Hakkerlar bir kunda boyishi mumkinmi ?

Mutaxassislar 19 ta nol kunlik zaiflikni aniqlashga va pul mukofotlarini qo'lga kiritishga muvaffaq bo'lishdi.
tasvir

2024-yilda Vankuverda o‘tkazilgan Pwn2Own tanlovining birinchi kunida ishtirokchilar Windows 11, Tesla avtomobillari va Ubuntu’da 19 ta nol kunlik zaifliklarni namoyish qilishdi. O'z topilmalari uchun ekspertlar umumiy qiymati 732 500 dollar va Tesla Model 3 ga ega bo'lishdi.

Tanlovni Haboob SA kompaniyasidan Abdul Aziz Haririy ochdi, u macOS’da kodni bajarish uchun API cheklovini aylanib o‘tish va buyruqlar kiritish zaifligini birlashtirgan Adobe Reader ekspluatatsiyasidan foydalangan va 50 000 dollar ishlagan.

Synacktiv butun sonlarni to‘ldirishdan foydalangan holda 30 soniyadan kamroq vaqt ichida Tesla ECU’sini buzib, Tesla Model 3 va 200 000 dollar yutib oldi.


davomi commentda

#Deface
Xabar berilishicha Qurilish Vazirligi sayti deface qilingan.
PS: Sayt hozir ishlamayapti
PS/S : Bundan 1 oycha oldin Invistitsiyalar vazirligi sayti buzilgandi.
Bundan kamchilik xabar topgandi.
(RTSM) tomondan qilingan sayt.
Ajoyib a ? Vazirliklar saytlari oddiy nishon bo’lishda davom qilyapti.

Davom etamiz
Saytlari hakkerlar tomonidan allaqachon buzilgan ammo o’zlarining xabari yo’q davlat universiteti va katta-kichik korxonalarni ko’rsatib o’tyapmiz. Afsuski go’sht bo’lishda davom etishyapti.

Barchangizni Muborak Hayit ayyomi bilan tabriklaymiz.

Pavel Durov Taker Karlsonga AQSh Razvetka idoralari uning xodimini ishga olishga uringanini aytdi.

Oxirgi marta AQShda bo'lganimda Telegramda ishlaydigan muhandis men bilan birga edi. AQSH Kiberxavfsizlik xodimlari uni mening orqamdan yashirincha yollashga harakat qilishdi.
- dedi Durov. 😎

Durovning so'zlariga ko'ra, AQShga kelganida, razvedka xodimlari uni aeroportda kutib olishgan va hatto bir marta u ijaraga olgan uyga ham kelishgan.

Pavel Durovning Taker Karlson bilan suhbatidan yana bir nechta qiziqarli fikrlar:

Telegramga eng katta bosim milliy hukumatlardan emas, balki... Apple va Google’dan keladi;

Shtatlarda ishlab chiqilgan platformalar xavfli - bu IOS va Android

Telegram Rossiya rasmiylari tomonidan nazorat qilinayotgani haqidagi da'volar raqobatchilarning hiylasi.

Telegram’ning hozirda 900 mln foydalanuvchisi bor, kelgusi yilda ularning soni 1 mldrga yetishi mumkin.

Ilon Maskning Twitter’ni sotib olishi katta yutuq va ijtimoiy media sanoatiga ijobiy ta’sir ko‘rsatadi.

Fishingga qarshi tavsiya:

- Agar qiz sizga birinchi yozsa, uni bloklang.

@meme0x00

Bayramingiz Muborak.
Bugun xotira va qadrlash kuni. Yoshi ulug’ buvi va bobolarimizdan xabar olamiz.

Turan Security jamoasi NAJOT TA'LIM tomonidan o'tkaziladigan
maxsus kechaga taklif qilindi

📢 Join Our 2-Day Cybersecurity Workshop by Turan Security Experts!

🗓 Date: May 25, 26
⏰ Time: 10:00 AM - 5:00 PM
📍 Place: Apple PC Lab, Huawei PC Lab

We are excited to host a comprehensive workshop on offensive and defensive cybersecurity led by the expert team from Turan Security. This specialized company excels in penetration testing, protecting information resources, incident response services, and mentoring junior professionals.

✔️ Featured Speakers:
- Sodiqov Akmaljon: Head of Information Security Assurance at UZCARD, Co-founder and mentor at Turan Security.
- Kozimjon Mirzarahmonov: Cyber Security Specialist at Cyber Security Center SUE, certified penetration tester.
- Dilshodbek Eshqobilov: Head of TuranSec Academy, PNPT Certified, Information Security Researcher.

Registration Required
Only 50 students can participate, so register now to secure your spot!

Register here

You can find about the program of the workshop in the agenda in the file below.

Best regards,
University administration

Albatta biror-bir hujum yoki jarayonni bajarish vaqtida tayyor dasturlardan (SQLmap, BurpSuite, Metasploit, etc) foydalanishning o'z yomon tomonlari bor:

~ Tayyor dasturlardan foydalanish - chiqib ketish juda qiyin bo'lgan qulay hududni (comfort zone) yaratadi;
~ Dasturlarni omma uchun taqdim etish orqali yana bir yangi tahdid paydo qilgan bo'lasiz;
~ Tayyor dasturlardan foydalanish 'Tunnel vision' effekti hosil qiladi (agar dastur uddalay olmasa, siz ham qila olmayman deb ishonasiz);

-HackTheBox
@TuranSec

📢 Join Our 2-Day Cybersecurity Workshop by Turan Security Experts!

🗓 Date: June 1-2
⏰ Time: 10:00 AM - 5:00 PM
📍 Place: Apple PC Lab, Huawei PC Lab

We are excited to host a comprehensive workshop on offensive and defensive cybersecurity led by the expert team from Turan Security. This specialized company excels in penetration testing, protecting information resources, incident response services, and mentoring junior professionals.

✔️ Featured Speakers:
- Sodiqov Akmaljon: Head of Information Security Assurance at UZCARD, Co-founder and mentor at Turan Security.
- Kozimjon Mirzarahmonov: Cyber Security Specialist at Cyber Security Center SUE, certified penetration tester.
- Dilshodbek Eshqobilov: Head of TuranSec Academy, PNPT Certified, Information Security Researcher.

Registration Required
Only 50 students can participate, so register now to secure your spot!

Register here

You can find about the program of the workshop in the agenda in the file below.

Best regards,
University administration

#TuranSec_Academy

📣Kunlar o'tib ketyapti, Kiberxavfsizlik sohasini o'rganishim kerak deb yurgan yoshlar, shu yerdamisiz? "Practical Ethical Hacking" kursiga qabul boshlandi.

⏱ Kurs davomiyligi : 6 oy
💻 Format : online (Zoom orqali)

🔥 22-iyunda bo'lib o'tadigan maxsus demo-darsda barcha savollaringizga javob olasiz.

O'qituvchi kim?

Kiber xavfsizlik sohasida 2 yildan ortiq tajribaga ega mutaxassis. PNPT xalqaro sertifikati egasi.

Qatnashish uchun guruhga qo'shiling: https://t.iss.one/+p1NB33owYOhmNGUy

P.S. Yaqinlaringizga ulashishni unutmang!!

| Telegram | Linkedin |

📢 99% chegirma bilan eng yaxshi Kiber xavfsizlik kurslaridan birini sotib oling❗️

Kurs orqali:

🔍 Veb ilovalar xavfsizligini tekshirish va ularni xavfsizligini ta'minlash;
💻 4 xil labaratoriya orqali amaliy ko'nikmaga ega bo'lish;
🏆 Dars ohirida Pentester yoki Bug bounty hunter kabi xodim bo'lib yetishib chiqish mumkin.

Ushbu kurs Pentest 101, Offensive SQL, Burp Suite 101 darsliklari jamlanmasi hisoblanadi...

O'quvchilar tomonidan natijalar:

☕️ Amazon, Alibaba kabi kompaniyalardan Bug Bounty;
🏆 eWPT, CAP kabi xalqaro sertifikatlar;

Narx: 1,200,000 so'm 12,600 so'm
Chegirma muddati: 27-iyun, 11:00 gacha

Kursni chegirma narxida olish uchun bizning Telegram, Youtube kanallarimizga obuna bo'ling va bizga murojaat qiling!
Bog'lanish: @turan_admin

Telegram | Linkedin | Youtube