検索キーワード： セキュリティ・暗号化

Every organization in the United States is at risk from cyber threats that can disrupt essential services and potentially result in impacts to public safety. Over the past year, cyber incidents have impacted many companies, nonprofits, and other organizations, large and small, across multiple sectors of the economy. The identification of destructive malware is particularly alarming given that similar malware has been deployed in the past - e.g., NotPetya and WannaCry ransomware - to cause significant, widespread damage to critical infrastructure.

If you have been abused or are currently a victim of cybercrime harassment, cyberstalking, or cyberbullying and have not yet spoken out, reach toward a safe person and speak your truth. You are strong and courageous, and you deserve to live an abuse-free life. Stand with me, no longer a victim but a survivor.

Cybersecurity experts agree: No one security measure is foolproof to defend against attacks. Ransomware is a new threat. It comes from nowhere and can potentially lock you out of your data and applications until a ransom is paid, making it difficult to recover. These cybercriminals are extremely skilled and motivated. They want to access as much confidential personal information as possible. Security specialists recommend using every tool at your disposal, including draconian measures like backups, encrypting data files, redacting sensitive information on your devices and firewalls.

Scattered across the world, an elite team of code crackers is working tirelessly to thwart the defining cyber scourge of our time. You’ve probably never heard of them. But if you work for a school, a business, a hospital, or a municipal government, or simply cherish your digital data, you may be painfully familiar with the team’s sworn enemy: ransomware. Again and again, an unlikely band of misfits, mostly self-taught and often struggling to make ends meet, have outwitted the underworld of hackers who lock computer networks and demand huge payments in return for the keys.  

In The United States of Anonymous, Jeff Kosseff explores how the right to anonymity has shaped American values, politics, business, security, and discourse, particularly as technology has enabled people to separate their identities from their communications.

In Ransomware Protection Playbook, computer security veteran and expert penetration tester Roger A. Grimes delivers an actionable blueprint for organizations seeking a robust defense against one of the most insidious and destructive IT threats currently in the wild. You'll learn about concrete steps you can take now to protect yourself or your organization from ransomware attacks.

Thank you for the opportunity to contribute to today’s discussion on federal perspectives to secure the nation’s infrastructure. As you know, our nation’s critical infrastructure sectors are dependent on information technology (IT) systems and digital data to carry out operations and to process, maintain, and report essential information. The security of these systems and data is vital to public confidence and national security, prosperity, and well-being.

Finding the right position in cybersecurity is challenging. Being successful in the profession takes a lot of work. And becoming a cybersecurity leader responsible for a security team is even more difficult. In Navigating the Cybersecurity Career Path, decorated chief information security officer Helen Patton delivers a practical and insightful discussion designed to assist aspiring cybersecurity professionals entering the industry and help those already in the industry advance their careers and lead their first security teams.

Reflecting the evolution of information and communication tools and technologies via synergizing theoretical and practical skills in our audiobook, Cybersecurity as a Fishing Game, we aimed to convey, in a concise manner, the importance of cyber safety in regards to cybersecurity and the value of correct use.

Real-World Cryptography teaches practical techniques for day-to-day work as a developer, sysadmin, or security practitioner. There’s no complex math or jargon. You’ll learn building blocks like hash functions and signatures, and cryptographic protocols like HTTPS and secure messaging. This audiobook is a joy to listen to - and it might just save your bacon the next time you’re targeted by an adversary after your data.

When an attack happens, you don't want to be the person or team in complete panic. In an episode, terror becomes the worst enemy and can lead to mistakes. When we panic, we miss important clues about the attack, campaign, or attacker. Having a basic knowledge of general (cyber)security terms and concepts helps us respond faster and more professionally than most teams without that training or expertise. This book focuses on essential concepts in the least amount of time and pages to give you the basic knowledge to stay focused.

All organizations face a broad array of risks, including cybersecurity risk. For federal agencies, the Office of Management and Budget (OMB) Circular A-11 defines risk as “the effect of uncertainty on objectives”. An organization’s mission and business objectives can be impacted by such effects, and must be managed at various levels within the organization. This report highlights aspects of cybersecurity risk management (CSRM) inherent to enterprises, organizations, and systems.

The Cybersecurity and Infrastructure Security Agency (CISA) is committed to leading the response to cybersecurity incidents and vulnerabilities to safeguard the nation's critical assets. Section 6 of Executive Order 14028 directed DHS, via CISA, to “develop a standard set of operational procedures (playbook) to be used in planning and conducting cybersecurity vulnerability and incident response activity respecting Federal Civilian Executive Branch (FCEB) Information Systems.

Electricity is essentially the lifeblood of the modern, technological society that we enjoy, for without it, the devices and machinery that enable our economy would not be able to function. The US grid is aging, and one of the tools for modernizing the system is the incorporation of computerized systems that allow for the rapid monitoring and control of the equipment used in the grid. Connecting these systems to the internet has increased the ability to remotely control aspects of the grid, but this has come with increasing concern for the grid’s cybersecurity.

Es una guía con consejos para tener vidas digitales más seguras y para conocer las ciberamenazas más comunes y cómo detectarlas.

This updated advisory is in response to the increase of ransomware attacks in recent months against critical US infrastructure, such as the May 2021 ransomware attack that disrupted the operations of Colonial Pipeline, the largest pipeline system for refined oil products in the United States. This attack led to widespread gasoline shortages that affected tens of millions of Americans. Other recent targets include entities in the manufacturing, legal services, insurance, financial services, health care, energy, and food production sectors.

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of US industry, federal agencies, and the broader public. Our work ranges from specific information that can be put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of US industry, federal agencies, and the broader public. Our work ranges from specific information that can be put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

General efforts to help prevent ransomware attacks include maintaining offline, encrypted backups of data and regularly testing your backups; creating, maintaining, and exercising a basic cyber incident response plan, resiliency plan, and associated communications plan, and more.

The NFT Handbook is a detailed guide on how to create, sell, and buy non-fungible tokens without the need for a technical background. Learn exactly what NFTs are, how they evolved, and why they have value.

Digital transformation and cyber insecurity are two global trends that converged in 2020. The COVID-19 pandemic has accelerated these global challenges into paradigm-changing realities that threaten to destroy every company, government, network, and individual. But what can be done to embrace the accelerating digital disruption and at the same time manage the explosion of vulnerabilities, cyber threats, and business risks?

Ransomware will cost companies around the world $20 billion in 2021. Prepare for, recognise, and survive ransomware attacks with this essential guide, which sets out clearly how ransomware works, to help business leaders better understand the strategic risks, and explores measures that can be put in place to protect the organisation.

This audiobook is a comprehensive cyber security implementation manual which gives practical guidance on the individual activities identified in the IT Governance Cyber Resilience Framework (CRF) that can help organisations become cyber resilient and combat the cyber threat landscape.

We all get the calls. We all get the emails. But can you tell the difference between a legitimate call or email...and a scam? Scammers are working harder than ever before to take advantage of you, your identity, and your money. With some guidance and perspective, A Cure for the Common Scam will help walk you through steps you can take to protecting yourself against the common scams of today. Explained in nontechnical, straightforward, and practical terms. You do not have to fall victim to the schemes of scammers.

In The Art of Attack: Attacker Mindset for Security Professionals, Maxie Reynolds untangles the threads of a useful, sometimes dangerous, mentality. The book shows ethical hackers, social engineers, and pentesters what an attacker mindset is and how to and how to use it to their advantage. 

This book gives a complete insight into how data and privacy work in the modern world, and how automation can threaten your livelihood. With the development of more and more technology, we must be more cautious about how it influences our personal, social, and work lives.

In 8 Steps to Better Security: A Simple Cyber Resilience Guide for Business, cybersecurity researcher and writer Kim Crawley delivers a grounded and practical road map to cyber resilience in any organization. Offering you the lessons she learned while working for major tech companies like Sophos, AT&T, BlackBerry Cylance, Tripwire, and Venafi, Crawley condenses the essence of business cybersecurity into eight steps.    

The reach of Corporations into our lives via cards and apps has never been greater; many of us rarely use cash these days. But what we’re told is a natural and inevitable move is actually the work of powerful interests. And the great battle of our time is the battle for ownership of the...

The vast US network of natural gas, crude oil, and refined product pipelines is integral to US energy supply and also has vital links to other critical infrastructure such as power plants and airports. This network is vulnerable to cyberattacks. Pipeline companies employ technologies which enable them to achieve business and operational efficiencies, but these technologies are susceptible to cybersecurity risks - and these risks have been growing. The May 2021 ransomware attack against the Colonial Pipeline, which disrupted gasoline supplies throughout the East Coast.

Protecting an MSP is hard work. But having an easy process to evaluate your security, be more effective, and grow your business all at the same time is indispensable to growing your MSP. Too many MSPs often focus on only a small piece of the problem (hiring a guru or shiny new tools) and miss out on the critical fundamentals keeping them and their clients vulnerable to major attacks and network breaches.

The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have observed an increase in highly impactful ransomware attacks occurring on holidays and weekends - when offices are normally closed - in the United States, as recently as the Fourth of July holiday in 2021. The FBI and CISA are sharing the below information to provide awareness to be especially diligent in your network defense practices in the run up to holidays and weekends.

Facebook lleva varios años en el ojo del huracán. Desde que estalló el escándalo de Cambridge Analytica y la campaña de desinformación rusa intenta esquivar una avalancha de controversias y demandas relacionadas con su estrategia empresarial. Mientras el gigante tecnológico presume de crear un mundo interconectado en el que poder expresarse con libertad, viola la privacidad de sus usuarios y propaga una epidemia de desinformación tóxica y dañina.

Todo lo que no quieres pero necesitas saber sobre el poder, la economía, la sociedad y las telecomunicaciones en la era de la información.

Take this chance to learn about cybersecurity, because the criminals hiding behind the screen are ready to strike - and you won’t see them coming! If you have felt exposed online, then this book is for you. In this book, I take you on a journey and show you how you are exposed in the cyberworld. Together, we will learn about the fundamentals of cybersecurity and discover the tools that hackers use to invade your privacy, steal your information, and hold you at ransom.

From the former news policy lead at Google, an “informative and often harrowing wake-up call” (Publishers Weekly) that explains the high-stakes global cyberwar brewing between Western democracies and the authoritarian regimes of China and Russia that could potentially crush democracy. From...

You have seen Robert A. Jensen—you just never knew it. As the owner of the world’s largest disaster management company, he has spent most of his adult life responding to tragedy. From the Oklahoma City bombing, 9/11, and the Bali bombings, to the 2004 South Asian Tsunami, Hurricane Katrina, the 2010 Haitian Earthquake, and the Grenfell Tower Fire, Jensen has been at the practical level of international incidents, assisting with the recovery of bodies, identifying victims, and repatriating and returning their personal effects to the surviving family members.

An expert on China’s global infrastructure expansion provides an urgent look at the battle to connect and control tomorrow’s networks. From the ocean floor to outer space, China’s Digital Silk Road aims to wire the world and rewrite the global order. Taking readers on a journey inside...

Summer 2017: computer screens go blank in 150 countries. The NHS is so affected that hospitals can only take in patients for A&E. Ambulances are grounded. Computer screens turn on spontaneously and warnings appear. Employees who desperately pull the plugs are too late. Restarting is pointless; the computers are locked. And now the attackers ask each victim for money. This is hijack software. It is just one example of how vulnerable the digital world has made us.

The National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), and Federal Bureau of Investigation (FBI) assess that People’s Republic of China's state-sponsored malicious cyberactivity is a major threat to the US and allied cyberspace assets.

The National Institute of Standards and Technology (NIST) develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of US industry, federal agencies, and the broader public. Our work ranges from specific information that can be put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

The following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients in order to protect against cyber threats. This data is provided to help cybersecurity professionals and system administrators guard against the persistent malicious actions of cyber actors.