###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2019/10/7 ~ 2019/10/11

1.重大弱點漏洞/後門/Exploit/Zero Day
英國政府警告：Pulse Secure、Palo Alto和Fortinet的VPN存在APT攻擊漏洞
https://www.ithome.com.tw/news/133480

Unpatched VPN Servers Targeted by Nation-State Attackers
https://www.bankinfosecurity.com/unpatched-vpn-servers-targeted-by-nation-state-attackers-a-13202

Vulnerabilities exploited in VPN products used worldwide
https://www.ncsc.gov.uk/news/alert-vpn-vulnerabilities

Palo Alto PAN-OS 遠端執行程式碼漏洞
https://www.hkcert.org/my_url/zh/alert/19072402

Fortinet FortOS 多個漏洞
https://www.hkcert.org/my_url/zh/alert/19100802

Juniper Networks 產品安全性漏洞
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0074

IBM WebSphere Application 多個漏洞
https://www.auscert.org.au/bulletins/ESB-2019.3731/
https://www.auscert.org.au/bulletins/ESB-2019.3728/

熱門UI設計工具Figma的擴充套件系統存在漏洞，官方抽換底層基礎架構
https://www.ithome.com.tw/news/133492

Notepad++ (x64) before 7.7 CVE-2019-16294 – Remote Code Execution
https://0day.life/exploits/0day-940.html

PHP 7.3 disable_functions Bypass
https://packetstormsecurity.com/files/154728/php7073-bypass.txt

Linux/x86 NOT + XOR-N + Random Encoded /bin/sh Shellcode
https://packetstormsecurity.com/files/154727/linuxnotxorn-shellcode.txt

Hisilicon Hi3518 HD Camera Remote Configuration Disclosure
https://packetstormsecurity.com/files/154720/Hi3518.pl.txt

Slackware Security Advisory - tcpdump Updates
https://packetstormsecurity.com/files/154710/SSA-2019-274-01.txt

DHS and FDA warn about much broader impact of Urgent/11 vulnerabilities
https://www.zdnet.com/article/dhs-and-fda-warn-about-much-broader-impact-of-urgent11-vulnerabilities/#ftag=RSSbaffb68

Fedora drops 32-bit Linux
https://www.zdnet.com/article/fedora-drops-32-bit-linux/#ftag=RSSbaffb68

macOS Catalina beta版可先爽玩Apple Arcade
https://tw.lifestyle.appledaily.com/gadget/20191005/J7YNUDNVO4Q3HWORSRV6ISPD6A/

7-Year-Old Critical RCE Flaw Found in Popular iTerm2 macOS Terminal App
https://thehackernews.com/2019/10/iterm2-macos-terminal-rce.html

SA115 : Multiple nginx DNS resolver vulnerabilities
https://support.symantec.com/us/en/article.SYMSA1352.html

SA100 : Apache Tomcat Vulnerabilities
https://support.symantec.com/us/en/article.SYMSA1329.html

思科交換機新漏洞被發現，恐引起新一輪全球掃描
https://anquan.baidu.com/article/922

Cisco 多個產品發布多個安全更新
https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-72541

微軟再發佈IE漏洞例外修補程式，所有版本都要安裝
https://www.ithome.com.tw/news/133453

Microsoft Releases October 2019 Patch Tuesday Updates
https://thehackernews.com/2019/10/microsoft-patch-tuesday-october.html

Microsoft October 2019 Patch Tuesday is a light one
https://www.zdnet.com/article/microsoft-october-2019-patch-tuesday-is-a-light-one/#ftag=RSSbaffb68

Microsoft 產品存在安全性弱點
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1367

Windows 10 Mobile新漏洞曝光，微軟放棄修復
https://tech.sina.com.cn/mobile/n/n/2019-10-11/doc-iicezuev1362480.shtml

SharePoint 企業伺服器 2016 的安全更新說明：2019 年 10 月 8 日
https://support.microsoft.com/zh-tw/help/4484111/security-update-for-sharepoint-enterprise-server-2016

分析多款D-Link路由器中的未授權RCE漏洞
https://www.anquanke.com/post/id/187923

D-Link router remote code execution vulnerability will not be patched
https://www.zdnet.com/article/d-link-routers-contain-remote-code-execution-vulnerability/#ftag=RSSbaffb68

D-Link -- dhp-1565_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-16920

四款D-Link路由器發現無法修復的漏洞唯一選擇是棄之不用
https://www.cnbeta.com/articles/tech/897255.htm

D-Link路由器曝出RCE漏洞，牽涉多個型號
https://nosec.org/home/detail/3020.html

rsyslog
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-14454

How to Prioritize Vulnerability Patching
https://www.bankinfosecurity.asia/how-to-prioritize-vulnerability-patching-a-13200

Zero-day published for old Joomla CMS versions
https://www.zdnet.com/article/zero-day-published-for-old-joomla-cms-versions/#ftag=RSSbaffb68

vBulletin Releases Patch Update for New RCE and SQLi Vulnerabilities
https://thehackernews.com/2019/10/vBulletin-hacking-exploit.html

Adobe Suspends Accounts for All Venezuela Users Citing U.S. Sanctions
https://thehackernews.com/2019/10/adobe-venezuela-sanctions.html

Thunderbird to add built-in support for OpenPGP email encryption standard
https://www.zdnet.com/article/thunderbird-to-add-built-in-support-for-openpgp-email-encryption-standard/#ftag=RSSbaffb68

Intel處理器再爆MDS資安漏洞，更新處理器微碼犧牲效能換取安全
https://buy.line.me/u/article/96367

Android 多個漏洞
https://www.hkcert.org/my_url/zh/alert/19100902

2.銀行/金融/保險/證券/支付系統/ 新聞及資安
強化數位帳戶 迎戰純網銀
https://money.udn.com/money/story/9740/3980473

違反證券法 又傳台灣分析師在上海遭收押 6人限制出境
https://news.cnyes.com/news/id/4388984

手握信用評分執照AISP通吃31國 CRIF集團 歐洲開放銀行先驅
https://www.chinatimes.com/newspapers/20191007000220-260202?chdtv

降低純網銀流動風險 金管會將建置即時監理系統
https://udn.com/news/story/7239/4090726

鯰魚有不同管法 金管會強化純網銀六大管理
https://www.chinatimes.com/realtimenews/20191007003104-260410?chdtv

3家純網銀來襲　公股銀免驚！財部：善用自身業務與優勢
https://www.ettoday.net/news/20191008/1552854.htm

台資被誤認成中資！ 上海商銀在香港遭攻擊 金管會說明
https://ec.ltn.com.tw/article/breakingnews/2940657

兆豐金：純網銀與實體銀行，5年內不會有競合問題
http://bit.ly/2OBO1cM

Magecart: New Research Shows the State of a Growing Threat
https://www.riskiq.com/blog/external-threat-management/magecart-growing-threat/

Old Magecart Domains are Being Bought Up for Monetization
https://www.riskiq.com/blog/labs/magecart-reused-domains/

3.電子支付/電子票證/行動支付/ pay/新聞及資安
財金公司建行動支付高速路
https://udn.com/news/story/7239/4086695

掃碼支付 最快年底共用TWQR
https://udn.com/news/story/7239/4086532

「台灣Pay」市占率低迷 財金董座：不以市場競爭為目的
https://www.cmmedia.com.tw/home/articles/17901

電子支付好夯使用人數衝上568萬　一卡通最多人用穩坐冠軍寶座
https://www.ettoday.net/news/20191005/1550457.htm

三星Samsung Pay推出47國跨境轉帳、金融預付卡
https://news.cnyes.com/news/id/4390432

APP綁信用卡消費爭議　金管會建議2步驟解決
http://bit.ly/2Olhp73

台灣不適合行動支付？他曝致命陋習
https://www.chinatimes.com/hottopic/20191005001678-260804?chdtv

北捷e-Shop試辦4個月 支援11種支付購票卡
http://bit.ly/35lb8ya

個資存三方外洩有難度　專家：交換過程也可遭駭客鎖定
https://tw.news.appledaily.com/life/realtime/20191008/1645595/

日本10%消費者稅一週 電子支付系統大當機
http://bit.ly/2ATmnQr

Samsung Pay Cash now available: Budget your spending with this prepaid virtual card
https://zd.net/2AYKDRx

4.虛擬貨幣/區塊鍊相關新聞及資安
讓手機變身加密貨幣離線錢包！Parity發布新版本應用程式
http://news.knowing.asia/news/a17be8f5-84ef-4492-8bb4-99cdd40434bc

日本金融廳發布「基金投資加密資產」準則草案！10 月底前聽取各界意見
https://news.cnyes.com/news/id/4390614

拯救10%的資產安全！MakerDAO修復多抵押品系統重要漏洞
http://news.knowing.asia/news/3e7ad17e-8bfc-41c8-a14d-5cb6feb77e82

郭台銘學院要唸什麼？郭董首推台版Libra
https://udn.com/news/story/7238/4085132?from=udn-catelistnews_ch2

PayPal宣佈退出虛擬貨幣Libra　衝擊臉書推動加密貨幣計劃
https://www.ettoday.net/news/20191005/1550569.htm

加密貨幣持續撼動銀行系統！預計未來10年美國銀行將裁員20萬人
http://news.knowing.asia/news/4bf64ad2-05ac-452b-9410-42bfa539c989

比特幣閃電網路的規格通過了首個「形式化驗證」的安全性測試
http://bit.ly/33loSre

PayPal drops out of Facebook's Libra
https://www.atmmarketplace.com/news/paypal-drops-out-of-facebooks-libra/

PayPal backs out: what does this mean for the future of Facebook’s Libra cryptocurrency
https://www.zdnet.com/article/paypal-backs-out-what-does-this-mean-for-the-future-of-facebooks-libra-cryptocurrency/#ftag=RSSbaffb68

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式
駭客專挑企業下手！　無檔案式攻擊暴增265％
https://tw.news.appledaily.com/life/realtime/20191005/1644095/

疑似俄國駭客發展新式RAT，可突破HTTPS加密追蹤上網行蹤
https://www.ithome.com.tw/news/133468

駭客攻擊新手法：用木馬程式破解 HTTPS 加密，透過 Chrome 監視你的上網資料
http://bit.ly/35mNFN7

GalactiCrypter勒索軟體有解了
https://www.ithome.com.tw/news/133476

烏茲別克斯坦黑客組織犯低級錯誤在有卡巴斯基的機器上測試病毒被披露
https://www.cnbeta.com/articles/tech/897049.htm

雲端電子商務平台Volusion的結帳頁面被注入惡意程式
https://ithome.com.tw/news/133560

新的 Muhstik Ransomware 瞄準 NAS 進行攻擊
https://www.twcert.org.tw/tw/cp-104-3009-9f878-1.html

Hackers breach Volusion and start collecting card details from thousands of sites
https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/

Sesame Street Store & Volusion customers are comprised; how the cookie monster is stealing credit card info
http://bit.ly/2AYE4yd

Researchers Say They Uncovered Uzbekistan Hacking Operations Due to Spectacularly Bad OPSEC
https://www.vice.com/en_us/article/3kx5y3/uzbekistan-hacking-operations-uncovered-due-to-spectacularly-bad-opsec

Hospitals in US, Australia hobbled by ransomware
https://www.welivesecurity.com/2019/10/03/hospitals-us-australia-ransomware/

The Week in Ransomware - October 4th 2019 - That's all Folks
https://www.bleepingcomputer.com/news/security/the-week-in-ransomware-october-4th-2019-thats-all-folks/

2019-10-03 - DATA DUMP: CLASSIC-STYLE HANCITOR MALSPAM
https://www.malware-traffic-analysis.net/2019/10/03/index.html

Just How Widespread Is Ransomware Epidemic
https://www.bankinfosecurity.com/just-how-widespread-ransomware-epidemic-a-13183

Malware Most Foul: Emotet, Trickbot, Cryptocurrency Miners
https://www.bankinfosecurity.com/malware-most-foul-emotet-trickbot-cryptocurrency-miners-a-13181

If a Bank Sends You Your Passwords via a Text Message, This Android Trojan Could Steal Them
https://www.cyclonis.com/if-bank-sends-passwords-via-text-this-android-trojan-steal-them/

Malware Botnet of $160 planned to rob Crypto from 72,000 Devices
https://orlanko.com/2019/10/04/malware-botnet-of-160-planned-to-rob-crypto-from-72000-devices/

Antivirus Firm, ESET, Reveals Cryptojacking Trojan Targeting Cryptocurrency Users
https://bitcoinexchangeguide.com/antivirus-firm-eset-reveals-cryptojacking-trojan-targeting-cryptocurrency-users/

ANDROID: THIS MALWARE HAS STOLEN MONEY FROM 800 000 BANK ACCOUNTS SINCE 2016
https://www.gizchina.com/2019/10/04/android-this-malware-has-stolen-money-from-800-000-bank-accounts-since-2016/

IC3 Issues Alert on Ransomware
https://www.us-cert.gov/ncas/current-activity/2019/10/04/ic3-issues-alert-ransomware

HIGH-IMPACT RANSOMWARE ATTACKS THREATEN U.S. BUSINESSES AND ORGANIZATIONS
https://www.ic3.gov/media/2019/191002.aspx

Casbaneiro: Dangerous cooking with a secret ingredient
https://www.welivesecurity.com/2019/10/03/casbaneiro-trojan-dangerous-cooking/

More Hidden App Malware Found on Google Play with over 2.1 Million Downloads
https://www.symantec.com/blogs/threat-intelligence/hidden-adware-google-play

Ramnit Targets Japanese Shoppers, Aiming at Top Fashion Brands
https://securityintelligence.com/posts/ramnit-targets-japanese-shoppers-aiming-at-top-fashion-brands/

2019-10-05 - TRAFFIC ANALYSIS EXERCISE
https://www.malware-traffic-analysis.net/2019/10/05/index.html

HildaCrypt Ransomware Developer Releases Decryption Keys
https://www.bleepingcomputer.com/news/security/hildacrypt-ransomware-developer-releases-decryption-keys/

DCH Hospital Pays Ryuk Ransomware for Decryption Key
https://www.bleepingcomputer.com/news/security/dch-hospital-pays-ryuk-ransomware-for-decryption-key/

Report: Android Banking Botnet Targeted Russians
https://www.bankinfosecurity.com/report-android-banking-botnet-targeted-russians-a-13201

GEOST BOTNET. THE STORY OF THE DISCOVERY OF A NEW ANDROID BANKING TROJAN FROM AN OPSEC ERROR
http://public.avast.com/research/VB2019-Garcia-etal.pdf

White-hat hacks Muhstik ransomware gang and releases decryption keys
https://www.zdnet.com/article/white-hat-hacks-muhstik-ransomware-gang-and-releases-decryption-keys/#ftag=RSSbaffb68

Security Advisory for Muhstik Ransomware
https://www.qnap.com/en-us/security-advisory/NAS-201910-02

New sextortion campaign taps altcoins to avoid detection
https://www.zdnet.com/article/new-sextortion-campaign-taps-altcoins-to-avoid-detection/#ftag=RSSbaffb68

B.行動安全 / iPhone / Android /穿戴裝置 /App
Android版WhatsApp含有遠端攻擊漏洞，波及全球數億用戶
https://www.ithome.com.tw/news/133445

攻擊者宣稱可利用0day漏洞完全控制Android手機
https://www.cnbeta.com/articles/tech/895947.htm

安卓再曝零日漏洞，谷歌/三星/華為/小米等多款手機可被控制
https://www.ithome.com/0/448/676.htm

Android 系統曝重大漏洞，手機恐遭駭控制！Google 公佈14款機型清單
https://3c.ltn.com.tw/news/38178

谷歌發佈高危漏洞，18款安卓手機機型受影響
http://finance.sina.com/bg/usstock/usstock_news/thepaper/2019-10-07/doc-ifzpqvem1946556.shtml

國際特赦組織調查！16 款通訊軟體保密排行，WeChat 零分出局
https://3c.ltn.com.tw/news/27035

WhatsApp爆漏洞 一張GIF圖就能讓駭客控制帳戶
https://www.chinatimes.com/realtimenews/20191008003797-260412?chdtv

紐約市執法部購以色列程式　解鎖iPhone取證據
https://inews.hket.com/article/2468182

歐盟警告：5G網路供應商單一 恐受國家支持駭客攻擊
https://ec.ltn.com.tw/article/breakingnews/2942544

愛瘋傳災情！「警示訊息」狂跳關不掉
http://bit.ly/2M6O7I5

SimJacker 漏洞 揭重大私隱危機
http://bit.ly/2AWwrbw

三星：20多處安全漏洞影響所有Galaxy旗艦機型
http://finance.sina.com/bg/tech/technews/sinacn/2019-10-09/doc-ifzpuztq0594053.shtml

三星多款機型現漏洞:涉21個安全問題 影響4000萬用戶
http://finance.sina.com/bg/economy/economy_company/thepaper/2019-10-10/doc-ifzpuztq0618287.shtml

再也看不到追蹤對象按了誰的讚！IG黑暗模式、刪除追蹤中功能等4大更新
https://www.niusnews.com/=P31p0002

西班牙電信阿根廷公司推出由Mavenir提供的信令防火牆
https://times.hinet.net/news/22596533

資料誤用另一例，Twitter 坦承把救急的雙因子認證電話號碼用在針對性廣告
https://technews.tw/2019/10/09/twitter-misuse-of-2fa-on-targeted-ad/

Twitter 承認利用兩步驟認證電話號碼，對使用者進行精準廣告投放
https://www.techbang.com/posts/73415-twitter-admits-it-used-two-factor-phone-numbers-and-emails-for-targeted-advertising

Yubico 向香港抗爭者贊助安全金鑰 Yubikey
http://bit.ly/320fSay

瑞典Yubikey捐港人500條最強網絡保安鎖匙
http://bit.ly/318m1jQ

蘋果為何軟了？下架香港地圖軟體和Quartz新聞
https://www.secretchina.com/news/b5/2019/10/11/910059.html

You Gave Your Phone Number to Twitter for Security and Twitter Used it for Ads
https://thehackernews.com/2019/10/twitter-advertising-privacy.html

Twitter used 2FA phone numbers for ad targeting
https://www.zdnet.com/article/twitter-used-2fa-phone-numbers-for-ad-targeting/#ftag=RSSbaffb68

Google finds Android zero-day impacting Pixel, Samsung, Huawei, Xiaomi devices
https://www.zdnet.com/article/google-finds-android-zero-day-impacting-pixel-samsung-huawei-xiaomi-devices/#ftag=RSSbaffb68

New 0-Day Flaw Affecting Most Android Phones Being Exploited in the Wild
https://thehackernews.com/2019/10/android-kernel-vulnerability.html

Signal fixes FaceTime-like eavesdropping bug
https://www.zdnet.com/article/signal-fixes-facetime-like-eavesdropping-bug/

Signal Messenger Bug Lets Callers Auto-Connect Calls Without Receivers' Interaction
https://thehackernews.com/2019/10/signal-messenger-bug.html

C.事件 / 駭客 / DDOS / APT / 雲端/暗網/徵才 / 國際資安事件
九毛九收銀系統現漏洞 一門店四名員工截留32萬營收
https://news.sina.com.tw/article/20191009/32891906.html

「2020 全美重要資安大會」
https://www.tca.org.tw/market_info1.php?n=2262

暗網潛航——信息安全風險保險 （一）——偷樑換柱
http://bit.ly/322XkX7

網絡衝突不斷學者：網絡空間急需國際安全架構
https://news.sina.com.cn/c/2019-10-10/doc-iicezuev1112741.shtml

如果ISO 27001證書沒有TAF標誌，還有效嗎
https://www.ithome.com.tw/news/133528

盜用AWS與Cloud雲端運算挖礦，29歲駭客面臨至少34年牢獄刑責
https://www.ithome.com.tw/news/133562

執行紅隊演練，別受制於手上資訊與已知手法、漏洞
https://ithome.com.tw/news/133469

戴夫寇爾剖析漏洞與製作攻擊驗證工具
https://www.ithome.com.tw/news/133523

以攻擊者的角度制定防禦策略
https://devco.re/blog/2019/10/09/def-strategy/

關於台灣首次「網路風暴」聯合演習的幾點看法
https://www.upmedia.mg/news_info.php?SerialNo=72714

追蹤東南亞網路間諜攻擊 Palo Alto發現「PKPLUG」團體
https://udn.com/news/story/7238/4092225

資安報告：23 間大型 VPN 有 6 間中國　VPN公司資料安全成疑
https://unwire.hk/2019/07/10/chinavpn-2/tech-secure/

中共形象全球急速惡化 歐美澳亞皆厭惡
http://bit.ly/333k8Gh

西班牙地方網路遭駭 中央伸援
http://news.m.pchome.com.tw/internation/gpwb/20191005/index-57029084087357201011.html

哈利王子語音郵件被駭　怒控英國2媒體　拒黛妃事件重演
https://www.nownews.com/news/20191007/3675805/

黑客攻擊事件被爆，100萬新西蘭人的健康信息或處於危險之中
http://www.chinesenzherald.co.nz/news/new-zealand/hack-attack-puts-health-details-at-risk/

Algorand 投資部門的CTO手機遭駭，損失高達200萬美元
https://zombit.info/algorands-cto-mobile-phone-in-the-investment-department-suffered-a-loss-of-up-to-2-million/

英國政府警告，有APT組織正利用VPN漏洞大肆攻擊
https://nosec.org/home/detail/3014.html

袁桂笙：若網遭攻擊癱瘓台灣會變網絡孤島
http://news.stnn.cc/hk_taiwan/2019/1006/677080.shtml

路透：伊朗駭客疑試圖侵入川普競選團隊
https://udn.com/news/story/6809/4087238?from=udn-ch1_breaknews-1-cate5-news

不是假消息！微軟證實伊朗駭客發動「網路攻擊」 企圖干涉2020美總統大選
http://n.yam.com/Article/20191007158000

《基督日報》香港版被駭客入侵 強烈譴責違反新聞自由
http://bit.ly/2MmD8sC

干擾美國大選？世界駭客大賽測試發現　超過百款「投票機器」易遭駭客攻陷
https://cnews.com.tw/140191006a02/

領先全歐洲！法國下個月全國實施「臉部辨識」計畫
https://cnews.com.tw/140191007a05/

美國黑名單再增8中企 多數曾助中共監控新疆維族
https://news.ltn.com.tw/news/world/breakingnews/2940829

美國聯邦調查局大轉型 反恐怖主義改成網路安全
https://news.ltn.com.tw/news/world/breakingnews/2744481

泰國新例嚴管網絡言論 用咖啡店 WiFi 會被儲存瀏覽紀錄
http://bit.ly/2OCaoij

英國護照人臉辨識現漏洞 無法檢測深膚色人士
http://bit.ly/2MKipiX

Microsoft: Iran-Backed Group Targeted a Presidential Campaign
https://www.bankinfosecurity.com/microsoft-iran-backed-group-targeted-presidential-campaign-a-13198

Microsoft: Iranian hackers targeted a 2020 presidential campaign
https://www.zdnet.com/article/microsoft-iranian-hackers-targeted-a-2020-presidential-campaign/#ftag=RSSbaffb68

Iranian Hackers Targeted a US Presidential Candidate
https://www.wired.com/story/iran-hackers-target-us-presidential-candidate/

Russian hacker group patches Chrome and Firefox to fingerprint TLS traffic
https://www.zdnet.com/article/russian-hacker-group-patches-chrome-and-firefox-to-fingerprint-tls-traffic/

Report: Nation state hackers and cyber criminals are spoofing each other
https://www.zdnet.com/article/optiv-report-nation-state-hackers-and-cyber-criminals-are-spoofing-each-other/#ftag=RSSbaffb68

Optiv Security Releases Cyber Threat Intelligence Estimate Report to Increase Understanding of Cyber Threat Landscape, Offer Best Practices
https://www.optiv.com/press-releases/optiv-security-releases-cyber-threat-intelligence-estimate-report-increase

New CrowdStrike Threat Hunting Report Reveals Prolific Adversary Trends and Tactics
https://www.crowdstrike.com/resources/news/crowdstrike-releases-falcon-overwatch-mid-year-report-2019/

A 2019 Mid-Year Review From the CrowdStrike Falcon OverWatch Team
https://www.crowdstrike.com/resources/reports/observations-from-the-front-lines-of-threat-hunting-2019/

Microsoft: MFA bypass attacks are so rare we don't have good statistics on them
https://www.zdnet.com/article/microsoft-mfa-bypass-attacks-are-so-rare-we-dont-have-good-statistics-on-them/#ftag=RSSbaffb68

FBI warns about attacks that bypass multi-factor authentication (MFA)
https://www.zdnet.com/article/fbi-warns-about-attacks-that-bypass-multi-factor-authentication-mfa/#ftag=RSSbaffb68

Hacker to 5 Million Victims: “Get Outside More”
https://www.cbronline.com/news/toms-hacked

Schneier slams Australia's encryption laws and CyberCon speaker bans
https://www.zdnet.com/article/schneier-slams-australias-encryption-laws-cybercon-speaker-bans/#ftag=RSSbaffb68

Government interference in Australia's premier cybersecurity conference is a worry
https://www.zdnet.com/article/government-interference-in-australias-premier-cybersecurity-conference-is-a-worry/#ftag=RSSbaffb68

Hackers breach Volusion and start collecting card details from thousands of sites
https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/#ftag=RSSbaffb68

France warns of cyberattacks against service providers and engineering offices
https://www.zdnet.com/article/france-warns-of-cyberattacks-against-service-providers-and-engineering-offices/#ftag=RSSbaffb68

76 percent of US businesses have experienced a cyberattack in the past year
https://www.zdnet.com/article/76-percent-of-us-businesses-have-experienced-a-cyberattack-in-the-past-year/#ftag=RSSbaffb68

資安專案管理
http://bit.ly/30Tj9ar

網管兼資安工程師
https://www.104.com.tw/job/6r7uk

趨勢科技／物聯網資安軟體測試實習生（薪高、福利好）
https://worknowapp.com/jobs/ba13f31b-0d9d-4782-ad36-8324f491c4e7

金融聯合徵信中心招考 大學畢43K
https://www.1111.com.tw/zone/school_fresh/article_In.asp?artCat=3&id=128050&agent=out_Epaper25_school_fresh2019100912post03

【資訊】資訊安全管理師-ISO27001
https://www.104.com.tw/job/69jq5?jobsource=jolist_a_relevance

資訊安全管理師 / 資安工程師
https://www.104.com.tw/job/56qde?jobsource=jolist_a_relevance

資訊部門-資訊安全管理師
https://www.104.com.tw/job/4ws6j?jobsource=jolist_a_relevance

V資訊安全管理師
https://www.104.com.tw/job/6fmty?jobsource=jolist_a_relevance

〔資訊〕資深資訊安全管理師(台北)
https://www.104.com.tw/job/5gcqu?jobsource=jolist_a_relevance

資訊安全輔導顧問（台中辦公室）
https://www.104.com.tw/job/6kq0j?jobsource=jolist_a_relevance

資訊安全輔導顧問（台北辦公室）
https://www.104.com.tw/job/6kq0b?jobsource=jolist_a_relevance

資訊安全輔導顧問（台北/台中/高雄辦公室）
https://www.104.com.tw/job/3ra34?jobsource=jolist_a_relevance

合規處-資訊安全顧問
https://www.104.com.tw/job/5nttf?jobsource=jolist_a_relevance

I3601 資訊安全資深工程師(板橋)
https://www.104.com.tw/job/6dd4o?jobsource=jolist_a_relevance

I3601 資訊安全工程師(板橋)
https://www.104.com.tw/job/6doj9?jobsource=jolist_a_relevance

資訊安全事件中心(SOC)輪班正職人員-夜班
https://www.104.com.tw/job/4dzpm?jobsource=jolist_a_relevance

資訊安全售前架構師
https://www.104.com.tw/job/673hb?jobsource=jolist_a_relevance

行政_資訊安全工程師(SOC)
https://www.104.com.tw/job/6gssv?jobsource=jolist_a_relevance

行政_資訊安全工程師(DLP)
https://www.104.com.tw/job/5ucdb?jobsource=jolist_a_relevance

資安管理師
https://www.104.com.tw/job/6m54y?jobsource=jolist_a_relevance

【資訊處】資安規範管理師 Security Compliance
https://www.104.com.tw/job/6p7v6?jobsource=jolist_a_relevance

【資安】資安管理專業人員
https://www.104.com.tw/job/67bcx?jobsource=jolist_a_relevance

ISMS 資安顧問
https://www.104.com.tw/job/6fis1?jobsource=jolist_a_relevance

資訊系統管理師
https://www.104.com.tw/job/6jhgr?jobsource=jolist_a_relevance

資安專案經理
https://www.104.com.tw/job/64mq7?jobsource=jolist_a_relevance

網路系統管理師
https://www.104.com.tw/job/6f3f6?jobsource=jolist_a_relevance

資安技術顧問-E10B
https://www.104.com.tw/job/6he3h?jobsource=jolist_a_relevance

資安技術服務工程師(正職)
https://www.104.com.tw/job/3kmxs?jobsource=jolist_a_relevance

F 資訊作業管理人員
https://www.104.com.tw/job/6beps?jobsource=jolist_a_relevance

[幸福企業人才召募]網路資安工程顧問
https://www.104.com.tw/job/5x4dt?jobsource=jolist_a_relevance

資安專案經理/Project Manager
https://www.104.com.tw/job/2w0gs?jobsource=jolist_a_relevance

數位鑑識與舞弊偵防顧問
https://www.104.com.tw/job/2wf7t?jobsource=jolist_a_relevance

法金_國際資訊管理人員
https://www.104.com.tw/job/5cqzk?jobsource=jolist_a_relevance

專案管理高級工程師【福利佳】
https://www.104.com.tw/job/3cdtq?jobsource=jolist_a_relevance

金融科技、內控人員
https://www.104.com.tw/job/6j1x0?jobsource=jolist_a_relevance

資安Presales-E10B
https://www.104.com.tw/job/6he3g?jobsource=jolist_a_relevance

【資安】資安科技專業人員
https://www.104.com.tw/job/67cru?jobsource=jolist_a_relevance

F-資訊服務規劃師
https://www.104.com.tw/job/4gtpx?jobsource=jolist_a_relevance

海外資安稽核_某知名網路公司 (3003292)
https://m.1111.com.tw/job/91186564/

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞
法國下月實施臉部辨識身分 馬克宏「提升行政效率」挨轟
http://bit.ly/352ltPH

AI黑客整合資料 度身定造釣魚電郵
http://bit.ly/2VqTPY1

推特認了 用戶個資不慎用作廣告目的
http://bit.ly/35nzEz2

美司法部要求fb「開路」 讓執法部門調查時閱覽加密訊息
https://hk.news.appledaily.com/international/realtime/article/20191004/60115291

「加州消費者隱私法」明年生效，消費者可以要求刪除什麼樣的數據
https://www.thenewslens.com/feature/timefortune/125541

網路交易三方詐騙難防範 台灣司法人權進步協會：盡量選擇合法交易網站平台
http://bit.ly/2Isdq55

你的個資被外洩？ 用這網站搜尋自己就知道
https://udn.com/news/story/7088/4096237

訂房網驚傳個資外洩 228名會員被騙3362萬
https://news.ltn.com.tw/news/Taipei/breakingnews/2938050

訂房網疑洩個資 醫師被騙164萬
https://news.ltn.com.tw/news/society/paper/1323071

Booking.com訂房網疑個資外洩 228會員遭騙3千多萬元
http://bit.ly/2oUZVE5

Booking訂房網疑個資外洩！228會員慘淪詐騙提款機…被騙逾3千萬
https://www.ettoday.net/news/20191006/1551287.htm

Booking訂房網228台人被騙 驚動荷蘭總公司
https://udn.com/news/story/7315/4096205?from=udn-catelistnews_ch2

Booking.com疑似個資外洩非單一案例，近半年民眾通報各網購平臺解除分期詐騙破千件
https://www.ithome.com.tw/news/133558

知名訂房網疑個資外洩 荷蘭總公司與刑事局合作防堵
https://gotv.ctitv.com.tw/2019/10/1141435.htm

北京警方發佈電信網路詐騙犯罪安全防範提示
https://news.sina.com.tw/article/20191001/32830418.html

紐西蘭初級衛生組織Tū Ora遭駭客入侵，外洩100萬名用戶資料
https://ithome.com.tw/news/133509

呼叫器洩漏加拿大溫哥華病患敏感資料：這對企業的意義為何
https://blog.trendmicro.com.tw/?p=62214

小心落入電郵詐騙騙局 駭客造假有3手法
https://money.udn.com/money/story/5648/4097851

電郵詐騙 一個字母坑千萬
https://money.udn.com/money/story/5648/4097807

企業電郵詐騙案沒停過 今年36件拐走上億元
https://money.udn.com/money/story/5648/4097814

防制電郵詐騙五秘訣 幫金庫上安全鎖
https://money.udn.com/money/story/5648/4097844

小心落入電郵詐騙騙局 駭客造假有3手法
https://money.udn.com/money/story/5648/4097851

California Consumer Privacy Act (CCPA): What you need to know to be compliant
https://www.csoonline.com/article/3292578/california-consumer-privacy-act-what-you-need-to-know-to-be-compliant.html

Turkey fines Facebook $282,000 over privacy breach
https://www.reuters.com/article/us-facebook-lawsuit-privacy-turkey/turkey-fines-facebook-282000-over-privacy-breach-idUSKBN1WI0LJ

Nigerian Man Charged in Phishing Scam Targeting US Agencies
https://www.bankinfosecurity.com/nigerian-man-charged-in-phishing-scam-targeting-us-agencies-a-13195

Check If You Are in the Sephora and StreetEasy Data Breaches
https://www.bleepingcomputer.com/news/security/check-if-you-are-in-the-sephora-and-streeteasy-data-breaches/

Turkey Fines Facebook After Data Breach
https://www.bankinfosecurity.asia/turkey-fines-facebook-after-data-breach-a-13199

Data breach at Russian ISP impacts 8.7 million customers
https://www.zdnet.com/article/data-breach-at-russian-isp-impacts-8-7-million-customers/#ftag=RSSbaffb68

Tū Ora Compass Health data breach exposes medical data of one million people
https://www.zdnet.com/article/tu-ora-data-breach-exposes-medical-data-of-one-million-new-zealand-residents/#ftag=RSSbaffb68

Phishing attempts increase 400%, many malicious URLs found on trusted domains
https://www.helpnetsecurity.com/2019/10/09/phishing-increase-2019/

Beware of Fake Amazon AWS Suspension Emails for Unpaid Bills
https://www.bleepingcomputer.com/news/security/beware-of-fake-amazon-aws-suspension-emails-for-unpaid-bills/

E.研究報告
騰訊Blade Team發現雲虛擬化平台QEMU-KVM逃逸漏洞各大雲廠或受影響
http://www.kaixian.tv/gd/2019/1010/1057889.html

《李忠憲專欄》科幻小說與資安
https://living.taronews.tw/2019/10/09/491257/

《李忠憲專欄》資訊安全忙起來就不要
https://taronews.tw/2019/10/10/491557/

《李忠憲專欄》V怪客面具
https://living.taronews.tw/2019/10/10/491581/

如何查看與操弄 Android/iOS App 裡的 HTTPS Request 及 Response
http://bit.ly/30SsBuL

除了 Web API 之外的新選擇 - gRPC 服務
https://dotblogs.com.tw/supershowwei/2019/10/07/090708

「網絡安全預警通報」關於Windows RPD服務遠程代碼執行漏洞的預警通報
http://www.sohu.com/a/345229127_100160592

釣魚郵件的投遞和偽造
https://xz.aliyun.com/t/6325

瀏覽器中的資料庫
https://www.ithome.com.tw/voice/133384

解決最近駭客透過UUIDSpoof入侵其分流並獲取OP進行破壞的四個方案
https://forum.gamer.com.tw/C.php?bsn=18673&snA=179712

GitHub 準備集成Semmle 代碼分析用於持續的漏洞檢測
https://www.infoq.cn/article/D7C0Wgu1N2fsdm0jmwqR?utm_source=rss&utm_medium=article

一篇了解Redis 未授權漏洞利用
https://mp.weixin.qq.com/s/Oy63HY68MdDzL0WBdFLDBQ

網站命令執行滲透測試步驟詳情
https://www.admin5.com/article/20191010/928029.shtml

直抄程式碼惹禍 Stack Overflow成重災區
http://bit.ly/35mGO6z

CVE-2019-1315：基於錯誤報告機制的Windows提權漏洞
https://nosec.org/home/detail/3027.html

主流虛擬化平台QEMU-KVM被曝存在漏洞，可完全控制母機及其虛擬機
https://www.leiphone.com/news/201910/rFUAnGxghqK8M4sa.html

File upload vulnerability scanner and exploitation tool.
https://github.com/almandin/fuxploider

Setup a Centralized Log Server with Rsyslog in CentOS/RHEL 8
https://www.tecmint.com/create-centralized-log-server-with-rsyslog-in-centos-8/

Using the MITRE ATT&CK Navigator for Intelligence Gathering Pre-purple Teaming
https://pentestmag.com/using-the-mitre-attck-navigator-for-intelligence-gathering-pre-purple-teaming/

DNS-over-HTTPS causes more problems than it solves, experts say
https://www.zdnet.com/article/dns-over-https-causes-more-problems-than-it-solves-experts-say/#ftag=RSSbaffb68

ThreadBoat : Program Uses Thread Execution Hijacking to Inject Native Shellcode into a Standard Win32 Application
https://kalilinuxtutorials.com/threadboat-thread-execution-hijacking/

Web App for Volatility framework
https://github.com/kevthehermit/VolUtility

F.商業
Google資料中心實習計畫曝光　想要進去要有這幾種能力
http://bit.ly/35amjcY

IBM資訊安全部門全球威脅情報防禦產品協理謝明君 100％客製方案 資安缺了OT就Out
https://times.hinet.net/magazine/cp105/22590343

泉順食品攜手精品科技活用X-FORT強化網路監控力
https://www.digitimes.com.tw/iot/article.asp?cat=130&cat1=40&cat2=50&id=0000569770_40O8444D67OEYJ1PFO5O7

CloudMile 攜手 Multi CDN 專家 mlytics 推出一站式平台 MileCDN
http://n.yam.com/Article/20191008136276

開放原始碼漏洞翻倍，趨勢科技與Snyk聯手出擊
http://bit.ly/35gqbJA

17 Media 資料遷移：從全託管 MongoDB 到 MongoDB Atlas，用戶體驗與工作效率雙提升
https://www.inside.com.tw/article/17763-MongoDB

Arm 為提供嵌入式平台客戶差異化，推出嵌入式 CPU 客製化指令集服務
https://www.cool3c.com/article/148770

Arm enables SoC makers to create custom instructions for embedded CPUs
https://www.zdnet.com/article/arm-enables-soc-makers-to-create-custom-instructions-for-embedded-cpus/#ftag=RSSbaffb68

Cybersecurity giants join forces to combat cyberthreats under OASIS umbrella
https://www.zdnet.com/article/cybersecurity-firms-join-forces-to-combat-open-source-security-woes-under-oasis-umbrella/#ftag=RSSbaffb68

Microsoft's Azure Data Box Edge gets rugged, portable option
https://www.zdnet.com/article/microsofts-azure-data-box-edge-gets-rugged-portable-option/#ftag=RSSbaffb68

Microsoft's unified Office Mobile app: What it is and why it matters
https://www.zdnet.com/article/microsofts-unified-office-mobile-app-what-it-is-and-why-it-matters/#ftag=RSSbaffb68

New Comic Videos Take CISO/Security Vendor Relationship to the Extreme
https://thehackernews.com/2019/10/ciso-cyber-security-videos.html

Breaches are now commonplace, but Reason Cybersecurity lets users guard their privacy
https://thehackernews.com/2019/10/reason-antivirus-protection.html

G.政府
29個法院遭駭攻 綠委憂司院資安不足
http://pchome.megatime.com.tw/news/cat8/20191003/57010460429856224001.html

NCC：專網不一定需要專頻
http://bit.ly/2AI3cJg

中科院列管名單從出入境電腦下線逾2個月 出國管制出現5個月大漏洞
http://bit.ly/2OrBmZZ

修法清查現空窗？中科院：境管並無漏洞
https://news.pchome.com.tw/society/newstaiwandigi/20191006/photo-57035655016335279002.html

傳中科院曝出境管制漏洞 國防部：管制出境人數達1516人
https://newtalk.tw/news/view/2019-10-06/308035

《謠言終結站》國防部：中科院人員出境都納管
https://news.ltn.com.tw/news/politics/paper/1323091

國防部：中科院涉密人員已調整出入境納管期限
https://living.taronews.tw/2019/10/06/487819/

中科院轉型行政法人脫離國安管制 綠委提案補強安全稽核疏漏
http://bit.ly/35fiDXp

政策 人員 技術 打造資安防護金鐘罩
https://udn.com/news/story/6868/4087551

美台國防工業會議展開 許毓仁：資安科技將成為決勝的第一道防線
http://news.knowing.asia/news/dae13976-dcd0-4c8d-9610-ba31493231e6

訂房免用境外平台 台灣旅宿網2.0月底上線
https://www.ttv.com.tw/news/view/10810080013000I/579

柯市府推「智慧販賣機」入校園，成大資安教授揭「AI 潛在危機」
https://buzzorange.com/2019/10/08/taipei-ai-vending-machine/

因應金融環境變化與挑戰 金管會提發展新策略
https://money.udn.com/money/story/5613/4091801

資通電軍資通2大隊國慶假期軍紀宣教 維護國軍榮譽
https://www.ydn.com.tw/News/355665

H.ICS/SCADA 工控系統
10月15日國際工控系統資安研討會台北登場
https://digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=14&id=0000570042_PDQ1G2BW38493N3YLUJ94&cat=60

駭客新招術 癱瘓機台系統
https://money.udn.com/money/story/5648/4097856

Qualcomm -- ipq4019_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10499

Qualcomm -- ipq8074_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10539

Qualcomm -- ipq8074_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10540

Qualcomm -- mdm9205_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-2294

Qualcomm -- mdm9206_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10489

Qualcomm -- mdm9607_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10492

Qualcomm -- mdm9650_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-2252

Qualcomm -- msm8909w_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10509

Qualcomm -- msm8909w_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10538

Qualcomm -- qcs405_firmware
https://nvd.nist.gov/nvd.cfm?cvename=CVE-2019-10510

I.教育訓練
改變歷史的加密訊息
https://ithelp.ithome.com.tw/users/20111946/ironman/2582

網路世界的奇怪冒險
https://ithelp.ithome.com.tw/users/20112000/ironman/2908

Cissp 系列
https://ithelp.ithome.com.tw/users/20118530/ironman/2224

JavaScript 中的同步與非同步（上）：先成為 callback 大師吧
https://blog.huli.tw/2019/10/04/javascript-async-sync-and-callback/

資安攻防最後一步：學會滲透測試
https://ithome.com.tw/pr/133484

讓駭客走過，就留下痕跡！你需要學會資安分析實務
http://bit.ly/2VoGTlK

J.物聯網/IOT/人工智慧/車聯網/光聯網/深度學習/機器學習/無人機/人臉辨識
想躲過AI 監控？ 戰鬥民族研發「反臉孔辨識」化妝術
https://fnc.ebc.net.tw/FncNews/business/101960

OT人效率擺第一　資安危機應對心態要調整
https://www.mem.com.tw/arti.php?sn=1910050010

2020 年智慧工廠資安趨勢：AI、邊緣運算為何成為駭客最愛的攻擊弱點
https://buzzorange.com/techorange/2019/10/07/iiot-security-trends-2020/

別讓物聯網成「惡」聯網 政策 人員 技術 打造資安防護金鐘罩
http://bit.ly/2VrcAKX

科技連接未來! 你該知道的物聯網重點有這些
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?cnlid=13&id=0000569868_5GR79QQA7W90067CDC7NK

Answering IoT Security Questions for CISOs
https://blog.trendmicro.com/answering-iot-security-questions-for-cisos/

6.近期資安活動及研討會
HITB+ CYBER WEEK 2019/10/12 ~17
https://d2p.hitb.org/

白帽駭客體驗實作 10/13
https://www.sce.pccu.edu.tw/event/chtweb/index.html

HAKON – International Information Security Meet 10/13
https://infosec-conferences.com/events-in-2019/hakon/

國家高速網路與計算中心 台灣杉一號高速計算主機使用進階課程 10/14
https://edu.nchc.org.tw/course/one_course_introduction.asp

M3AAWG 47th General Meeting 10/14 ~ 10/17
https://infosec-conferences.com/events-in-2019/m3aawg-47th-general-meeting/

數位時代，自已的權利自己顧 -- 不可不知！基礎資安教戰講座 10/15
https://ocftw.kktix.cc/events/e0c1048b

AWS Transformation Day 10/15
https://amzn.to/2ksO8Lb

智資時代 2019 科技法制前瞻論壇 10/15
https://seminar.ithome.com.tw/live/iii20191015/index.html?eDM_iThome

AI時代下，資安與視覺化的觀點與實例 10/16
https://www.tiai.org.tw/tiaiActDetailClass?sno=19

2019 IBM Cloud 用戶實作課程秋季班 10/16
https://ibm.co/2n4VNQQ

BSides Ahmedabad 10/16
https://infosec-conferences.com/events-in-2019/bsides-ahmedabad/

TFUG Taipei | TensorFlow All Around 10/16
https://www.meetup.com/TensorFlow-User-Group-Taipei/events/264713077/

第八屆國際程式競賽 CodeVita Season 8 即日起至10/17日報名截止
https://bhuntr.com/tw/competitions/104724210865172005190909102w

Data Connectors Toronto Tech-Security – October 10/17
https://infosec-conferences.com/events-in-2019/data-connectors-toronto-october/

Kotlin/Everywhere GDG Hsinchu - Kotlin on Cloud and Web 10/17
https://www.meetup.com/GDG-Hsinchu/events/263741333/

2019 Space Apps Challenge_NASA 黑客松台北場 10/18
https://www.facebook.com/events/2112377919060176/

2019 邊緣運算論壇 - AI + IoT 備戰台商回流潮，IIoT 智慧升級 10/18
https://www.accupass.com/event/1909040655361186052756

2019 CYBERSPACE聯合研討會 10/18 ~ 10/19
https://cyberspace.ttu.edu.tw/cyber2019/

Crosslink Taiwan 2019 10/19
https://www.meetup.com/Taipei-Ethereum-Meetup/events/264302796/

交通大學亥客書院-A006:數位足跡追蹤與分析 10/19
https://hackercollege.nctu.edu.tw/?p=1088

無痛上手-WiFi無線網路安全檢測 10/20
https://www.sce.pccu.edu.tw/event/chtweb/index.html

日盛金融黑客松 報名至10/20 止
https://app.jsun.com/hackathon/Main

DEVCORE 那些年我回報的漏洞踩雷經驗 10/21
https://hackersir.kktix.cc/events/orange1021

Splunk .conf 19 10/21 ~ 10/24
https://conf.splunk.com/

國家高速網路與計算中心 平行計算程式設計基礎課程 10/22
https://edu.nchc.org.tw/course/one_course_introduction.asp

AIoT智能物聯網開發人才就業養成班[免費諮詢] 10/22
https://ittraining.kktix.cc/events/aiot-training-2019

IEEE Symposium on Visualization for Cyber Security (VizSec) 10/23
https://infosec-conferences.com/events-in-2019/vizsec/

Industrial Control Systems (ICS) Cyber Security Conference USA October 21 – 24, 2019
https://www.icscybersecurityconference.com

從網路基礎建設安全談RPKI與DDoS 10/24
https://twnic-icann.kktix.cc/events/108-7

[Palo Alto Networks]-Palo Alto Networks 直播研討會Part6. MITRE ATT&CK 新資安攻防框架進階產業應用 10/24
https://www.zerone.com.tw/TrainingDetial/Seminar/7747B901A8198AC3%7C1C130FE6FEC34700

Cybersecurity Conference Rhein-Neckar 10/24 ~ 10/25
https://infosec-conferences.com/events-in-2019/cybersecurity-rhein-neckar/

Identity Days 10/24
https://infosec-conferences.com/events-in-2019/identity-days/

Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 10/25
https://signupcybersec101.ithome.com.tw/

國家高速網路與計算中心 大數據軟體開發平台與深度學習、HBase(大數據資料庫)開發應用案例 10/25
https://edu.nchc.org.tw/course/one_course_introduction.asp

交通大學亥客書院-A015:進階網頁滲透測試 10/26
https://hackercollege.nctu.edu.tw/?p=1090

International Conference on Networks & Communications (NETWORKS) 10/26 ~ 10/27
https://infosec-conferences.com/events-in-2019/networks/

亞洲‧矽谷學院108年免費認證考試 10/27
https://college.asvda.org.tw/

International Conference on Emerging Security Information, Systems and Technologies (SECURWARE) 10/27 ~ 10/31
https://infosec-conferences.com/events-in-2019/securware/

SANS Amsterdam October 10/28
https://infosec-conferences.com/events-in-2019/sans-amsterdam-october/

工業自動化資安管理與實務 10/29 ~ 10/30
https://www.ivendor.com.tw/website/featured_detial/91

資安檢核核心技術及進階技術研討會 10月28日至10月30日
http://bit.ly/2TN2UtD

Foundations in Digital Forensics with EnCase® (DF120) (原CF1) 10/28 ~ 10/31
https://www.iforensics.com.tw/cgi-bin/registform.cgi?pick=39

International Workshop on Reliability and Security Data Analysis (RSDA) 10/28 ~ 10/31
https://infosec-conferences.com/events-in-2019/rsda/

International Symposium on Software Reliability Engineering (ISSRE) 10/28 ~ 11/1
https://infosec-conferences.com/events-in-2019/issre/

Securing New Ground 10/29 ~ 10/30
https://infosec-conferences.com/events-in-2019/securing-new-ground/

CEBIT Australia 10/29 ~ 10/31
https://infosec-conferences.com/events-in-2019/cebit-australia/

OWASP AppSec Day Melbourne 11/1
https://infosec-conferences.com/events-in-2019/owasp-appsec-day-melbourne/

Hackfest 2019 11/1 ~ 11/3
https://infosec-conferences.com/events-in-2019/hackfest-2019/

行政院資安學院 物聯網資安培訓課程 11/3 ~ 11/30
https://www.accupass.com/event/1810080517061259295030

Elite East Coast CISO Summit 11/3~11/5
https://infosec-conferences.com/events-in-2019/elite-east-coast-ciso-summit/

Red Hat Forum Taipei 2019 11/5
https://www.facebook.com/events/1390202967799392/

Cyber Security Summit: Boston 11/6
https://infosec-conferences.com/events-in-2019/cyber-security-summit-boston/

駭客攻防暨數位鑑識系列一(第1期) 11/7
https://service.tabf.org.tw/Training/CourseDetail.aspx?PID=384540

網路攻擊鏈( Cyber Kill Chain)各階段實作 (6hr) 11/7
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384540

Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 11/8
https://signupcybersec101.ithome.com.tw/

BSides Charleston 11/9
https://infosec-conferences.com/events-in-2019/bsides-charleston/

Kotlin/Everywhere GDG Taoyuan - 運用 Ktor 建置一個以 Kotlin 打造的後端服務 11/9
https://www.meetup.com/GDGTaoyuan/events/264776152/

OpenInfra Day Taiwan 11/12
http://openinfra.digitimes.com.tw/

CLEAR Cyber Leaders Conference 11/12 ~ 11/13
https://infosec-conferences.com/events-in-2019/clear-cyber-leaders-conference/

Windows檔案系統及檔案還原 (6hr) 11/14
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384541

Digital Internet Summit 11/14
https://infosec-conferences.com/events-in-2019/digital-internet-summit/

INTERFACE – Nebraska 11/14
https://infosec-conferences.com/events-in-2019/interface-nebraska/

SecureWV – Hack3rCon 11/15 ~ 11/17
https://infosec-conferences.com/events-in-2019/securewv-hack3rcon/

交通大學亥客書院-P006:高階網頁滲透測試 11/16
https://hackercollege.nctu.edu.tw/?p=1092

FS-ISAC Fall Summit 11/17 ~ 11/20
https://infosec-conferences.com/events-in-2019/fs-isac-fall-summit/

Microsoft IoT in Action 11/20
https://www.iotinactionevents.com/event/taipei

Infosecurity ISACA North America Expo and Conference 11/20 ~ 11/21
https://infosec-conferences.com/events-in-2019/isaca-north-america-expo-conference/

檔案特徵值比對與關鍵字搜尋 (2hr) Open Source數位鑑識工具實務操作 (5hr) 11/21
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384542

Trend Micro CTF 2019 // Raimund Genes Cup FINAL / NOVEMBER 23–24, 2019
https://www.trendmicro.com/en_us/campaigns/capture-the-flag.html

資安檢核核心技術及進階技術研討會11月26日至11月28日
http://bit.ly/2TN2UtD

人資人員必修的職安法規定 11/26
https://www.accupass.com/event/1909121441141977826554

模擬案例鑑識分析實務 (6hr) 11/28
http://www.tabf.org.tw/Training/CourseDetail.aspx?PID=384543

Cybersecurity Framework 擴大資安視野 Seminar CYBERSEC 101 研討會 11/29
https://signupcybersec101.ithome.com.tw/

交通大學亥客書院-B015:惡意程式檢測 11/30
https://hackercollege.nctu.edu.tw/?p=1098

亞洲‧矽谷學院108年免費認證考試 11/30
https://college.asvda.org.tw/

Digital Summit Dallas 12/4
https://infosec-conferences.com/events-in-2019/digital-summit-dallas/

Kansas City Cyber Security Conference 12/5
https://infosec-conferences.com/events-in-2019/kc-cyber-security-conference/

CyberMaryland Conference 12/5 ~ 12/6
https://infosec-conferences.com/events-in-2019/cybermaryland-conference/

FutureCon Nashville Cyber Security Conference 12/11
https://infosec-conferences.com/events-in-2019/futurecon-nashville/

Utility Cyber Security Forum December 12/11
https://infosec-conferences.com/events-in-2019/utility-cyber-security-forum-dec/

交通大學亥客書院-A018:企業網域控管－Active Directory攻擊與防禦 12/14
https://hackercollege.nctu.edu.tw/?p=1094

Japan Security Analyst Conference
https://jsac.jpcert.or.jp/