ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ / 2022å¹´9æœˆ5æ—¥ - ã¯ã¦ãªãƒ

æœ¬ç•ªç’°å¢ƒã§å®Ÿè·µã—ãŸã„AWSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹26é¸

æœ¬æ–‡ã®å†…å®¹ã¯ã€2022å¹´8æœˆ29æ—¥ã«Alejandro VillanuevaãŒæŠ•ç¨¿ã—ãŸãƒ–ãƒã‚°(https://sysdig.com/blog/26-aws-security-best-practices/)ã‚’å…ƒã«æ—¥æœ¬èªžã«ç¿»è¨³ãƒ»å†æ§‹æˆã—ãŸå†…å®¹ã¨ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ Well-architected ãƒ•ãƒ¬ãƒ¼ãƒ ãƒ¯ãƒ¼ã‚¯ã®æœ€ã‚‚é‡è¦ãªæŸ±ã®1ã¤ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§ã™ã€‚ã—ãŸãŒã£ã¦ã€AWS ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã«å¾“ã£ã¦ã€ä¸æ¸¬ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®äº‹æ…‹ã‚’é˜²æ¢ã™ã‚‹ã“ã¨ãŒé‡è¦ã§ã™ã€‚ ã•ã¦ã€ã‚ãªãŸã¯å•é¡Œã‚’è§£æ±ºã™ã‚‹ãŸã‚ã«ã€ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚’æ§‹ç¯‰ã—ã¦ãƒ›ã‚¹ãƒˆã™ã‚‹ç›®çš„ã§AWSã«ç€ç›®ã—ã¾ã—ãŸã€‚ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œæˆã—ã€ã‚³ãƒ¼ãƒ’ãƒ¼ã‚’æ·¹ã‚Œã¦ãƒ¯ãƒ¼ã‚¯ã‚¹ãƒ†ãƒ¼ã‚·ãƒ§ãƒ³ã«åº§ã‚Šã€è¨è¨ˆã€ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€ãƒ“ãƒ«ãƒ‰ã€ãƒ‡ãƒ—ãƒã‚¤ã‚’ã™ã‚‹æº–å‚™ã¯ã™ã¹ã¦æ•´ã„ã¾ã—ãŸã€‚ã—ã‹ã—ã€ãã†ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã®é‹ç”¨æ€§ã€å®‰å…¨æ€§ã€ä¿¡é ¼æ€§ã€ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã€è²»ç”¨å¯¾åŠ¹æžœã‚’é«˜ã‚ã‚‹ã«ã¯ã€å¤šã

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Report unsafe site | Microsoft Security Intelligence

Attention: We have transitioned to a new AAD or Microsoft Entra ID from the week of May 20, 2024. In case your tenant requires admin consent, please refer to this document located at Overview of user and admin consent - Microsoft Entra ID | Microsoft Learn and grant access to App ID: 6ba09155-cb24-475b-b24f-b4e28fc74365 with graph permissions for Directory.Read.All and User.Read for continued acce

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

ã‚²ã‚¹ãƒˆãƒ–ãƒã‚° - SIOS SECURITY BLOG

https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ WordPress 5.0.0 Remote Code Execution https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8943 WordPressã«ãƒªãƒ¢ãƒ¼ãƒˆã§ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹è„†å¼±æ€§ãŒæœ‰ã‚‹ã‚ˆã†ã§ã™ã€‚è©³ã—ã„æƒ…å ±ã¯ã€ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰æƒ…å ±ãŒä¸ŠãŒã£ã¦ããŸã‚‰è„†å¼±æ€§ãƒ–ãƒã‚°ã§å…¬é–‹ã—ã¾ã™ã€‚

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

ã‚²ã‚¹ãƒˆãƒ–ãƒã‚° - SIOS SECURITY BLOG

https://blog.ripstech.com/2019/wordpress-image-remote-code-execution/ WordPress 5.0.0 Remote Code Execution https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8942 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8943 WordPressã«ãƒªãƒ¢ãƒ¼ãƒˆã§ã‚³ãƒ¼ãƒ‰ã‚’å®Ÿè¡Œã§ãã‚‹è„†å¼±æ€§ãŒæœ‰ã‚‹ã‚ˆã†ã§ã™ã€‚è©³ã—ã„æƒ…å ±ã¯ã€ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‹ã‚‰æƒ…å ±ãŒä¸ŠãŒã£ã¦ããŸã‚‰è„†å¼±æ€§ãƒ–ãƒã‚°ã§å…¬é–‹ã—ã¾ã™ã€‚

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

GitHub - Humoud/Analyziz: A workbench for initial analysis of malicious domains, urls, and malware samples.

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Interpretable Machine Learning

Interpretable Machine Learning A Guide for Making Black Box Models Explainable Christoph Molnar 2023-08-21 Summary Machine learning has great potential for improving products, processes and research. But computers usually do not explain their predictions which is a barrier to the adoption of machine learning. This book is about making machine learning models and their decisions interpretable. Afte

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Signal Spam â‹† Signal Spam

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Report a Phishing Page

Thank you for helping us keep the web safe from phishing sites. If you believe you've encountered a page designed to look like another page in an attempt to steal users' personal information, please complete the form below to report the page to the Google Safe Browsing team. When you submit sites to us, some account and system information will be sent to Google. We will use the information you sub

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Google Safe Browsing: Report a Malware Page

Please complete the form below to report a site that you suspect contains malicious software. When you submit sites to us, some account and system information will be sent to Google. We will use the information you submit to protect Google products, infrastructure, and users from potentially harmful content. If we determine that a site violates Googleâ€™s policies, we may update the site's status in

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Interpretable Machine Learning

Interpretable Machine Learning A Guide for Making Black Box Models Explainable. Christoph Molnar 2021-05-31 è¦ç´„ æ©Ÿæ¢°å¦ç¿’ã¯ã€è£½å“ã‚„å‡¦ç†ã€ç ”ç©¶ã‚’æ”¹å–„ã™ã‚‹ãŸã‚ã®å¤§ããªå¯èƒ½æ€§ã‚’ç§˜ã‚ã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã¯é€šå¸¸ã€äºˆæ¸¬ã®èª¬æ˜Žã‚’ã—ã¾ã›ã‚“ã€‚ã“ã‚ŒãŒæ©Ÿæ¢°å¦ç¿’ã‚’æŽ¡ç”¨ã™ã‚‹éšœå£ã¨ãªã£ã¦ã„ã¾ã™ã€‚ æœ¬æ›¸ã¯ã€æ©Ÿæ¢°å¦ç¿’ãƒ¢ãƒ‡ãƒ«ã‚„ã€ãã®åˆ¤æ–ã‚’è§£é‡ˆå¯èƒ½ãªã‚‚ã®ã«ã™ã‚‹ã“ã¨ã«ã¤ã„ã¦æ›¸ã‹ã‚Œã¦ã„ã¾ã™ã€‚ è§£é‡ˆå¯èƒ½æ€§ã¨ã¯ä½•ã‹ã‚’èª¬æ˜Žã—ãŸå¾Œã€æ±ºå®šæœ¨ã€æ±ºå®šè¦å‰‡ã€ç·šå½¢å›žå¸°ãªã©ã®å˜ç´”ã§è§£é‡ˆå¯èƒ½ãªãƒ¢ãƒ‡ãƒ«ã«ã¤ã„ã¦å¦ã³ã¾ã™ã€‚ ãã®å¾Œã®ç« ã§ã¯ã€ç‰¹å¾´é‡ã®é‡è¦åº¦ (feature importance)ã‚„ALE(accumulated local effects)ã‚„ã€å€‹ã€…ã®äºˆæ¸¬ã‚’èª¬æ˜Žã™ã‚‹LIMEã‚„ã‚·ãƒ£ãƒ¼ãƒ—ãƒ¬ã‚¤å€¤ã®ã‚ˆã†ãªãƒ¢ãƒ‡ãƒ«ã«éžä¾å˜ãªæ‰‹æ³•(mo

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Recon_Web/Recon.txt at main Â· alexpeleg/Recon_Web

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

aws

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

GitHub - GhostWolfLab/Ghost-OSINT: Ghost OSINT æ˜¯ä¸€ä¸ªåŸºäºŽSpiderFootäºŒæ¬¡å¼€å‘çš„å¼€æºOSINTè‡ªåŠ¨åŒ–å·¥å…·

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

Digital Risk Management | ANSSI

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

è„†å¼±æ€§ã‚¹ã‚³ã‚¢ã«æƒ‘ã‚ã•ã‚Œã¦ã‚‹ï¼ŸCVSSã®æ·±åˆ»åº¦ã‚’ç†è§£ã—ã€åŠ¹æžœçš„ã«æ´»ç”¨ã™ã‚‹

æœ¬æ–‡ã®å†…å®¹ã¯ã€2022å¹´4æœˆ20æ—¥ã«Miguel HernÃ¡ndezãŒæŠ•ç¨¿ã—ãŸãƒ–ãƒã‚°Are vulnerability scores misleading you? Understanding CVSS severity and using them effectively(https://sysdig.com/blog/vulnerability-score-cvss-meaning/ï¼‰ã‚’å…ƒã«æ—¥æœ¬èªžã«ç¿»è¨³ãƒ»å†æ§‹æˆã—ãŸå†…å®¹ã¨ãªã£ã¦ãŠã‚Šã¾ã™ã€‚ è„†å¼±æ€§ã¯ã©ã“ã«ã§ã‚‚ã‚ã‚Šã¾ã™ã€‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å°‚é–€å®¶ã«ã¨ã£ã¦ã€ã“ã‚Œã‚‰ã®è„†å¼±æ€§ã‚’å¤§è¦æ¨¡ã«èª¿æŸ»ã—ã€ç·©å’Œã—ã€æ˜¯æ£ã™ã‚‹ã“ã¨ã¯å¤§å¤‰ãªä½œæ¥ã§ã™ã€‚ã©ã®çµ„ç¹”ã‚‚ã€ã™ã¹ã¦ã®è„†å¼±æ€§ã‚’è¦‹ã¤ã‘ã¦ä¿®æ£ã™ã‚‹èƒ½åŠ›ã‚’æŒã£ã¦ã„ã‚‹ã‚ã‘ã§ã¯ãªã„ã“ã¨ã‚’å¿ƒã«ç•™ã‚ã¦ãŠã„ã¦ãã ã•ã„ã€‚é‡è¦ãªã®ã¯ã€è„†å¼±æ€§ã¨ã¯ä½•ã‹ã‚’ç†è§£ã—ã€CVSSã‚¹ã‚³ã‚¢ã®æ„å‘³ã‚’è§£é‡ˆã—ã€åˆ¶ç´„ã•ã‚ŒãŸæ™‚é–“åˆ¶é™ã‚„ç´æœŸå†…ã§ãƒªã‚½ãƒ¼ã‚¹ã®å„ªå…ˆé †ä½ä»˜ã‘ã¨æœ‰åŠ¹åˆ©

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

è‡ªç”±æ°‘ä¸»å…šã«å¯¾ã™ã‚‹ã”æ„è¦‹ã‚’ãŠå¯„ã›ãã ã•ã„ã€‚ çš†ã•ã¾ã‹ã‚‰å¯„ã›ã‚‰ã‚ŒãŸå†…å®¹ã¯ã€ã™ã¹ã¦ç›®ã‚’é€šã—ã¦ã€å…šã®è²´é‡ãªè³‡æ–™ã¨ã—ã¦å‚è€ƒã«ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ ãªãŠã€ä»¥ä¸‹ã®ãƒ•ã‚©ãƒ¼ãƒ ã§ã€â€»å°ã®é …ç›®ã¯å…¥åŠ›å¿…é ˆã¨ãªã£ã¦ã„ã¾ã™ã€‚æ¼ã‚Œã®ãªã„ã‚ˆã†ã«å…¥åŠ›ã—ã¦ãã ã•ã„ã€‚ â€»å–æã€å‡ºæ¼”ã€è¬›æ¼”ä¾é ¼ç‰ã€ã”æ„è¦‹ä»¥å¤–ã¯ã“ã¡ã‚‰ã«å…¥åŠ›ã—ãªã„ã‚ˆã†ãŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ â—æ”¿æ¨©å…¬ç´„ã¯ãŠé€ã‚Šã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ ãŠè¿‘ãã®é¸æŒ™äº‹å‹™æ‰€ã‹è‡ªæ°‘å…šéƒ½é“åºœçœŒé€£ã«ã¦é…å¸ƒã—ã¦ãŠã‚Šã¾ã™ã®ã§ã€ãŠå•ã„åˆã‚ã›ãã ã•ã„ã€‚

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

GitHub - lele8/mscan: Forkè¯¥é¡¹ç›®çš„è¯·è‡ªè¡Œåˆ é™¤å˜å‚¨åº“ï¼Œå·¥å…·ä¸å†æ›´æ–°åˆ°GitHubï¼Œè‹¥æ‚¨ä¹‹å‰ä¸‹è½½ç¼–è¯‘è¯·åœ¨éµå®ˆã€Šä¸åŽäººæ°‘å…±å’Œå›½ç½‘ç»œå®‰å…¨æ³•ã€‹å‰æä¸‹ä½¿ç”¨ï¼Œå¦‚æ‚¨åœ¨ä½¿ç”¨æœ¬å·¥å…·çš„è¿‡ç¨‹ä¸å˜åœ¨ä»»ä½•éžæ³•è¡Œä¸ºï¼Œæ‚¨éœ€è‡ªè¡Œæ‰¿æ‹…ç›¸åº”åŽæžœï¼Œä½œè€…å°†ä¸æ‰¿æ‹…ä»»ä½•æ³•å¾‹åŠè¿žå¸¦è´£ä»»ã€‚

ishideo 2022/09/05

ãƒªãƒ³ã‚¯

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

2022å¹´9æœˆ5æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17ä»¶)

æœ¬ç•ªç’°å¢ƒã§å®Ÿè·µã—ãŸã„AWSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ™ã‚¹ãƒˆãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹26é¸

Report unsafe site | Microsoft Security Intelligence

ã‚²ã‚¹ãƒˆãƒ–ãƒã‚° - SIOS SECURITY BLOG

ã‚²ã‚¹ãƒˆãƒ–ãƒã‚° - SIOS SECURITY BLOG

GitHub - Humoud/Analyziz: A workbench for initial analysis of malicious domains, urls, and malware samples.

Interpretable Machine Learning

Signal Spam â‹† Signal Spam

Report a Phishing Page

Google Safe Browsing: Report a Malware Page

Interpretable Machine Learning

Recon_Web/Recon.txt at main Â· alexpeleg/Recon_Web

aws

GitHub - GhostWolfLab/Ghost-OSINT: Ghost OSINT æ˜¯ä¸€ä¸ªåŸºäºŽSpiderFootäºŒæ¬¡å¼€å‘çš„å¼€æºOSINTè‡ªåŠ¨åŒ–å·¥å…·

Digital Risk Management | ANSSI

è„†å¼±æ€§ã‚¹ã‚³ã‚¢ã«æƒ‘ã‚ã•ã‚Œã¦ã‚‹ï¼ŸCVSSã®æ·±åˆ»åº¦ã‚’ç†è§£ã—ã€åŠ¹æžœçš„ã«æ´»ç”¨ã™ã‚‹

è‡ªæ°‘å…šã¸ã®ã”æ„è¦‹ãƒ•ã‚©ãƒ¼ãƒ | ã”æ„è¦‹ãƒ•ã‚©ãƒ¼ãƒ | è‡ªç”±æ°‘ä¸»å…š

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

2022å¹´9æœˆ5æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17ä»¶)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

2022å¹´9æœˆ5æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (17ä»¶)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬2é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬1é€±ï¼‰

æœˆé–“ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´11æœˆï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹