業時間7月起將陸續取消
https://fnc.ebc.net.tw/FncNews/stock/82467
只有FinTech還不夠，王道銀行贏在金融科技背後的強大「支援」
https://www.thenewslens.com/article/120129
銀行防制洗錢及打擊資恐注意事項範本更新
https://www.aml-ba.org.tw/news-view.php?ID=11
金融科技夯 景氣循環防禦首選
http://bit.ly/2WQbJqe
金融新兵拚規模vs.大型銀行秀創新 兩大勢力誰先達陣
https://money.udn.com/money/story/5613/3855250
經理人LINE談論股票 保險業須通報金管會
https://money.udn.com/money/story/5613/3855631
比爾蓋茲也這樣做 監理科技助升金融業
http://bit.ly/2K08t5I
南山人壽「2019精算大數據研討會」發表三大研究成果
http://bit.ly/2K08Ih8
電子載具方便卻難普及 網揭暗黑原因
https://www.chinatimes.com/hottopic/20190605003365-260804?chdtv
Everything you need to know about ATM attacks and fraud: Part 1
https://blog.malwarebytes.com/101/2019/05/everything-you-need-to-know-about-atm-attacks-and-fraud-part-1/
Hollywood lie: Bank hacks take months, not seconds
https://www.zdnet.com/article/hollywood-lie-bank-hacks-take-months-not-seconds/#ftag=RSSbaffb68
PCI Compliance and Network Segmentation
http://bit.ly/2wAD7Kg
3.電子支付/電子票證/行動支付/ pay/新聞及資安
App綁支付…手機變百貨
https://money.udn.com/money/story/10868/3846112
Fitbit用戶現可於全球七大交通運輸系統使用Fitbit Pay
https://news.sina.com.tw/article/20190602/31498824.html
電子支付補貼燒太兇 上半年已3家申請增資
http://n.yam.com/Article/20190530887599
智冠加碼威肯持股 強攻第三方支付
https://ec.ltn.com.tw/article/paper/1292630
歐盟新資安規定9月上路 將衝擊線上支付業者
https://money.udn.com/money/story/5602/3853464
電子支付用戶破500萬 收付轉帳街口都奪冠
http://bit.ly/2ET9ybo
【洗黑錢】浙支付平台幫賭網結算：300部手機同時收款 涉案額7億
http://bit.ly/2WuMR8s
網購最多人愛上PChome LINE Pay卡使用率最高
http://bit.ly/2ZaM3Ca
LINE Pay電子錢包功能+1 攜手Visa整合數位支付卡
https://www.ettoday.net/news/20190606/1461430.htm
所有Visa卡都可綁進LINE Pay 強強聯手攻四大金融科技商機
https://news.cnyes.com/news/id/4332353
台灣Pay信用卡繳稅 近22萬筆
http://bit.ly/2Io53GH
4.虛擬貨幣/區塊鍊 新聞及資安
臉書與CFTC討論數位幣計畫
https://www.chinatimes.com/realtimenews/20190603001086-260410?chdtv
全台15所大學起義 共創區塊鏈大學聯盟
http://bit.ly/2wwM0ED
ETH合約溢出漏洞逆向技巧
https://www.heibai.org/post/1330.html
Cosmos安全漏洞解析：21天鎖倉資金可提前贖回
https://xcong.com/articles/3538414
Hashgard：Cosmos SDK 漏洞的觸發條件為驗證人節點宕機
https://www.chainnews.com/articles/215765303543.htm
你該知道區塊鏈改變世界的五大方式
http://news.knowing.asia/news/3f4039b0-fdb9-40f7-b0ec-36af6b7a03ac
北韓駭客攻擊南韓主要交易所 UpBit，利用「釣魚郵件」竊取用戶帳戶密碼和私鑰
https://www.blocktempo.com/north-hacker-attacked-south-koreas-upbit-crypto-exchange/
善用區塊鏈 跨境支付更方便
http://bit.ly/2Kmghhu
數寶分析 穩定幣再加密貨幣市場中的價值
https://money.udn.com/money/story/5636/3847102
區塊鏈基本知識
http://bit.ly/2QBom2Q
促進區塊鏈採用 安永公開其以太坊隱私交易解決方案開源碼
https://news.cnyes.com/news/id/4330228
Coinbase公佈BCH硬分叉漏洞引起雙花攻擊的13個地址
http://www.btc126.com/view/22068.html
稱要教育巴菲特，中國加密貨幣先驅天價與巴菲特吃午餐
https://technews.tw/2019/06/04/cyber-currency-supporter-lunch-with-warren-buffett/
G20針對虛擬貨幣要求制定新措施防止洗錢
https://tchina.kyodonews.net/news/2019/06/53814b978890-g20.html
導入區塊鏈的數位市民卡特別在哪？台北資訊局長點出3個「有感」應用
http://bit.ly/2MsSQ95
銀行攻數位幣 加速跨境結算
https://udn.com/news/story/6811/3851222
取得MSB執照！Dinngo致力成為世界頂級交易所
http://bit.ly/2XmCPm1
欲跨足支付市場 臉書與美主管機關洽談數位貨幣
https://udn.com/news/story/6811/3850024
Facebook加密貨幣據稱下個月問世 或許還有實體ATM機
https://news.sina.com.tw/article/20190606/31539066.html
90%做區塊鏈專案不佳，但台灣未來機會在區塊鏈
http://bit.ly/2wFAfvI
閃電網絡（中）｜從貨幣支付發展歷史看閃電網絡核心思想
https://xcong.com/articles/3539681
陳美伶赴歐 展開台歐盟AI區塊鏈資安交流
http://bit.ly/2WpJDmp
宣布成立區塊鏈公司！Mark Karpeles：比特幣的安全需要重建
http://news.knowing.asia/news/05817694-585e-4b4a-bdf5-218df343187f
加密貨幣交易平台Cryptohopper有山寨版，可竊取受害者資料
https://www.ithome.com.tw/news/131147
GateHub的潛在安全漏洞可能導致用戶損失2300萬XRP
http://www.coinvoice.cn/39803.html
KMD：Agama錢包漏洞造成的損失不小但尚且可控，將盡可能補償用戶
https://www.tuoluocaijing.com.tw/kuaixun/detail-68109.html
Software developers are keeping an open mind about blockchain
https://www.zdnet.com/article/software-developers-see-potential-in-blockchain/#ftag=RSSbaffb68
Breaking down the Forbes Blockchain 50
https://medium.com/blockdata/breaking-down-the-forbes-blockchain-50-2f44e9902537
Cryptocurrency Firm Itself Hacked Its Customers to Protect Their Funds From Hackers
http://bit.ly/2wF68Ev
Hackers steal $9.5 million from GateHub cryptocurrency wallets
https://zd.net/2XufjmZ
5.資安事件新聞
A.病毒木馬 / 殭屍網路 / 勒索軟體 / APT
警惕Bizarro Sundown（GreenFlash）漏洞利用工具包傳播Seon勒索病毒
http://bit.ly/2HRiY9l
瞄準Linux平臺的惡意軟體HiddenWasp現身，讓駭客得以遠端控制受感染的系統，惡意軟體由中國駭客創造
https://www.insoler.com/forum/topic/15592895876534.htm
GandCrab勒索軟體賺了20億美元後宣佈收山
https://www.ithome.com.tw/news/131042
網路勒索集團清除了 12,000 多個 MongoDB 資料庫
https://blog.trendmicro.com.tw/?p=60811
變種 Mirai 又再現身 升級攻擊方法專烚懶人
http://bit.ly/2wzJa1J
感染勒索軟體的巴爾的摩市，雖然沒付10萬美元贖金，但後續重建成本將近2千萬美元
https://www.ithome.com.tw/news/131140
新型「挖礦」惡意軟件 BlackSquid 肆虐美國與泰國
https://unwire.pro/2019/06/05/crypto-jacking-mining-malware/security/
GandCrab 勒索病毒鎖定攻擊 MySQL 資料庫
https://blog.trendmicro.com.tw/?p=60802
惡作劇？駭客？議員收可疑USB 藏木馬病毒
https://news.tvbs.com.tw/politics/1144094
Trickbot 攻擊迫使俄亥俄州學校停課
https://blog.trendmicro.com.tw/?p=60809
勒索電郵攻撃新趨勢
https://www.hkcert.org/my_url/zh/blog/19060601
垃圾郵件使用 HawkEye Reborn 鍵盤側錄惡意程式攻擊企業
https://blog.trendmicro.com.tw/?p=60830
惡意虛擬貨幣挖礦容器,針對暴露API 的 Docker主機，並用 Shodan 找出其他受害目標
https://blog.trendmicro.com.tw/?p=60752
美國得來速連鎖餐廳POS系統中毒導致消費者的金融卡資訊遭駭
https://ithome.com.tw/news/131021
美國知名得來速連鎖餐廳POS系統中毒 傳駭客入侵盜走消費者個資
http://bit.ly/2Wer282
Hackers Stole Customers' Credit Cards from 103 Checkers and Rally's Restaurants
http://bit.ly/2JRF11A
MacOS Zero-Day Allows Trusted Apps to Run Malicious Code
http://bit.ly/311RNQA
Three’s a crowd: New Trickbot, Emotet & Ryuk Ransomware
https://littlefield.co/threes-a-crowd-new-trickbot-emotet-ryuk-ransomware-16d1e25f72f4
Checkers, Rally's Burger Joints Hit By POS Malware
https://www.bankinfosecurity.com/checkers-rallys-burger-joints-hit-by-pos-malware-a-12540
Fingerpointing Over Baltimore's Ransomware Attack
https://www.bankinfosecurity.asia/interviews/fingerpointing-over-baltimores-ransomware-attack-i-4344
GandCrab ransomware operation says it's shutting down
https://www.zdnet.com/article/gandcrab-ransomware-operation-says-its-shutting-down/#ftag=RSSbaffb68
E-BUSINESSKaspersky Lab Reports 61% Increase in Mobile Banking Malware
https://nigeriacommunicationsweek.com.ng/kaspersky-lab-reports-61-increase-in-mobile-banking-malware/
Advanced Linux backdoor found in the wild escaped AV detection
https://arstechnica.com/information-technology/2019/05/advanced-linux-backdoor-found-in-the-wild-escaped-av-detection/
Dota Campaign: Analyzing a Coin Mining and Remote Access Hybrid Campaign
https://kindredsec.com/2019/05/31/dota-campaign-analyzing-a-coin-mining-and-backdoor-malware-hybrid-campaign/
The Emotet-ion Game (Part 3)
https://securityboulevard.com/2019/05/the-emotet-ion-game-part-3/
A dive into Turla PowerShell usage
https://www.welivesecurity.com/2019/05/29/turla-powershell-usage/
HiddenWasp Malware Stings Targeted Linux Systems
https://www.intezer.com/blog-hiddenwasp-malware-targeting-linux-systems/
Windows 10 security: Are ads in Microsoft's own apps pushing fake malware alerts
https://zd.net/2Z4Klm4
Pharma-testing biz Eurofins Scientific says it fell victim to 'new version' of malware
http://bit.ly/2WyzKlR
BlackSquid Slithers Into Servers and Drives With 8 Notorious Exploits to Drop XMRig Miner
http://bit.ly/319OTcz
Windows 10 Apps Hit by Malicious Ads that Blockers Won't Stop
http://bit.ly/2EUqGgT
Code Analysis of Basic Cryptomining Malware
https://kindredsec.com/2019/06/03/code-analysis-of-basic-cryptomining-malware/
GandCrab Ransomware Shutting Down After Claiming to Earn $2.5 Billion
https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-shutting-down-after-claiming-to-earn-25-billion/
BlackSquid malware uses bag of exploits to drop cryptocurrency miners
https://www.zdnet.com/article/blacksquid-malware-has-bag-of-exploits-to-drop-cryptocurrency-miners/#ftag=RSSbaffb68
The number of installed packages of malicious mobile banking Trojans increased by 58%
http://bit.ly/2XtaSc9
Malicious Mobile App Stealing Users’ Money
https://www.izoologic.com/2019/06/04/malicious-mobile-app-stealing-users-money/
Kaspersky TDSSKiller Portable
http://bit.ly/2EP6OMf
VB2018 paper: Lazarus Group: a mahjong game played with different sets of tiles
https://www.virusbulletin.com/uploads/pdf/magazine/2018/VB2018-Kalnai-Poslusny.pdf
B.行動安全 / iPhone / Android /穿戴裝置 /App
Apple ID被中國駭客成功破解
https://www.ptt.cc/bbs/MobileComm/M.1495603560.A.2CD.html
華盛頓郵報：大量 iPhone Apps 透過背景更新發送用戶數據
https://unwire.hk/2019/06/01/back-ground-app-refresh-apple/mobile-phone/
iOS軟件暗藏追蹤器 泄用戶私隱 背景App定期傳送 1個月傳1.5GB數據
http://bit.ly/315xKR8
去廁所前要向主管 WhatsApp「登記」？網民慨嘆：慘過集中營
http://bit.ly/2W4oYiQ
Line怎麼做資安？資安團隊首度對外揭露
https://www.ithome.com.tw/news/131029
跨國駭客威脅防不勝防，LINE如何把資安DNA注入員工身上
https://www.bnext.com.tw/article/53497/line-cyber-security-culture
新思斷軟體更新 華為再重創
https://ec.ltn.com.tw/article/paper/1292863
華為5G遭獵殺！爽了這家通訊大廠
https://www.chinatimes.com/realtimenews/20190605000032-260410?chdtv
華為與俄電信商MTS簽約 開發5G網絡
http://bit.ly/31eNrFN
印度是否允許華為參與其5G網絡是個未知數
https://www.voacantonese.com/a/Huawei-Role-In-5G-Network-Under-A-Cloud-20190604/4945134.html
FCC成員：華為的威脅已經存在
https://www.voacantonese.com/a/fcc-member-huawei-rural-area-20190531/4941499.html
Android 瀏覽器漏洞 助黑客發動網址列詐騙攻擊
http://bit.ly/2Wm1HxV
中搶5G商機 駭對手曝光安全漏洞
https://m.ltn.com.tw/news/focus/paper/1293241
WWDC 2019：MacOS Catalina 將 iTunes 拆成三個獨立App、使iPad成為第二顆螢幕以及所有動作都能透過語音控制
https://www.cool3c.com/article/144512
西班牙國家情報中心(CNI)警告5G恐對網路資安造成更大挑戰
http://bit.ly/2MpVigx
傳暫停華為手機生產線 富士康未回應
http://bit.ly/2ERTIh5
前五大類行動裝置漏洞
https://blog.ipswitch.com/tw/top-5-types-of-mobile-device-breaches
當心個資外洩！專家：這3種資料別存在手機裡
https://fnc.ebc.net.tw/FncNews/tech/82264
讓用戶掌握更多的數據控制權 Apple顧隱私「每週拒4萬個APP上架」
http://bit.ly/2HTZbWC
被嵌入BeiTaAd廣告外掛的Android程式恐讓手機難以使用
https://www.ithome.com.tw/news/131110
貼文、留言都由他們檢查！臉書神秘的「內容審查員」做了這些事
https://3c.ltn.com.tw/news/37005
防盜帳號不簡單！直擊 LINE X Intertrust 資安大會，捍衛數位世界身份與信用
https://assets.inside.com.tw/article/16573-LINE-X-Intsertrust-2019
蘋果公司新登錄選項或對Facebook和google過濾更多個人資訊
https://on.wsj.com/31fsn1U
iOS 13、MacOS Catalina終止支援SHA-1雜湊演算法
https://www.ithome.com.tw/news/131136?fbclid=IwAR0sb8CnzU9TZJAgY9sKFoffSJqo8zFiWTVqCFRHQEuP7j2X8lWSfSAmdI8
iOS 13 on the iPhone: Here's what Apple needs to fix urgently
https://www.zdnet.com/article/ios-13-on-the-iphone-heres-what-apple-needs-to-fix-urgently/#ftag=RSSbaffb68
New attack creates ghost taps on modern Android smartphones
https://www.zdnet.com/article/new-attack-creates-ghost-taps-on-modern-android-smartphones/#ftag=RSSbaffb68
Wave of SIM swapping attacks hit US cryptocurrency users
https://www.zdnet.com/article/wave-of-sim-swapping-attacks-hit-us-cryptocurrency-users/#ftag=RSSbaffb68
Symantec Mobile Threat Defense: Reducing Risky App Threats with Robust App Vetting
https://www.symantec.com/blogs/product-insights/symantec-mobile-threat-defense-reducing-risky-app-threats-robust-app-vetting
C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件
下一次的資安大威脅—量子時代的來臨
https://blog.twnic.net.tw/2019/05/31/3818/
近一半的組織網路安全技術人才短缺,該怎麼辦
https://blog.trendmicro.com.tw/?p=60080
資安最大的風險是人
https://view.ctee.com.tw/technology/10222.html
從0開始成為一名黑客，必須學習C語言
https://read01.com/ezn6jRm.html#.XPh3e1wzbIU
14歲自學當駭客 薛澄溱18歲當上產品經理
https://www.gvm.com.tw/article.html?id=66511
新的研究顯示網路犯罪可能被廣泛漏報——即使法律要求揭露
http://www.businesswirechina.com/hk/news/40776.html
【網站遭駭情勢日益惡化，助長利用外洩帳號密碼而成的自動化攻擊】帳號填充攻擊乘勢而起
https://www.ithome.com.tw/news/131019
【網站應用程式要防堵帳號填充攻擊，市面上已有解決方案可選】剖析因應帳號填充攻擊的3種可行做法
https://www.ithome.com.tw/news/131020
在演算法殺人之前，或許我們該先殺死它們
https://www.techbang.com/posts/70400-before-the-algorithm-kills-maybe-we-should-kill-them-first
ENIAC 背後的女性程式設計師
https://talk.womany.net/t/topic/12067
替人類減少網路中毒的痛苦！非營利組織Quad9要成為全球的資安防護罩
http://bit.ly/2ERpomU
維安進化...防諜變防駭
http://udndata.com/ndapp/udntag/finance/Article?origid=9332667
Google與美2所大學研究資安防護措施，舉手之勞就能保護帳號安全
http://bit.ly/2wAxpYR
關貿 5月攔截13萬次網攻
http://bit.ly/2EPgLZY
維州審計長扮駭客 侵入醫院IT系統
http://www.epochtimes.com/b5/19/6/3/n11296725.htm
這位媽媽打開嬰兒監視器,看到的卻是別人的小孩
https://blog.trendmicro.com.tw/?p=60627
在暗網世界裡，駭客可能用AI再重新創造了一個「你」
https://www.techbang.com/posts/70407-in-the-dark-web-world-hackers-may-have-re-created-a-you-with-ai
黑客鑽漏洞 牟利880萬
https://news.sina.com.tw/article/20190601/31488194.html
盜幣880萬元，廣東警方打掉一盜取遊戲幣的黑客團伙
https://news.sina.com.tw/article/20190602/31496554.html
澳洲國家大學遭黑客入侵 多達19年敏感資料被盜
https://hk.on.cc/hk/bkn/cnt/aeanews/20190604/bkn-20190604113454077-0604_00912_001.html
英超李斯特城官方網店遭入侵 顧客信用卡重要資料被盜
https://unwire.hk/2019/06/01/leicester-city-fc-hacked-credit-card-data/tech-secure/
網路設備異常 桃機國境大隊啟動備援
http://bit.ly/2HRMyLM
Google、微軟、蘋果、WhatsApp等組織，公開反對英國情報機構提出的竊聽加密通訊計畫
https://ithome.com.tw/news/131008
美駐荷大使：荷蘭應全面禁用華為5G設備
https://ec.ltn.com.tw/article/breakingnews/2813809
中共疑為侵入澳洲國立大學電腦網絡黑手
http://www.epochtimes.com/b5/19/6/6/n11304148.htm
美國國土安全部跟國務院官員參加資安對話
https://www.ptt.cc/bbs/HatePolitics/M.1559210037.A.D5B.html
美國務卿訪歐放話：美國不與使用華為的國家共享情報
https://news.ltn.com.tw/news/world/breakingnews/2808679
若歐洲封殺中電信設備 5G建置額外成本恐破兆
https://ec.ltn.com.tw/article/breakingnews/2815494
香格里拉安全對話 美再批華為與中共掛勾
https://www.taiwannews.com.tw/ch/news/3715828
中國操縱歐洲5G設備測試 以掩護華為打擊對手
https://ec.ltn.com.tw/article/breakingnews/2809859
尷尬！BBC英國首次5G直播使用華為設備
http://bit.ly/2ZcTUPW
英情報機構：華為劣質 安全性令人不放心
http://www.epochtimes.com/b5/19/6/3/n11296465.htm
日全面禁華為5G！ 樂天移動與NEC打造5G網路
http://bit.ly/2JZKtj9
華為和中共政權的真實關係
https://www.ntdtv.com/b5/2019/06/01/a102591392.html
淨灘撿瓶中信寫「國家機密 」 疑中國海漂到台灣
http://bit.ly/2QHEO1F
紐約科技研討會 嘉賓談及中共網絡封鎖
http://www.epochtimes.com/b5/19/6/4/n11298976.htm
Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services
http://bit.ly/2MBz5My
Despite disclosure laws, cybercrime may be widely underreported
http://bit.ly/2K0ja8m
Cybercrime in a post-Brexit era: Will hackers exploit our political turmoil
http://bit.ly/2ETr4fy
Big tech surveillance could damage democracy
http://bit.ly/2Wbwhp3
BoxHosting Online Hosting: Lifetime Subscription
http://bit.ly/2MyHFLV
Huawei: China's State Hackers 'Rigging 5G Tests' Against Nokia And Ericsson
http://bit.ly/312maGz
Trends in Cybersecurity to Watch
https://medium.com/rohits-perspectives/trends-in-cybersecurity-to-watch-64637ed08bdd
NATO promises to be ready for cyber attacks
https://www.cybersecurityjobsite.com/article/nato-promises-to-be-ready-for-cyber-attacks/
5 reasons your organization needs to adopt a zero trust security architecture
http://bit.ly/2EPtv2F
SUPRA Smart TV Flaw Lets Attackers Hijack Screens With Any Video
http://bit.ly/2W8Z7q1
A Manifesto for Great Security
https://www.symantec.com/blogs/expert-perspectives/manifesto-great-security
Why You Should Wait to Download Your NLE’s Beta Release
http://bit.ly/2HTZCAo
‘All we know is MONEY!’: US cities struggle to fight hackers
http://bit.ly/2ZaxZJd
UK’s Sophos Buys US’s Rook Security, a Managed Services and SIEM Provider
http://bit.ly/2KzU6oe
A Complete Penetration Testing & Hacking Tools List for Hackers & Security Professionals
https://gbhackers.com/hacking-tools-list/?fbclid=IwAR2pvF-25IfGdsEbI4wAwb0FQD0u7BeSB4hE_du_QrGSCgszySBcCJNRIOg
Failure to patch is leaving business open to attack
http://bit.ly/2XvoKCM
US to demand five years of your social media, email account info in visa application
https://zd.net/2K3kuYk
Hong Kong, Singapore to Cooperate on Cybersecurity
https://www.bankinfosecurity.asia/hong-kong-singapore-to-cooperate-on-cybersecurity-a-12549
New Iranian hacking tool leaked on Telegram
https://www.zdnet.com/article/new-iranian-hacking-tool-leaked-on-telegram/#ftag=RSSbaffb68
China’s War on Dissidents Spreads Online
https://onezero.medium.com/chinas-war-on-dissidents-spreads-online-9bb3f2d4ff7a
Does China's route to infrastructure control run through Iceland's data centers
https://www.zdnet.com/article/does-chinas-route-to-infrastructure-control-run-through-icelands-data-centers/#ftag=RSSbaffb68
The best beach reads for hackers in 2019
https://www.zdnet.com/pictures/the-best-2019-beach-reads-for-hackers-in-pictures/#ftag=RSSbaffb68
Firefox Web Browser Now Blocks Third-Party Tracking Cookies By Default
http://bit.ly/2Xx01y0
National Cyber Security Strategy To Hit Just 1 of 12 Outcomes by 2021
http://bit.ly/2WjWtxM
Malboard: Hackers can now pose as victims through their keyboards
https://zd.net/2Mw1lQQ
Enterprise under attack: Dark web cyber criminals sell hacking tools aimed at business
https://zd.net/2KxgM8E
Large European Routing Leak Sends Traffic Through China Telecom
http://bit.ly/2Ikj73S
資通所108年第一次聯合專案人力進用-20.技術類-資安
https://www.104.com.tw/job/6mpx9
網路資安工程師-新竹
https://www.104.com.tw/job/5ylir
資訊安全高級工程師/工程師
https://www.104.com.tw/job/5rsb0
Python Web Engineer(研發替代役可)
https://www.104.com.tw/job/5wif9
法遵/ 法務人員
https://www.104.com.tw/job/6ezpe
資安維運工程師
https://www.104.com.tw/job/6mrm3
工研院資訊處_資訊工程師G4
https://www.104.com.tw/job/6ms39
【資安】資深資安管理專業人員
https://www.104.com.tw/job/67b9e
I3601 資訊安全資深工程師(板橋)
https://www.104.com.tw/job/6dd4o
電子支付 Linux/Android APP 軟體工程師_研發中心(高雄)
https://www.104.com.tw/job/6mwhw
電子支付 Android BSP / Linux Embedded OS 軟體工程師_研發中心(台中)
https://www.104.com.tw/job/6mwht
資訊安全主管/Leader
https://www.104.com.tw/job/6mvtu
資安顧問/專案經理 (華亞科技園區)
https://www.104.com.tw/job/6my44
D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
蘋果保護隱私出大招：虛擬信箱幫使用者登錄第三方應用服務
http://bit.ly/2MqUlEL
東京奧運假冒網站多買飛要小心！中旅社下周四前公布香港購票詳情
http://bit.ly/2wzGL7k
駭客入侵？櫃姐買千元保養品慘被騙24萬元
https://news.ltn.com.tw/news/society/breakingnews/2809832
做貼圖綁跨國支付平台！ 女控遭盜刷「52萬」
https://news.tvbs.com.tw/life/1141607
維擇科技CEO：欺詐攻擊正從互聯網行業向傳統行業延伸
https://news.sina.com.tw/article/20190602/31494884.html
失婚婦網交「大陸工程師」17萬差點送人
https://www.chinatimes.com/realtimenews/20190530003318-260402?chdtv
要救美國上校！50歲單身婦談網戀昏頭 百萬積蓄差點飛了
https://news.ltn.com.tw/news/society/breakingnews/2807134
先殺價！逢甲商圈詐騙檔 付千鈔偷收回誆騙找錢
https://news.ebc.net.tw/News/society/165957
防點數詐騙 「不多管閒事」成通報漏洞
https://news.tvbs.com.tw/life/1143524
「分心術」盜銀行卡 取走錢財 男女嫌犯被追緝
http://www.epochtimes.com/b5/19/6/4/n11300664.htm
網徵打字員「轉財務」 學生誤信幫匯款觸法
https://news.tvbs.com.tw/local/1143089?fbclid=IwAR226kAf-i5H0cgwiYffAdcSTYqtcojphMTt4gYyK5BK43FcUUdYW28FR6Y
假簡訊「亂槍打鳥、願者上鉤」桃警偵破詐騙集團
https://news.ltn.com.tw/news/society/breakingnews/2811504
研究人員再發現未保護的資料庫叢集，中國獵人頭公司資料全都露
https://www.ithome.com.tw/news/131081?fbclid=IwAR3pW2crIzB9M-RSiy58otmiQ6Da4jGtZtC-OJJj-tYPjFj4D2XcKfZ4ITc
「別打了」臉書詐騙盜電話 狂接客訴抓嘸人
http://bit.ly/2Wr0lSC
美國討債公司AMCA資料外洩，危及眾多醫療院所病患個資
https://www.ithome.com.tw/news/131139
國泰外洩940萬乘客個人資料 私隱專員批違規及管理掉以輕心
http://www.passiontimes.hk/article/06-06-2019/53461
釣魚電郵專攻焦慮心理 Google 是非題教你分詐騙破綻
http://bit.ly/2Zcdqfe
澳洲國立大學20萬筆個資遭竊 爆中國吸收間諜隱憂
https://news.ltn.com.tw/news/world/breakingnews/2814875
Detecting Breaches in Real Time
https://www.bankinfosecurity.asia/detecting-breaches-in-real-time-a-12571
This is how hackers make money from your stolen medical data
https://www.zdnet.com/article/this-is-how-hackers-make-money-from-your-stolen-medical-data/#ftag=RSSbaffb68
Credder: Fighting the scourge of online fake news
https://www.zdnet.com/article/credder-fighting-the-scourge-of-online-fake-news/#ftag=RSSbaffb68
ISPs must now ask for permission before selling your data, Maine rules
https://www.zdnet.com/article/isps-must-now-ask-for-permission-before-selling-your-data-maine-rules/#ftag=RSSbaffb68
One of New York’s largest nonprofits suffers data breach
https://www.zdnet.com/article/one-of-new-yorks-largest-nonprofits-suffers-data-breach/#ftag=RSSbaffb68
Fake news writer: If people are stupid enough to believe this stuff
https://nakedsecurity.sophos.com/2019/06/03/fake-news-writer-if-people-are-stupid-enough-to-believe-this-stuff/
Citrix Sued For Not Securing Employee Info Before Data Breach
http://bit.ly/2WHSI9n
Phishing attacks that bypass 2-factor authentication are now easier to execute
http://bit.ly/2HW1cBO
Billing Details for 11.9M Quest Diagnostics Clients Exposed
http://bit.ly/2wMlqaV
Podcast: Behind-the-Scenes Look at Scattered Canary BEC Cybergang
http://bit.ly/2WLtKWJ
Phishing Kits Add More Vulnerabilities to Hacked Servers
http://bit.ly/2Il0RHF
E.研究報告
Windows RDP 服務高危漏洞分析（CVE-2019-0708）
https://paper.seebug.org/937/
Linux 內核SCTP 協議漏洞分析與復現（CVE-2019-8956）
https://paper.seebug.org/938/
Windows 10 Task Scheduler服務DLL注入漏洞分析
https://xz.aliyun.com/t/5286
MS08-067漏洞原理及詳盡分析過程
https://www.freebuf.com/vuls/203881.html
POC已公開！RDP遠程代碼執行漏洞被利用引發藍屏
https://www.weibo.com/ttarticle/p/show?id=2309404378115299216997
CVE-2019-9510：攻擊者利用RDP 0 day漏洞可繞過鎖屏
https://www.4hou.com/vulnerable/18422.html
CVE-2017-11176 一步一步linux内核漏洞利用 (二)(阻塞)
https://xz.aliyun.com/t/5319
詳細分析Pwn2Own 2019上曝出的Edge的Canvas 2D API漏洞（CVE-2019-0940）利用
https://www.4hou.com/vulnerable/18321.html
CVE-2019-0697：通過DHCP漏洞發現其餘兩個關鍵漏洞
https://xz.aliyun.com/t/5308
一次攻防實戰演習复盤總結
https://bithack.io/forum/265?fbclid=IwAR132FXzqAZaBsQzb0p6uEeo6HXdCtt456goRzNzrfdEbuvzOz57qVV-q9M
「白帽挖洞技能提升」ThinkPHP5 遠程代碼執行漏洞-動態分析
https://read01.com/KDE0eE4.html
2019年上半年數據庫漏洞安全威脅報告
https://www.anquanke.com/post/id/179853
BlackSquid惡意軟件分析：利用8個臭名昭著的漏洞攻擊服務器，並投放挖礦惡意軟件
https://www.4hou.com/malware/18408.html
Apache struts2漏洞又來了這一次如何機智地與中國黑客界的半壁江山賽跑
https://www.aspxmuma.com/aspmumahoumen/5207.html
Bitdefender An APT Blueprint:Gaining New Visibility into Financial Threat
http://bit.ly/2WDmX1x
Improper App Check Revives the Synthetic Clicks Issue in macOS Mojave
http://bit.ly/2IfIkN2
Kubolt : Utility For Scanning Public Kubernetes Clusters
https://kalilinuxtutorials.com/kubolt/?fbclid=IwAR1xR9i72r-4V6VIORTKAwigeVpIRz5L8dTdNCqqKDqA7WlkftJcgJYHoyI
Analysis of CVE-2019-0708 (BlueKeep)
https://www.malwaretech.com/2019/05/analysis-of-cve-2019-0708-bluekeep.html
HOW TO Tactical Nmap for Beginner Network Reconnaissance
https://null-byte.wonderhowto.com/how-to/tactical-nmap-for-beginner-network-reconnaissance-0189856/
Seccubus v2.51.1 releases: automated vulnerability scanning, reporting and analysis
https://securityonline.info/seccubus-vulnerability-scanning-reporting-analysis/
Shellcode: Loading .NET Assemblies From Memory
http://bit.ly/2XFMOCU
flare-vm v2.2.20 releases: Windows-based security distribution for malware analysis, incident response, penetration testing
http://bit.ly/2Mn6pH5
Windows-Based Exploitation —VulnServer TRUN Command Buffer Overflow
http://bit.ly/2JRXz1N
Percona herds the open source cats
https://www.zdnet.com/article/percona-herds-the-open-source-cats/#ftag=RSSbaffb68
Windows 10 - Task Scheduler service - Privilege Escalation/Persistence through DLL planting
http://bit.ly/2YXJvHA
Using Firepower to defend against encrypted RDP attacks like BlueKeep
https://blog.talosintelligence.com/2019/05/firepower-encrypted-rdp-detection.html
Someone slipped a vuln into crypto-wallets via an NPM package
http://bit.ly/2Z7lzl2
Realtek SDK Exploits on the Rise from Egypt
https://www.netscout.com/blog/asert/realtek-sdk-exploits-rise-egypt
Mr. Coffee with WeMo: Double Roast
https://securingtomorrow.mcafee.com/other-blogs/mcafee-labs/mr-coffee-with-wemo-double-roast/
The time I was hacked by Mr. Sh
https://medium.com/@collinalexbell/the-time-i-has-hacked-by-mr-sh-583db12b7d8f
Detecting and Analyzing Microsoft Office Online Video
https://blog.nviso.be/2019/05/29/detecting-and-analyzing-microsoft-office-online-video/
googleprojectzero/halfempty
http://bit.ly/2XifRfP
PcapXray v2.5 - A Network Forensics Tool To Visualize A Packet Capture Offline As A Network Diagram
http://bit.ly/2KrOQmt
Summary of Iranian Advanced Persistent Threat (APT) 34
https://medium.com/@JordiScrubbings/summary-of-iranian-advanced-persistent-team-apt-34-7624d213d20e
MetaSploit Module Created for BlueKeep Flaw, Private for Now
http://bit.ly/2EUkc1x
Threat Intelligence Hunter - An Open source project for threat hunting and Information gathering
http://bit.ly/2WMAXWK
Website Penetration testing: Information gathering
http://bit.ly/2IjUmFf
Windows 10 - Task Scheduler service - Privilege Escalation/Persistence through DLL planting
http://bit.ly/2Iik6lp
Planning a Red Team exercise
http://bit.ly/2JXlQDI
Modern Internet Standards provide for more reliability and further growth of the Internet.
https://www.internet.nl/?fbclid=IwAR1wJwSChJbDCSE6hzDwZsBelXx2c5hWFsIcCRXWFNno66I06u9FxfsD1rw
Vim/Neovim Arbitrary Code Execution via Modelines
http://bit.ly/2wCSIcb
Why does macOS Catalina use Zsh instead of Bash? Licensing
http://bit.ly/2QSvhF9
BlueKeep ‘Mega-Worm’ Looms as Fresh PoC Shows Full System Takeover
http://bit.ly/2HXGgdq
owasp-masvs
http://bit.ly/2WLJ5qh
gyoisamurai/GyoiThon GyoiThon: Next generation penetration test tool
https://github.com/gyoisamurai/GyoiThon?fbclid=IwAR27UNsubLroS-hRj14QpWB-wFkmXVgUVkMjX5JWDis3Ee3JeC6-5-XYyLs
Finshir : A Coroutines-Driven Low & Slow Traffic Sender
https://kalilinuxtutorials.com/finshir/?fbclid=IwAR1iZ9pS8RBWyiRVm9Bvd94esnXh_K3N-uQcTEVAVZL2Cfh38YptYeYGzE8
Facebash : Facebook Brute Forcer In Shellscript Using TOR
http://bit.ly/2KAFsgj
Metabigor : Command Line Search Engines Without Any API Key
http://bit.ly/2K1Jpvd
How To Recover/Reset Forgotten MySQL/MariaDB root User Password On Linux
http://bit.ly/2HZN9ep
Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities
http://bit.ly/2Wr7T2U
New GoldBrute Botnet is Trying to Hack 1.5 Million RDP Servers
http://bit.ly/2wGlVDd
How Red Teams Bypass AMSI and WLDP for .NET Dynamic Code
http://bit.ly/2Intx2S
VTHunting : A Tiny Script Used to Generate Report About Virus Total Hunting
http://bit.ly/31hWNRp
A botnet is brute-forcing over 1.5 million RDP servers all over the world
https://zd.net/2K1Fr5N
Hackers Can Now Bypass Two-Factor Authentication With a New Kind of Phishing Scam
http://bit.ly/2IqrgEd
PcapXray : Tool To Visualize A Packet Capture Offline
https://kalilinuxtutorials.com/pcapxray/?fbclid=IwAR3cu2HCB7BnO-qXrzE11K15NyFlWYasDDMqRvuUJcVdXLKC-_FJu96kye4
Microsoft Warns Against Bypassing Office 365 Spam Filters
http://bit.ly/2wR1cNf
There's a reason why my cat doesn't need two-factor authentication
http://bit.ly/31k4wOX
F.商業
Palo Alto買下二家專攻新興技術的資安公司
https://ithome.com.tw/news/130997
新方法帶來機會與挑戰 分散式運算管理有路可循 嫻熟微服務架構運作 方能建構可靠安全系統
https://www.netadmin.com.tw/article_content.aspx?sn=1905290002
趨勢攜四家資安教育機構 強化企業資安
https://udn.com/news/story/7253/3849756
瞄準企業數位轉型商機 精誠花0.9億取得藍新資訊3成股權
https://ec.ltn.com.tw/article/breakingnews/2810941
Google、FB當心了！Apple推出「快速登入」服務 不但方便還很安全
http://bit.ly/2ESvy6q
隱私安全！火狐預設強化追蹤保護功能
http://bit.ly/31cz7Om
ESET多層防禦技術 有效阻擋駭客攻擊與威脅
https://www.eset.hk/html/86/eset-multi-layer-defense-technology/
IBM雲端平臺不惜砍掉重練，改用K8s打造現代化新架構
https://www.ithome.com.tw/people/131015
Imperva to acquire bot management provider Distil Networks
https://www.zdnet.com/article/imperva-to-acquire-bot-management-provider-distil-networks/#ftag=RSSbaffb68
Equinix adds network functions virtualization to its platform, launches Network Edge
https://www.zdnet.com/article/equinix-adds-network-functions-virtualization-to-its-platform-launches-network-edge/#ftag=RSSbaffb68
Red Hat Enterprise Linux 7.7 beta is now available
https://www.zdnet.com/article/red-hat-enterprise-linux-7-7-beta-is-now-available/#ftag=RSSbaffb68
Firefox Web Browser Now Blocks Third-Party Tracking Cookies By Default
http://bit.ly/2IsyE1A
G.政府
台灣早已禁用華為！唐鳳：當時沒有其他國家這樣做，我們在國際上具有一定資安話語權
https://buzzorange.com/techorange/2019/05/31/huawei-in-tw/
電信管理法完成立法 5G可共網共頻
https://udn.com/news/story/7238/3846040
「電信管理法」三讀通過 電信執照制改為登記制
https://www.chinatimes.com/realtimenews/20190531003831-260410?chdtv
電信管理法過關 NCC:加速5G建設與更新
https://m.ltn.com.tw/news/life/breakingnews/2808670
國防產業發展條例創廠商分類分級 學者憂誰來評鑑
https://udn.com/news/story/10930/3848238
中鋼去華為元素 多管齊下
https://money.udn.com/money/story/5612/3849331
更新之資通安全專業證照清單及資通安全專業證照認可審查作業流程
https://nicst.ey.gov.tw/Page/D94EC6EDE9B10E15/f23692a6-de81-4ca8-a49d-e4cf78aa9bee
端午連假將至 金管會要求各保險公司服務不中斷
https://ec.ltn.com.tw/article/breakingnews/2812884
政府擴大辦理關鍵基礎設施演習 桌上推演本週展開
https://m.ltn.com.tw/news/politics/breakingnews/2814301
H.SCADA/ICS/工控系統
工廠資安事件頻傳 你的工業控制系統夠安全嗎
https://www.ctimes.com.tw/DispArt/tw/19060314000N.shtml
Schneider Electric AVEVA Vijeo Citect和Schneider Electric AVEVA CitectSCADA不安全憑證存儲漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10981
I.教育訓練
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊
http://bit.ly/2HOyLpa
會員系統用Session還是Cookie? 你知道其實他們常常混在一起嗎
https://progressbar.tw/posts/92?fbclid=IwAR1VpPrre8pVRRvHYvs99uDT6icprh7Lo9oIKAEXHBvej-R84jDMtE6qPd0
如何蒐集威脅情資，又該如何分析與運用
https://ithome.com.tw/pr/131006
業務邏輯漏洞安全檢查checklist
http://www.lonelyor.org/lonelyorWiki/15596178265897.html
web安全之文件上傳漏洞
https://blog.csdn.net/xlsj228/article/details/90756195
【 台灣股市資訊網】Post爬蟲大公開-附【 Python程式碼】
http://bit.ly/2Wnr8Pv
讓股票小秘書教您大掃【千】支股票 — 附贈【Python程式碼】範例
http://bit.ly/2QRJq5C
108資安--安裝ubuntu server 18.04
http://itopnet.blogspot.com/2019/06/108-ubuntu-server-1804.html
黑客工具| hydra暴力破解&Violence cracking web site
https://www.cmm.wiki/video/WHtq_5eZ4Ds/zhzy-m.html
How to Find Out Who is Using a File in Linux
http://bit.ly/2wvMA5p
Introduction to HTML -Part 1
http://bit.ly/2JXRWPZ
Process and Communication in Operating Systems
http://bit.ly/2WjwMlN
How a Quantum Computer Could Break 2048-Bit RSA Encryption in 8 Hours
http://bit.ly/2QN3ndG
How In-House Forensic Capabilities Help Detect Vulnerabilities
https://www.bankinfosecurity.asia/how-in-house-forensic-capabilities-help-detect-vulnerabilities-a-12572
CompTIA Certification Training — Get Online Courses @ 95% OFF
http://bit.ly/2KyN3wc
Introduction to Shell Scripting
http://bit.ly/2F8H2CX
J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
倫敦直擊：智能家電易遭黑客監控 業界表擔憂
https://hk.on.cc/hk/bkn/cnt/aeanews/20190602/bkn-20190602060344662-0602_00912_001.html
人工智慧落地產業應用 基礎架構攸關專案成敗 截AI優勢補企業競爭力 專用硬體發揮時效價值
https://www.netadmin.com.tw/article_content.aspx?sn=1905290001
製造業資安受關注 軟硬整合提升資安強度
http://www.tca.org.tw/tca_news1.php?n=1400
英國打造5G智慧工廠 第四次工業革命來了
https://udn.com/news/story/6843/3851532
COMPUTEX聚焦智慧製造 共論5大人物時代資安主題
http://www.ctimes.com.tw/DispNews/tw/1905311147VP.shtml
三總AI判讀心電圖準度九成 及時搶救心跳太慢的他
https://udn.com/news/story/7266/3851868?from=udn-ch1_breaknews-1-cate9-news
台積電導入 NEC 人臉辨識系統，訪客「刷臉」就可開卡進入廠房
https://buzzorange.com/techorange/2019/06/05/nec-face-recognition-in-tsmc/
微軟大舉進攻物聯網，攜手台灣資通訊夥伴展示成果
https://technews.tw/2019/06/06/microsogt-iot-in-actionlinc-showcase-computex/
AI 機器人害我投資賠錢，我能告他嗎
http://bit.ly/31jasHY
家庭物聯存風險 安全意識最重要
https://www.hkcert.org/my_url/zh/blog/19060201
Training a single AI model can emit as much carbon as five cars in their lifetimes
http://bit.ly/2Xyx8Bx
The Internet of Things enables a floating city of pleasure... and a vision of hell
https://www.zdnet.com/article/the-internet-of-things-enables-a-floating-city-of-pleasure-and-a-vision-of-hell/#ftag=RSSbaffb68
Managing IoT Device Risks
https://www.bankinfosecurity.asia/managing-iot-device-risks-a-12564
DARPA Challenge: Underground war robots
https://www.zdnet.com/article/darpa-challenge-underground-war-robots/#ftag=RSSbaffb68
Using machine learning to solve your dark data nightmare
https://www.zdnet.com/article/using-machine-learning-to-solve-your-dark-data-nightmare/#ftag=RSSbaffb68
6.近期資安活動及研討會
JCConf Taiwan 2019 Call for Proposals 6/1 ~ 6/30
https://twjug.kktix.cc/events/jcconf-2019-cfp?fbclid=IwAR2-Lry33FOVuXXStfSqUWlAJI25SeFgK9Q1XY6e4zJLEKvYrSkmlvv6Waw
突破困境：資安開源工具之應用分享 6/8
https://tfc.kktix.cc/events/nomoney-infosec
科技大擂台「AI資安攻防戰」決賽 6/9
https://www.huashan1914.com/w/huashan1914/exhibition_19060415062728776
Cypherpunks Taiwan 密碼龐克 （5）- 區塊鏈存在證明與抗審查性 & 零知識證明 6/11
https://www.facebook.com/events/2371184796499787/
[研討會]2019 TANet資安聯防與大數據分析管理研討會 108年6月12日(三)
https://reurl.cc/6xXkd
國家高速網路與計算中心教育訓練-源碼檢測實作 6/13
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3828&from_course_list_url=homepage
HackingThursday 固定聚會 6/13
https://www.meetup.com/hackingthursday/events/vkhnnqyzjbrb/
React Hooks 實戰會議室 ─ 前端工程師的潮流技能不私藏 6/14
https://www.facebook.com/events/447646755985628/
【課程】Julia 資料科學實作，2019年強勢來襲的科學計算語言，集Python、C++、R 各家特色於一身 6/15
https://www.techbang.com/posts/70251-course-julia-data-science-practice
國立交通大學 亥客書院 - 密碼系統之漏洞、修補與檢測 6/15
https://hackercollege.nctu.edu.tw/?p=1039
The Artificial Intelligence Conference 6/18
https://www.facebook.com/events/278255853036175/?event_time_id=360038254857934
Casual Meetup - IoT Talk & Drinks (Monthly) Wednesday, June 19, 2019
https://www.meetup.com/Taipei-Sigfox-User-Group/events/ctqnkpyzjbzb/
HackingThursday 固定聚會 6/20
https://www.meetup.com/hackingthursday/events/vkhnnqyzjbbc/
國家高速網路與計算中心教育訓練-資安健診 6/20
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=3832&from_course_list_url=homepage
JSDC台中小聚 - UX 體驗分享計畫 6/21
https://jsdc-tw.kktix.cc/events/53548f33?fbclid=IwAR3CybQML6FGnMQ_IE9dfRYFJUHWm4Knl8kJBHQ9vn_Coz2KOQW1xk_joJs
Edvance Beacon 2019 6/21
https://docs.google.com/forms/d/e/1FAIpQLSe70uw8Pi862IkL_rQXDJhzd7QnGXiuhcWwttOEN2BZwUbyMw/viewform
CCNS 定期聚 — 當 Python 遇上 JIT / PyPy 淺談 6/23
https://ccns.kktix.cc/events/ccns-pypy-talk?fbclid=IwAR1wa3cZuyNZQv-pGo5Eh3u5uik69nLY1t-sXb2R6wTd9HsrMBw02ybbkJw
資安前哨站-獵殺封包 6/26
https://www.it360.com.tw/live-detail.aspx?id=iT36000000000348
HackingThursday 固定聚會 6/27
https://www.meetup.com/hackingthursday/events/vkhnnqyzjbkc/
HackingThursday 固定聚會 7/4
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbgb/
2019 車用電子與車聯網資安種子教師研習營 7/4 ~ 7/5
http://www.kghs.kh.edu.tw/notice/11734
2019國際資訊安全組織台灣高峰會 7/9 ~ 7/11
https://csa.kktix.cc/events/2019con
Secure Summit APAC 2019 安全峰會 6 大領域提升資安水平 7/10 ~ 7/11
http://bit.ly/2WbONh5
工業局補助網路安全檢測教育訓練 7/10 ~ 7/12
https://www.accupass.com/event/1904080311551119077841
HackingThursday 固定聚會 7/11
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbpb/
HackingThursday 固定聚會 7/18
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbxb/
HackingThursday 固定聚會 7/25
https://www.meetup.com/hackingthursday/events/vkhnnqyzkbhc/
新加坡資安市場解密講座: 台灣資安浴血東南亞叢林戰鬥之起點-獅城站 7/26
https://ievents.iii.org.tw/eventS.aspx?t=0&id=547
CDX2.0推廣活動 - 台南場次 7/26
https://nchc-cdx.kktix.cc/events/cdxactivity-0726
資安事故處理實務課程 8/7 ~ 8/8
http://bit.ly/2VW0Lv9
DEF CON 27 2019/8/8–8/11
https://www.defcon.org/
數位鑑識處理實務 8/14 ~ 8/15
http://bit.ly/2VW0Lv9
WEB應用滲透測試 8/21 ~ 8/23
https://www.accupass.com/event/1904080221358963463590
台灣駭客年會 HITCON Community 2019 2019-08-23(五) 09:00 ~ 2019-08-24(六) 17:00 (GMT+8)
https://www.accupass.com/event/1906040921594609934250
資安法規與制度研析課程－108年度「資安人才培訓及國際推展計畫－資安專業人才培育深化課程」 8/29 ~ 8/30
http://www.cisanet.org.tw/News/activity_more?id=MTQzMw==
108年資安職能訓練-行動裝置安全(8/29-8/30)
https://cee.ksu.edu.tw/recruitinfo/1443.html
CDX2.0推廣活動 - 台北場次 9/10
https://nchc-cdx.kktix.cc/events/cdxactivity-0910
TANET 2019 - 臺灣網際網路研討會 9/25
https://www.twcert.org.tw/subpages/securityInfo/securityactivity_details.aspx?id=310
HITB+ CYBER WEEK 2019/10/12 ~17
https://d2p.hitb.org/?fbclid=IwAR2gU17bz0Y7TH8THIIskIX1vziWBpMY152mJiwk7AAeVS752f_eNcZ0NzU
Splunk .conf 19 10/21 ~ 10/24
https://conf.splunk.com/
AIoT智能物聯網開發人才就業養成班[免費諮詢] 10/22
https://ittraining.kktix.cc/events/aiot-training-2019
Industrial Control Systems (ICS) Cyber Security Conference USA October 21 – 24, 2019
https://www.icscybersecurityconference.com
沒有留言:
張貼留言