🇺🇿🇺🇿18-noyabr – O‘zbekiston Respublikasi Davlat bayrog‘i qabul qilingan kun!
1991-yil 18-noyabr kuni O‘zbekiston Respublikasi Davlat bayrog‘i tasdiqlanib, ranglari va undagi har bir unsuri xalqimizning tarixiy ildizlari, milliy an’analari hamda kelajak sari intilishini ifodalaydi.
@TuranSecurity | www.turansec.uz
1991-yil 18-noyabr kuni O‘zbekiston Respublikasi Davlat bayrog‘i tasdiqlanib, ranglari va undagi har bir unsuri xalqimizning tarixiy ildizlari, milliy an’analari hamda kelajak sari intilishini ifodalaydi.
@TuranSecurity | www.turansec.uz
🔥12👍6❤4
#QiziqPost
Akvarium — xakerlar uchun yashirin eshik?! 🐠💻
Tasavvur qiling: dunyodagi eng qo‘riqlangan joylardan biri — kazino.
Kameralar, qo‘riqchilar, biometrik kirish… Hammasi joyida.
Lekin xakerlar bu devorlarni oddiy akvarium termometri orqali yorib o‘tdi. 😳
Forbes yozgan haqiqiy voqea:
Kazino akvariumidagi "aqlli" IoT termometr Wi-Fi’ga ulangan edi. Xakerlar aynan shu kichik qurilmada zaiflik topib, ichki tarmoqqa kirishdi va 10 GB maxfiy ma’lumotni — high-roller o‘yinchilar bazasini o‘g‘irlab ketishdi.
🎯 Xulosa?
Sizning ofisingizda akvarium bo‘lmasligi mumkin.
Lekin Wi-Fi’ga ulangan printerlar, kameralar, smart-TV, aqlli chiroqlar yoki “smart office” tizimlari bormi?
Ko‘p tashkilotlar serverlarni himoyalaydi,
ammo shu “mayda” IoT qurilmalar — eng katta xavf manbai bo‘lishi mumkin.
🔐 Security Audit + Pentest o‘tkazilmagan infratuzilma — ochiq darvoza degani.
Katta hujumlar ko‘pincha eng kutilmagan joydan boshlanadi.
______________________________________________________________________
An Aquarium… as a Backdoor for Hackers? 🐠💻
Imagine one of the most secure buildings in the world — a casino.
Guards, cameras, biometric access… everything locked down.
Yet hackers bypassed all of it using nothing more than an aquarium thermometer. 😳
A real incident reported by Forbes:
The casino had a “smart” IoT thermometer inside its lobby aquarium, connected to Wi-Fi.
Hackers found a vulnerability in that tiny device, broke into the internal network, and stole 10 GB of confidential data — the high-roller database.
🎯 The lesson?
Your organization may not have an aquarium…
But do you have Wi-Fi-connected printers, cameras, smart TVs, smart lights, or “smart office” systems?
Most companies secure their servers,
but forget these “small” IoT devices — which often become the weakest link.
🔐 An infrastructure without Security Audit & Pentest = an unlocked gate.
Major breaches usually start from the most unexpected place.
@TuranSecurity | www.turansec.uz
Akvarium — xakerlar uchun yashirin eshik?! 🐠💻
Tasavvur qiling: dunyodagi eng qo‘riqlangan joylardan biri — kazino.
Kameralar, qo‘riqchilar, biometrik kirish… Hammasi joyida.
Lekin xakerlar bu devorlarni oddiy akvarium termometri orqali yorib o‘tdi. 😳
Forbes yozgan haqiqiy voqea:
Kazino akvariumidagi "aqlli" IoT termometr Wi-Fi’ga ulangan edi. Xakerlar aynan shu kichik qurilmada zaiflik topib, ichki tarmoqqa kirishdi va 10 GB maxfiy ma’lumotni — high-roller o‘yinchilar bazasini o‘g‘irlab ketishdi.
🎯 Xulosa?
Sizning ofisingizda akvarium bo‘lmasligi mumkin.
Lekin Wi-Fi’ga ulangan printerlar, kameralar, smart-TV, aqlli chiroqlar yoki “smart office” tizimlari bormi?
Ko‘p tashkilotlar serverlarni himoyalaydi,
ammo shu “mayda” IoT qurilmalar — eng katta xavf manbai bo‘lishi mumkin.
🔐 Security Audit + Pentest o‘tkazilmagan infratuzilma — ochiq darvoza degani.
Katta hujumlar ko‘pincha eng kutilmagan joydan boshlanadi.
______________________________________________________________________
An Aquarium… as a Backdoor for Hackers? 🐠💻
Imagine one of the most secure buildings in the world — a casino.
Guards, cameras, biometric access… everything locked down.
Yet hackers bypassed all of it using nothing more than an aquarium thermometer. 😳
A real incident reported by Forbes:
The casino had a “smart” IoT thermometer inside its lobby aquarium, connected to Wi-Fi.
Hackers found a vulnerability in that tiny device, broke into the internal network, and stole 10 GB of confidential data — the high-roller database.
🎯 The lesson?
Your organization may not have an aquarium…
But do you have Wi-Fi-connected printers, cameras, smart TVs, smart lights, or “smart office” systems?
Most companies secure their servers,
but forget these “small” IoT devices — which often become the weakest link.
🔐 An infrastructure without Security Audit & Pentest = an unlocked gate.
Major breaches usually start from the most unexpected place.
@TuranSecurity | www.turansec.uz
🔥7👍6🤔2😱2
TURAN SECURITY YANA ZARBA BERDI — YANGI IKKITA CVE!
Biz kiberxavfsizlik haqida faqat gapirmaymiz — bu ustida ishlaymiz.
Turan Security rasmiy ravishda CVE-2025-1074 va CVE-2025-13383 ni qo‘lga kiritdi.
Bu bilan bizning tadqiqot portfelimiz 5 ta rasmiy CVE ga yetdi.
Zaiflik tadqiqoti endi shakllanayotgan mintaqada
biz mezon o‘rnatamiz.
Bu CVE’lar — omad emas.
Bu — tinimsiz tadqiqot, ekspluatlar yaratish, zero-day ovlash va mas’uliyati, mehnatining natijasi.
Kimdir “innovatsiya” haqida gapiradi,
biz esa haqiqiy zaifliklarni topamiz va MITRE tomonidan tasdiqlaymiz.
To‘liq texnik tahlillar va PoC’lar tez orada e’lon qilinadi.
Bu — faqat boshlanishi.
Turan Security — O‘zbekistondagi birinchi haqiqiy zaiflik tadqiqot kuch markazi.
________________________________________________________
TURAN SECURITY STRIKES AGAIN — TWO NEW CVEs!
We don’t just talk cybersecurity — we shape it.
Turan Security has officially obtained CVE-2025-1074 and CVE-2025-13383, bringing our research portfolio to 5 recognized CVEs.
In a region where vulnerability research is still emerging,
we set the benchmark.
These CVEs aren’t luck.
They are the result of relentless research, exploit development, zero-day hunting, and responsible disclosure.
While others talk about “innovation,”
we discover real vulnerabilities and get validated by MITRE.
Full technical write-ups and PoCs will be released soon.
This is only the beginning.
Turan Security — the first true vulnerability research powerhouse in Uzbekistan.
@TuranSecurity | www.turansec.uz
Biz kiberxavfsizlik haqida faqat gapirmaymiz — bu ustida ishlaymiz.
Turan Security rasmiy ravishda CVE-2025-1074 va CVE-2025-13383 ni qo‘lga kiritdi.
Bu bilan bizning tadqiqot portfelimiz 5 ta rasmiy CVE ga yetdi.
Zaiflik tadqiqoti endi shakllanayotgan mintaqada
biz mezon o‘rnatamiz.
Bu CVE’lar — omad emas.
Bu — tinimsiz tadqiqot, ekspluatlar yaratish, zero-day ovlash va mas’uliyati, mehnatining natijasi.
Kimdir “innovatsiya” haqida gapiradi,
biz esa haqiqiy zaifliklarni topamiz va MITRE tomonidan tasdiqlaymiz.
To‘liq texnik tahlillar va PoC’lar tez orada e’lon qilinadi.
Bu — faqat boshlanishi.
Turan Security — O‘zbekistondagi birinchi haqiqiy zaiflik tadqiqot kuch markazi.
________________________________________________________
TURAN SECURITY STRIKES AGAIN — TWO NEW CVEs!
We don’t just talk cybersecurity — we shape it.
Turan Security has officially obtained CVE-2025-1074 and CVE-2025-13383, bringing our research portfolio to 5 recognized CVEs.
In a region where vulnerability research is still emerging,
we set the benchmark.
These CVEs aren’t luck.
They are the result of relentless research, exploit development, zero-day hunting, and responsible disclosure.
While others talk about “innovation,”
we discover real vulnerabilities and get validated by MITRE.
Full technical write-ups and PoCs will be released soon.
This is only the beginning.
Turan Security — the first true vulnerability research powerhouse in Uzbekistan.
@TuranSecurity | www.turansec.uz
🔥30👍11❤9
🏆 BlackHat MEA 2025 Final CTF musobaqasida 12-o'rin!
Turan Security va O'zbekiston sharafini himoya qilgan xalqaro jamoa dunyoning eng nufuzli kiberxavfsizlik musobaqalaridan birida 125 jamoa orasidan TOP-15 talikdan joy oldi!
Saudiya Arabistoning Ar-Riyod shahrida o‘tkazilgan BlackHat MEA 2025 tadbiri - global miqyosdagi eng kuchli mutaxassislar, ekspertlar va jahonning yetakchi kiberxavfsizlik jamoalari uchrashadigan maydon.
TOP jamoalar orasida Team lead’imiz 3 ta topshiriqda:
Birinchi marta uchun eng kuchli jamoalar o'rtasida topshiriqlarni birinchi bo'lib ishlash juda qiyin va kamdan-kam uchratiladigan natija! Ushbu yutuq uchun Team lead'imiz tashkilotchilar tomonidan maxsus "Firstblood coin"lar bilan taqdirlandi, bunday natija O'zbekiston uchun birinchisi hisoblanadi🔥
Bizning maqsadimiz xalqaro maydonda O‘zbekistonni nufuzini oshirish, yoshlarga ilhom berish va kiberxavfsizlik sohasini rivojlantirish.
@TuranSecurity | www.turansec.uz
Turan Security va O'zbekiston sharafini himoya qilgan xalqaro jamoa dunyoning eng nufuzli kiberxavfsizlik musobaqalaridan birida 125 jamoa orasidan TOP-15 talikdan joy oldi!
Saudiya Arabistoning Ar-Riyod shahrida o‘tkazilgan BlackHat MEA 2025 tadbiri - global miqyosdagi eng kuchli mutaxassislar, ekspertlar va jahonning yetakchi kiberxavfsizlik jamoalari uchrashadigan maydon.
TOP jamoalar orasida Team lead’imiz 3 ta topshiriqda:
🚩Firstblood - web, birinchi;
🚩Firstblood - forensics, birinchi;
🚩Secondblood - web, ikkinchi bo'lib topshiriqni barajarishga erishdi.
Birinchi marta uchun eng kuchli jamoalar o'rtasida topshiriqlarni birinchi bo'lib ishlash juda qiyin va kamdan-kam uchratiladigan natija! Ushbu yutuq uchun Team lead'imiz tashkilotchilar tomonidan maxsus "Firstblood coin"lar bilan taqdirlandi, bunday natija O'zbekiston uchun birinchisi hisoblanadi🔥
Bizning maqsadimiz xalqaro maydonda O‘zbekistonni nufuzini oshirish, yoshlarga ilhom berish va kiberxavfsizlik sohasini rivojlantirish.
@TuranSecurity | www.turansec.uz
This media is not supported in your browser
VIEW IN TELEGRAM
O‘zbekiston Respublikasi Konstitutsiyasi kuni bilan tabriklaymiz!
Ushbu bayram jamiyatimizning asosiy qadriyatlari — tinchlik, adolat va har bir fuqaro hurmatiga bo‘lgan e’tiborni eslatib turadi. Har bir xonadonda farovonlik va kelajakka ishonch bo‘lsin. Birgalikdagi sa’y-harakatlarimiz yurtimizni yanada kuchli va ravnaq topgan qiladi. Turan Security tinchlik, birlik va yangi yutuqlar tilaydi. Bayram muborak bo‘lsin!
We congratulate you on the Day of the Constitution of the Republic of Uzbekistan!
This holiday celebrates the fundamental values of our society - peace, justice, and respect for every citizen. May every home be filled with happiness and prosperity. Our joint efforts in the name of unity make our country stronger and more prosperous. Turan Security stands for peace, unity, and new achievements. Happy holiday!
@TuranSecurity | www.turansec.uz
Ushbu bayram jamiyatimizning asosiy qadriyatlari — tinchlik, adolat va har bir fuqaro hurmatiga bo‘lgan e’tiborni eslatib turadi. Har bir xonadonda farovonlik va kelajakka ishonch bo‘lsin. Birgalikdagi sa’y-harakatlarimiz yurtimizni yanada kuchli va ravnaq topgan qiladi. Turan Security tinchlik, birlik va yangi yutuqlar tilaydi. Bayram muborak bo‘lsin!
We congratulate you on the Day of the Constitution of the Republic of Uzbekistan!
This holiday celebrates the fundamental values of our society - peace, justice, and respect for every citizen. May every home be filled with happiness and prosperity. Our joint efforts in the name of unity make our country stronger and more prosperous. Turan Security stands for peace, unity, and new achievements. Happy holiday!
@TuranSecurity | www.turansec.uz
Media is too big
VIEW IN TELEGRAM
Davlat madhiyasi qabul qilingan kun barchamizga muborak bo'lsin!
December 10 - The day the national anthem of the Republic of Uzbekistan
@TuranSecurity | www.turansec.uz
Please open Telegram to view this post
VIEW IN TELEGRAM
Turan Security asoschilaridan biri 17-dekabr kuni Markaziy bank va “Kapitalbank” tomonidan hamkorlikda tashkil etilgan tadbirda spiker sifatida ishtirok etdi. Kun quyidagi mavzularga bag‘ishlandi: “Axborot xavfsizligi va firibgarlikka qarshi kurashish" Cyber Security Baseline systems.
Tadbir esa kengroq va nihoyatda dolzarb mavzu doirasida o‘tkazildi: “Axborot xavfsizligi va firibgarlikka qarshi kurashish: 2025-yilga kelib natijalar, tendensiyalar va transformatsiya.” Muhokamalar davomida quyidagi masalalarga alohida e’tibor qaratildi: Kiberxavflar va firibgarlik sxemalarining ortib borishi; avtomatlashtirish va kirishlarni nazorat qilishning operatsion hamda regulyator risklarni kamaytirishdagi roli; moliya sektorida axborot xavfsizligiga yondashuvlarning transformatsiyasi. Tadbir tashkilotchilariga amaliy tajriba bilan o‘rtoqlashish imkoniyati uchun, shuningdek, ishtirokchilarga professional muloqot va mavzuga bo‘lgan katta qiziqishlari uchun samimiy minnatdorlik bildiramiz.
_______________________________
One of the founders of Turan Security participated as a speaker on December 17 at an event jointly organized by the Central Bank and Kapitalbank.
The presentation was dedicated to the topic:
“Information Security and Countering Fraud: Cybersecurity Baseline Systems.”
The event itself was held within a broader and highly relevant agenda:
“Information Security and Countering Fraud: Results, Trends, and Transformation Towards 2025.”
During the discussions, special attention was given to the following issues:
the growing number of cyber threats and fraud schemes;
the role of automation and access control in reducing operational and regulatory risks;
the transformation of information security approaches in the financial sector.
We would like to express our sincere gratitude to the event organizers for the opportunity to share practical experience, as well as to the participants for the professional dialogue and strong interest in the topic.
@TuranSecurity | www.turansec.uz
Tadbir esa kengroq va nihoyatda dolzarb mavzu doirasida o‘tkazildi: “Axborot xavfsizligi va firibgarlikka qarshi kurashish: 2025-yilga kelib natijalar, tendensiyalar va transformatsiya.” Muhokamalar davomida quyidagi masalalarga alohida e’tibor qaratildi: Kiberxavflar va firibgarlik sxemalarining ortib borishi; avtomatlashtirish va kirishlarni nazorat qilishning operatsion hamda regulyator risklarni kamaytirishdagi roli; moliya sektorida axborot xavfsizligiga yondashuvlarning transformatsiyasi. Tadbir tashkilotchilariga amaliy tajriba bilan o‘rtoqlashish imkoniyati uchun, shuningdek, ishtirokchilarga professional muloqot va mavzuga bo‘lgan katta qiziqishlari uchun samimiy minnatdorlik bildiramiz.
_______________________________
One of the founders of Turan Security participated as a speaker on December 17 at an event jointly organized by the Central Bank and Kapitalbank.
The presentation was dedicated to the topic:
“Information Security and Countering Fraud: Cybersecurity Baseline Systems.”
The event itself was held within a broader and highly relevant agenda:
“Information Security and Countering Fraud: Results, Trends, and Transformation Towards 2025.”
During the discussions, special attention was given to the following issues:
the growing number of cyber threats and fraud schemes;
the role of automation and access control in reducing operational and regulatory risks;
the transformation of information security approaches in the financial sector.
We would like to express our sincere gratitude to the event organizers for the opportunity to share practical experience, as well as to the participants for the professional dialogue and strong interest in the topic.
@TuranSecurity | www.turansec.uz
#KiberXavfsizlik
#BirgaKuchliroqmiz
Kiberxavfsizlikda yangi hamkorlik
“Cyber university” davlat universiteti va Turan Security o‘rtasida kiberxavfsizlik sohasida hamkorlik memorandumi imzolandi.
➡️ Hamkorlik doirasida kiberxavfsizlik bo‘yicha amaliy mashg‘ulotlar, trening va master-klasslar o‘tkazish, CTF musobaqalarini tashkil etish, kiberxavfsizlik klubini yo‘lga qo‘yish, iqtidorli talabalarni qo‘llab-quvvatlash hamda talabalar uchun amaliyot dasturlarini amalga oshirish belgilandi.
😑 😑 😑 😑
A New Milestone in Cybersecurity Cooperation
TASHKENT – Cyber University and Turan Security have officially entered into a strategic partnership by signing a Memorandum of Cooperation (MoC) today. This alliance aims to significantly advance the cybersecurity landscape through academic and industrial synergy.
@TuranSecurity | www.turansec.uz
#BirgaKuchliroqmiz
Kiberxavfsizlikda yangi hamkorlik
“Cyber university” davlat universiteti va Turan Security o‘rtasida kiberxavfsizlik sohasida hamkorlik memorandumi imzolandi.
A New Milestone in Cybersecurity Cooperation
TASHKENT – Cyber University and Turan Security have officially entered into a strategic partnership by signing a Memorandum of Cooperation (MoC) today. This alliance aims to significantly advance the cybersecurity landscape through academic and industrial synergy.
@TuranSecurity | www.turansec.uz
Please open Telegram to view this post
VIEW IN TELEGRAM
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥16
#KiberXavfsizlik
#BirgaKuchliroqmiz
Oʻzbekiston Respublikasi Jamoat xavfsizligi universiteti bilan Turan Security o'rtasida memorandum imzolandi.
Turan Security va oliy ta’lim muassasalari o‘rtasida imzolangan Memorandumning asosiy maqsadi — kiberxavfsizlik ta’limini real amaliyot bilan uyg‘unlashtirish orqali yuqori malakali mutaxassislarni tayyorlashdir. Hamkorlik doirasida talabalar uchun amaliyot va stajirovkalar, qo‘shma ilmiy-tadqiqot loyihalari hamda mutaxassislar almashinuvi yo‘lga qo‘yiladi. Turan Security’ning xalqaro tajribasi va e’tirof etilgan yutuqlari yoshlar uchun real kiberxavflar bilan ishlash imkonini yaratadi. Ushbu hamkorlik kiberxavfsizlik madaniyatini rivojlantirish va sohaga kuchli kadrlar yetishtirishga xizmat qiladi.
-—-—-—-—-—-—-—-—-—-—-—-—
#CyberSecurity
#StrongerTogether
Memorandum signed between the Public Security University of the Republic of Uzbekistan and Turan Security.
The main goal of the Memorandum signed between Turan Security and higher education institutions is to train highly qualified specialists by integrating cybersecurity education with real practice. Within the framework of cooperation, internships and practical training for students, joint scientific research projects, and expert exchanges will be organized. Turan Security’s international experience and recognized achievements provide young people with the opportunity to work with real cyber threats. This cooperation serves to develop a cybersecurity culture and train strong personnel for the sector.
@TuranSecurity| www.turansec.uz
#BirgaKuchliroqmiz
Oʻzbekiston Respublikasi Jamoat xavfsizligi universiteti bilan Turan Security o'rtasida memorandum imzolandi.
Turan Security va oliy ta’lim muassasalari o‘rtasida imzolangan Memorandumning asosiy maqsadi — kiberxavfsizlik ta’limini real amaliyot bilan uyg‘unlashtirish orqali yuqori malakali mutaxassislarni tayyorlashdir. Hamkorlik doirasida talabalar uchun amaliyot va stajirovkalar, qo‘shma ilmiy-tadqiqot loyihalari hamda mutaxassislar almashinuvi yo‘lga qo‘yiladi. Turan Security’ning xalqaro tajribasi va e’tirof etilgan yutuqlari yoshlar uchun real kiberxavflar bilan ishlash imkonini yaratadi. Ushbu hamkorlik kiberxavfsizlik madaniyatini rivojlantirish va sohaga kuchli kadrlar yetishtirishga xizmat qiladi.
-—-—-—-—-—-—-—-—-—-—-—-—
#CyberSecurity
#StrongerTogether
Memorandum signed between the Public Security University of the Republic of Uzbekistan and Turan Security.
The main goal of the Memorandum signed between Turan Security and higher education institutions is to train highly qualified specialists by integrating cybersecurity education with real practice. Within the framework of cooperation, internships and practical training for students, joint scientific research projects, and expert exchanges will be organized. Turan Security’s international experience and recognized achievements provide young people with the opportunity to work with real cyber threats. This cooperation serves to develop a cybersecurity culture and train strong personnel for the sector.
@TuranSecurity| www.turansec.uz