https://csrc.nist.gov/pubs/ai/100/2/e2025/final NIST обновил рекомендации по типовым атакам на ИИ и способам защиты.
CSRC | NIST
NIST Artificial Intelligence (AI) 100-2 E2025, Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations
This NIST Trustworthy and Responsible AI report provides a taxonomy of concepts and defines terminology in the field of adversarial machine learning (AML). The taxonomy is arranged in a conceptual hierarchy that includes key types of ML methods, life cycle…
Черновик стандарта по защите api в cloud native.
https://csrc.nist.gov/pubs/sp/800/228/ipd
https://csrc.nist.gov/pubs/sp/800/228/ipd
CSRC | NIST
NIST Special Publication (SP) 800-228 (Withdrawn), Guidelines for API Protection for Cloud-Native Systems
Modern enterprise IT systems rely on a family of application programming interfaces (APIs) for integration to support organizational business processes. Hence, a secure deployment of APIs is critical for overall enterprise security. This, in turn, requires…
База данных уязвимостей от NIST по прежнему только увеличивает свой бэклог.
https://www.nist.gov/itl/nvd
https://www.nist.gov/itl/nvd
NIST
National Vulnerability Database
NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation’s cybersecurity infrastructure
В связи с уменьшением финансирования OTF инициированного новым президентом США возможны изменения в скорости релизов и поддержки для таких проектов как TOR, OpenVPN, Let's Encrypt.
OTF являлась одним из главных спонсоров вышеуказанных проектов и нескольких других.
https://news.bloomberglaw.com/federal-contracting/open-technology-fund-sues-global-media-agency-over-fund-freeze
OTF являлась одним из главных спонсоров вышеуказанных проектов и нескольких других.
https://news.bloomberglaw.com/federal-contracting/open-technology-fund-sues-global-media-agency-over-fund-freeze
Bloomberglaw
Open Technology Fund Sues Trump Officials Over Budget Freeze (3)
Nonprofit Open Technology Fund is accusing the US Agency for Global Media of unlawfully withholding grant funds authorized by Congress.
Гайд по верхнеуровневым принципам защиты рабочих станций администратора (PAW) от британского ФСТЭК.
https://www.ncsc.gov.uk/collection/principles-for-secure-paws
https://www.ncsc.gov.uk/collection/principles-for-secure-paws
www.ncsc.gov.uk
Principles for secure privileged access workstations (PAWs)
How to design and securely build management devices for high-risk system maintenance and administration.
https://www.first.org/epss/
Вышла 4 версия модели EPSS для оценки вероятности эксплуатации уязвимостей.
Вышла 4 версия модели EPSS для оценки вероятности эксплуатации уязвимостей.
FIRST — Forum of Incident Response and Security Teams
Exploit Prediction Scoring System (EPSS)