投稿時間:2023-08-31 04:16:18 RSSフィード2023-08-31 04:00 分まとめ(16件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
AWS	AWS Mobile Blog	AWS Amplify supports Time-Based One-Time Password (TOTP) for MFA on Android, Swift, and Flutter	https://aws.amazon.com/blogs/mobile/aws-amplify-totp-support-for-mfa-on-android-swift-flutter/	AWS Amplify supports Time Based One Time Password TOTP for MFA on Android Swift and FlutterWe re excited to announce that AWS Amplify now supports TOTP Time based One Time Password as a multifactor authentication method for Swift Android and Flutter apps This enables you to easily add TOTP as a two factor authentication method to your mobile and cross platform apps built with Amplify Implementing TOTP strengthens the security of your app by requiring …	2023-08-30 18:16:20
AWS	AWS	Introduction to Amazon Managed Servive for Apache Flink | Amazon Web Services	https://www.youtube.com/watch?v=vI1GiMSHuxM	Introduction to Amazon Managed Servive for Apache Flink Amazon Web ServicesAmazon Managed Service for Apache Flink makes it easy to build and run real time streaming applications using Apache Flink Amazon Managed Service for Apache Flink takes care of everything required to run streaming applications There are no servers and clusters to manage no compute and storage infrastructure to set up and you only pay for the resources you use You can easily setup and integrate data sources or destinations with minimal code process data continuously with sub second latencies and respond to events in real time Amazon Managed Service for Apache Flink takes care of the critical tasks of keeping your system secure updated compliant and optimized so you can focus on building applications Learn more about Amazon Managed Servive for Apache Flink Subscribe More AWS videos More AWS events videos Do you have technical AWS questions Ask the community of experts on AWS re Post ABOUT AWSAmazon Web Services AWS is the world s most comprehensive and broadly adopted cloud platform offering over fully featured services from data centers globally Millions of customers ーincluding the fastest growing startups largest enterprises and leading government agencies ーare using AWS to lower costs become more agile and innovate faster ApacheFlink Analytics AWS AmazonWebServices CloudComputing	2023-08-30 18:31:47
海外TECH	Ars Technica	FCC says “too bad” to ISPs complaining that listing every fee is too hard	https://arstechnica.com/?p=1964377	rule	2023-08-30 18:28:37
海外TECH	Ars Technica	NASA officials sound alarm over future of the Deep Space Network	https://arstechnica.com/?p=1964191	artemis	2023-08-30 18:12:18
海外TECH	MakeUseOf	How to Fix the “Access Control Entry Is Corrupt” Error on Windows	https://www.makeuseof.com/access-control-entry-corrupt-error-windows/	message	2023-08-30 18:15:25
海外TECH	DEV Community	What Inspired You To Became A Coder? 🤔	https://dev.to/soumyadeepdey/what-inspired-you-to-became-a-coder-4cpc	journey	2023-08-30 18:31:53
海外TECH	DEV Community	Qakbot: Understand how Ransomware works	https://dev.to/scofieldidehen/qakbot-understand-how-ransomware-works-4p26	Qakbot Understand how Ransomware worksRansomware has become one of the most dangerous cybersecurity threats facing organizations and individuals today This form of malware encrypts files and systems demanding payment to restore access One of the most prolific strains is Qakbot also known as Qbot or Pinkslipbot Active since it has infected hundreds of thousands of systems globally through evolving infection vectors and capabilities This article will provide a comprehensive overview of how the Qakbot ransomware operates its key capabilities the impact of an attack and steps organizations can take to defend against it How Qakbot Infects SystemsQakbot utilizes multiple infection vectors to gain access and spread through systems and networks The most common method is through phishing emails containing malicious attachments or links The emails are carefully crafted to appear legitimate often impersonating trusted sources or containing information personalized to the recipient If the user clicks the link or enables the embedded content malware is downloaded providing an initial foothold into the system Qakbot malware has also been spread through compromised websites drive by downloads and brute force attacks on external services like Remote Desktop Protocol Once executed the malware installs various components and modules that allow the ransomware payload to be downloaded This includes a credential stealer for lateral movement and tools to evade detection like disabling security software The initial infection will establish communication with the command and control servers operated by the cybercriminals behind Qakbot These servers can remotely instruct infected machines to download additional modules spread laterally using stolen credentials and ultimately deploy the ransomware payload This modular architecture allows the malware s capabilities to expand over time continually Qakbot CapabilitiesQakbot possesses multiple modules that provide a wide range of malicious functionality Keylogging and credential theft The malware stealthily records keystrokes capturing usernames passwords and other sensitive data users enter This enables lateral movement throughout the network Lateral movement By stealing credentials from compromised machines Qakbot can spread to other systems via tools like PsExec SMB and WMI This expands the footprint of machines it can infect Data exfiltration Before deploying ransomware Qakbot will extract files and data from the network for extortion and resale on dark web markets Ransomware encryption The ransomware module recursively encrypts files across local drives and shared network volumes with strong AES encryption Most file types can be encrypted Ransom notes After encrypting files Qakbot displays ransom notes demanding payment in Bitcoin to receive a decryption key Partial decryption may be offered as “proof Threats of data leaks Qakbot threatens to publish exfiltrated data if the ransom is not paid applying additional pressure on victims This multi pronged approach allows Qakbot to infiltrate systems entrench itself in the network steal valuable data and then deploy file encrypting ransomware in a coordinated attack The Ransom DemandThe ransom demand itself is delivered by displaying ransom notes on the infected system s screens The notes will include payment instructions the ransom amount and threats regarding stolen data Demands usually range from to Bitcoins although larger organizations may see higher amounts Payment is demanded through cryptocurrencies like Bitcoin or Monero to preserve the criminals anonymity The notes provide a Bitcoin wallet address to send payment and a unique ID number for the victim Once paid the criminals promise to provide the decryption software Partial decryption may be performed first as proof However even if paid in full there is no guarantee files will be recovered The criminals may simply take the money without providing working decryption keys Qakbot also threatens to publish any stolen data from victims who refuse to pay up further incentivizing payment Impact of InfectionA Qakbot infection can severely impact affected individuals and organizations Encrypting crucial files essentially locks staff out of critical systems and data This brings business operations and productivity to a halt Even if a ransom is paid downtime and costs due to disrupted operations can persist If not properly segmented Qakbot can spread quickly on a network by leveraging stolen credentials This can rapidly escalate the scale of encryption and the machines impacted Entire file servers may be encrypted affecting shared resources Data exfiltrated before encryption may also be published or sold online Even after the attack considerable time and resources are required to restore systems and revoke compromised credentials fully Stolen credentials may be used for future attacks as well Extensive costs also arise from emergency response network monitoring and implementing additional defenses Protection and Recovery RecommendationsQakbot exploits security gaps so organizations should implement layered defenses to reduce the risk of infection and disrupt attacks in progress User education Train staff to identify and avoid phishing attempts and enable malicious files Do not open attachments from unknown sources Patching Maintain up to date patching on operating systems software and firmware to eliminate vulnerabilities Authentication Require strong unique passwords and enable multi factor authentication wherever possible Limit the use of shared admin credentials Restrict execution Use application whitelisting and controls like PowerShell Constrained Language Mode Limit software allowed to run Segment networks Isolate and firewall critical systems to restrict lateral movement Avoid exposing SMB and RDP externally Monitor systems Inspect network traffic and endpoint behavior for signs of C callbacks lateral activity and ransomware Backups Maintain recent backups offline and regularly test backup and restoration to rebuild systems quickly If Qakbot evades defenses and encrypts systems recovery options include Decryption In some cases decryption may be possible through tools like those offered by NoMoreRansom org This depends on the strain and encryption methods Ransom payment This is not recommended as it encourages more attacks and does not guarantee file recovery Consult law enforcement first Rebuild systems Completely rebuild infected systems from scratch and restore data from offline read only backups made before infection Account lockouts To contain lateral movement block Active Directory and cloud application accounts that may have been compromised Require password resets Prevention is more effective than reacting post infection By layering robust defenses and preparing secure backups organizations can reduce the likelihood of a Qakbot incursion and the impacts if one succeeds Ongoing user education and testing response plans are also essential ConclusionQakbot has emerged as one of the most versatile and destructive ransomware strains impacting businesses and organizations globally in recent years Its layered infection process enables widespread encryption of systems and data By understanding Qakbot s capabilities and modern defense strategies potential victims can harden their infrastructure against attacks and implement the backups and response plans required for quick recovery should an incursion occur With ransomware attacks on the rise proactive measures are essential to defend against the disruption Qakbot and similar threats pose If you find this post exciting find more exciting posts on the Learnhub Blog we write everything tech from Cloud computing to Frontend Dev Cybersecurity AI and Blockchain	2023-08-30 18:22:36
Apple	AppleInsider - Frontpage News	Apple invites researchers to apply to the 2024 iPhone Security Research Device Program	https://appleinsider.com/articles/23/08/30/apple-invites-researchers-to-apply-to-the-2024-iphone-security-research-device-program?utm_medium=rss	Apple invites researchers to apply to the iPhone Security Research Device ProgramThe iPhone Security Research Device Program allows researchers to work with Apple directly in discovering vulnerabilities while still receiving bounty payments Sign ups are open through October Security Research DeviceApple launched the iPhone Security Research Device Program in The program reportedly works well having discovered high profile security critical vulnerabilities since its launch Read more	2023-08-30 18:32:50
海外TECH	Engadget	Speedrunning charity event Awesome Games Done Quick returns in January	https://www.engadget.com/speedrunning-charity-event-awesome-games-done-quick-returns-in-january-183533237.html?src=rss	Speedrunning charity event Awesome Games Done Quick returns in JanuaryThe annual Awesome Games Done Quick AGDQ speedrunning charity gaming event is returning in January It s going to be an in person affair once again the first time since COVID It all takes place in Pittsburgh at the Wyndham Hotel from January th to the st Despite the change to an in person format you ll be able to stream the festivities via the Games Done Quick Twitch channel For the uninitiated AGDQ is a speedrunning marathon event that runs all day and night throughout the week AGDQ will be held in support of the Prevent Cancer Foundation and you ll be able to quickly donate to the charity on Twitch or via the Games Done Quick website The event raised over million for the foundation back in and million last year There s also a sibling event held in the summer that has raised millions of dollars for Doctors Without Borders AGDQ is still months away so the organizers have yet to issue a list of participants and games Past years have seen speedrunners take on hundreds of releases from newer titles like Sekiro Shadows Die Twice to retro flavored gems like Super Mario Galaxy and Doom Yes labeling s Super Mario Galaxy as retro makes me feel old too but it is what it is nbsp Games Done Quick has stated that speedrunners don t have to head to Pittsburgh to take part as there will be remote runs available for those unable to travel The organization is accepting speedrunning submissions from September st to the th so start practicing your runs now This article originally appeared on Engadget at	2023-08-30 18:36:40
海外科学	NYT > Science	Women May Face Higher Risk of Stroke Following Infertility Treatment	https://www.nytimes.com/2023/08/30/health/infertility-stroke.html	Women May Face Higher Risk of Stroke Following Infertility TreatmentIn the largest study of its kind scientists found higher odds of stroke after childbirth among women who had received the treatments Still the number of strokes remained very low overall	2023-08-30 18:53:45
ニュース	BBC News - Home	Letby inquiry gets powers to force witnesses to give evidence	https://www.bbc.co.uk/news/health-66597122?at_medium=RSS&at_campaign=KARANGA	families	2023-08-30 18:14:18
ニュース	BBC News - Home	Girl, two, dies after being hit by car at Littleport holiday park	https://www.bbc.co.uk/news/uk-england-cambridgeshire-66656773?at_medium=RSS&at_campaign=KARANGA	daughter	2023-08-30 18:13:37
ニュース	BBC News - Home	Folarin Balogun: Monaco sign Arsenal forward on five-year deal for £35m	https://www.bbc.co.uk/sport/football/66664738?at_medium=RSS&at_campaign=KARANGA	arsenal	2023-08-30 18:13:45
ニュース	BBC News - Home	England pick up three New Zealand wickets inside powerplay	https://www.bbc.co.uk/sport/av/cricket/66665149?at_medium=RSS&at_campaign=KARANGA	chester	2023-08-30 18:08:06
ビジネス	ダイヤモンド・オンライン - 新着記事	身近な人が亡くなったとき、株式や投資信託はどうなる？ 知らないと絶対損すること！ - ぶっちゃけ相続「手続大全」	https://diamond.jp/articles/-/328443	投資信託	2023-08-31 03:57:00
ビジネス	ダイヤモンド・オンライン - 新着記事	できる社長が「スマホではやらないこと」とは？ - 【インボイス対応版】ひとり社長の経理の基本	https://diamond.jp/articles/-/328437	業務効率化	2023-08-31 03:54:00