###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2024/12/30 ~ 2025/1/3

1.重大弱點漏洞/後門/Exploit/Zero Day
Palo Alto Networks修補PAN-OS弱點
https://security.paloaltonetworks.com/CVE-2024-3393

Palo Alto Releases Patch for PAN-OS DoS Flaw — Update Immediately
https://thehackernews.com/2024/12/palo-alto-releases-patch-for-pan-os-dos.html

有人聲稱解壓縮軟體7-Zip存在零時差漏洞，開發者表示該漏洞不存在
https://securityaffairs.com/172467/hacking/an-x-user-claimed-a-7-zip-zero-day-vulnerability.html

IBM商業智慧分析套件Cognos Analytics存在重大漏洞，有可能導致敏感資訊曝光、系統當機
https://www.ithome.com.tw/news/166746

Linux作業系統開源影音框架GStreamer存在一系列漏洞，恐成為攻擊者鎖定目標
https://securityonline.info/linux-systems-at-risk-gstreamer-vulnerabilities-threaten-millions/

Java網路應用程式框架Apache MINA存在風險滿分的重大漏洞
https://www.ithome.com.tw/news/166728

開源發票及專案管理平臺Invoice Ninja存在重大漏洞
https://securityonline.info/critical-ssrf-vulnerability-cve-2024-53353-found-in-invoice-ninja/

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization
https://thehackernews.com/2024/12/apache-mina-cve-2024-52046-cvss-100.html

針對微軟12月修補的LDAP漏洞，研究人員公布細節，指出攻擊者有可能讓伺服器當機
https://www.safebreach.com/blog/ldapnightmare-safebreach-labs-publishes-first-proof-of-concept-exploit-for-cve-2024-49112/

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
https://thehackernews.com/2025/01/ldapnightmare-poc-exploit-crashes-lsass.html

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption
https://thehackernews.com/2025/01/critical-deadline-update-old-net.html

微軟Dynamics 365、Power Apps Web API存在漏洞
https://thehackernews.com/2025/01/severe-security-flaws-patched-in.html

Severe Security Flaws Patched in Microsoft Dynamics 365 and Power Apps Web API
https://thehackernews.com/2025/01/severe-security-flaws-patched-in.html

微軟已修補的磁碟加密機制BitLocker仍存在漏洞，攻擊者若實體接觸電腦有機會竊取資料
https://www.ithome.com.tw/news/166795

針對7月Oracle修補的WebLogic Server高風險漏洞，研究人員公布概念性驗證程式碼
https://securityonline.info/cve-2024-21182-poc-exploit-code-published-for-severe-weblogic-flaw/

Progress修補網管軟體WhatsUp Gold重大層級漏洞
https://www.ithome.com.tw/news/166805

2.銀行/金融/保險/證券/金融監理 新聞及資安
駭客又來！昨三波攻擊 證交所、主計總處入列 世芯、大眾電腦受害
https://udn.com/news/story/7238/8466370

強化資安 證交所辦「推動證券商導入金融零信任架構作業說明會」
https://udn.com/news/story/7251/8467196

金融業資安需求不斷攀升
https://reurl.cc/G5GoaA

出席台美金融資安論壇　總統盼金融業夥伴與政府齊心協力　打造更強韌資安防護體系
https://www.president.gov.tw/NEWS/27680?SearchBy=

銀行金融檢查 防制詐騙與資安成重點
https://www.anntw.com/articles/20241219-DPi7

金融業大舉招募新血 聚焦 AI、數位金融人才
https://money.udn.com/money/story/5613/8466507

年薪上看百萬! 金控大徵才 資安.法務相關夯
https://reurl.cc/M6Mb2k

3.信用卡/電子支付/行動支付/pay/支付系統/資安
第三方支付是否須監理升級 金管會3月函查
https://newtalk.tw/news/view/2025-01-02/951481

第三方支付 金管會函查緊盯
https://reurl.cc/aZMkED

多元支付方式廣 開銷上升反增儲蓄難度
https://reurl.cc/1Xk2MQ

2025年金錢趨勢 電子支付加快普及日本神社賽錢箱
https://reurl.cc/46b4qX

Line Pay可望升格電子支付　金管會盤點7家有潛力實力
https://knews.com.tw/news/5FCDA6C78E651623591D09B4F161457B#google_vignette

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安
幣安獲第21個全球監理授權　巴西中央銀行核准收購持牌券商
https://finance.ettoday.net/news/2885400

摩根士丹利傳開放「加密貨幣交易」，專家喊比特幣上衝20萬鎂
https://www.blocktempo.com/morgan-stanley-plans-to-open-cryptocurrency-trading-services/

摩根士丹利旗下 E-Trade 考慮提供「加密貨幣交易服務」
https://blockcast.it/2025/01/03/morgan-stanleys-e-trade-considers-launching-crypto-trading-services/

Do Kwon 否認詐欺指控：高達 400 億美元的加密貨幣崩盤案進入美國審理
https://abmedia.io/do-kwon-plead-not-guilty-in-us-court

中國要求銀行監控和標記加密貨幣交易！外匯新規加強打擊加密貨幣
https://hao.cnyes.com/post/129333

Pornhub 遭美國超過 1/3 州封鎖！無法使用信用卡、仰賴加密貨幣支付
https://www.blocktempo.com/pornhub-ban-covers-more-than-third-of-us-states/

南韓瘋加密幣 交易規模堪比同期股市
https://www.cna.com.tw/video/news/4346067

政策風向與加密貨幣的交織
https://www.peopo.org/news/796353

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
資安業者聯手二十多國CERT及執法機關，清理中國蠕蟲程式PlugX
https://securityonline.info/global-cyber-collaboration-takes-down-plugx-worm/

殭屍網路Ficora、Capsaicin崛起，鎖定D-Link路由器已知漏洞而來
https://www.ithome.com.tw/news/166736

FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks
https://thehackernews.com/2024/12/ficora-and-kaiten-botnets-exploit-old-d.html

遭到Cleo零時差漏洞攻擊的企業超過60家？勒索軟體Clop揚言不付錢就揭露受害公司名稱
https://www.ithome.com.tw/news/166737

駭客組織Cloud Atlas利用方程式編輯器已知漏洞，散布惡意軟體VBCloud
https://thehackernews.com/2024/12/cloud-atlas-deploys-vbcloud-malware.html

惡意軟體PlayfulGhost假借提供中國應用程式散布
https://securityonline.info/playfulghost-malware-a-sophisticated-gh0st-rat-variant-with-advanced-distribution-tactics/

後門程式OtterCookie鎖定軟體開發人員而來，北韓駭客假借徵才名義散布
https://www.ithome.com.tw/news/166787

IPV4_Threat_Actors
https://otx.alienvault.com/pulse/6761b7d9cac852180a2dcd9d

DigiEver Fix That IoT Thing!
https://www.akamai.com/blog/security-research/digiever-fix-that-iot-thing

Cloud Atlas Deploys VBCloud Malware: Over 80% of Targets Found in Russia
https://thehackernews.com/2024/12/cloud-atlas-deploys-vbcloud-malware.html

惡意NPM套件被用於散布木馬程式Quasar RAT
https://thehackernews.com/2025/01/malicious-obfuscated-npm-package.html

Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RAT
https://thehackernews.com/2025/01/malicious-obfuscated-npm-package.html

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
手機資安破防！Cellebrite 解鎖工具證實：所有智慧型手機都不再安全
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11507

Telegram導入第三方驗證打擊詐騙行為
https://www.ithome.com.tw/news/166814

Apple to Pay Siri Users $20 Per Device in Settlement Over Accidental Siri Privacy Violations
https://thehackernews.com/2025/01/apple-to-pay-siri-users-20-per-device.html

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
針對Snowflake攻擊事故，美國逮捕涉嫌竊取總統通話記錄的士兵
https://www.securityweek.com/us-arrests-charges-army-soldier-suspected-of-extorting-att-verizon/

台塑禍不單行 傍晚公告官網遭駭客攻擊
https://reurl.cc/mRkGYM

官網遭受網路DDoS攻擊，世芯：評估對營運無重大影響
https://wealth.businessweekly.com.tw/GArticle.aspx?id=ARTL010418207

群光電子傳出網站遭遇DDoS攻擊
https://mops.twse.com.tw/mops/web/ajax_t05sr01_1?firstin=true&stp=1&step=1&SEQ_NO=1&SPOKE_TIME=182430&SPOKE_DATE=20250102&COMPANY_ID=2385

針對MCU競賽網站遭受攻擊的事故，半導體業者盛群查出徵才網站也受害
https://mops.twse.com.tw/mops/web/ajax_t05sr01_1?firstin=true&stp=1&step=1&SEQ_NO=1&SPOKE_TIME=163221&SPOKE_DATE=20241227&COMPANY_ID=6202

針對BeyondTrust零時差漏洞攻擊事故，美國財政部傳出受害
https://www.ithome.com.tw/news/166747

美財政部因第三方SaaS漏洞波及 遭中國駭客存取員工電腦
https://www.ithome.com.tw/news/166747

針對中國駭客Salt Typhoon大規模網路間諜攻擊行動，美國政府透露有第9家遇害的電信業者
https://www.securityweek.com/a-9th-telecoms-firm-has-been-hit-by-a-massive-chinese-espionage-campaign-the-white-house-says/

在傳出遭遇中國駭客Salt Typhonn入侵後，美國電信業者AT&T、Verizon聲稱已將駭客「趕出去」
https://www.bleepingcomputer.com/news/security/atandt-and-verizon-say-networks-secure-after-salt-typhoon-breach/

美國 CISA 發布更新版《國家網路事件應變計畫》初稿
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11499

North Korean Hackers Deploy OtterCookie Malware in Contagious Interview Campaign
https://thehackernews.com/2024/12/north-korean-hackers-deploy-ottercookie.html

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and Documents
https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html

微軟資料整合服務Azure Data Factory出現組態配置不當的情況，整合的工作流程管理平臺Apache Airflow恐曝險
https://www.ithome.com.tw/news/166793

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
https://thehackernews.com/2024/12/misconfigured-kubernetes-rbac-in-azure.html

Iranian and Russian Entities Sanctioned for Election Interference Using AI and Cyber Tactics
https://thehackernews.com/2025/01/iranian-and-russian-entities-sanctioned.html

Cross-Domain Attacks: A Growing Threat to Modern Security and How to Combat Them
https://thehackernews.com/2025/01/cross-domain-attacks-growing-threat-to.html

Three Russian-German Nationals Charged with Espionage for Russian Secret Service
https://thehackernews.com/2025/01/three-russian-german-nationals-charged.html

New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major Websites
https://thehackernews.com/2025/01/new-doubleclickjacking-exploit-bypasses.html

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
駭客組織IntelBroker再度公布部分10月竊得的思科內部資料
https://www.ithome.com.tw/news/166757

針對11月施耐德電機資料遭竊的事故，駭客於暗網公布相關檔案
https://www.ithome.com.tw/news/166749

福斯汽車集團資料庫配置不當，客戶資料在網際網路上曝露
https://www.ithome.com.tw/news/166731

韓國對15名北韓IT工作者進行制裁，理由是這些人從事詐騙，並將不法所得資助北韓發展核武
https://cyberscoop.com/south-korea-sanctions-north-koreans-it-worker-scams/

駭客組織EC2 Grouper濫用AWS工具竊取雲端帳密資料
https://hackread.com/fortiguard-labs-ec2-grouper-aws-credential-exploits/

KYC客戶識別受到挑戰，資安業者警告駭客於暗網系統性彙整能用於通過驗證的資料
https://www.ithome.com.tw/news/166755

25款Chrome延伸套件遭遇供應鏈攻擊而成為駭客幫兇，目的是竊取使用者的社群網站帳號
https://www.ithome.com.tw/news/166742

鎖定瀏覽器延伸套件供應鏈攻擊事故受害範圍擴大，35個套件傳出被植入惡意程式碼
https://www.bleepingcomputer.com/news/security/new-details-reveal-how-hackers-hijacked-35-google-chrome-extensions/

15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials
https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html

When Good Extensions Go Bad: Takeaways from the Campaign Targeting Browser Extensions
https://thehackernews.com/2024/12/when-good-extensions-go-bad-takeaways.html

Dozens of Chrome Extensions Hacked, Exposing Millions of Users to Data Theft
https://thehackernews.com/2024/12/16-chrome-extensions-hacked-exposing.html

New U.S. DoJ Rule Halts Bulk Data Transfers to Adversarial Nations to Protect Privacy
https://thehackernews.com/2024/12/new-us-doj-rule-halts-bulk-data.html

New HIPAA Rules Mandate 72-Hour Data Restoration and Annual Compliance Audits
https://thehackernews.com/2024/12/new-hipaa-rules-mandate-72-hour-data.html

E.研究報告/工具
差異式虛擬硬碟概念
https://www.uuu.com.tw/Public/content/article/24/20241230.htm

研究人員揭露大型語言模型越獄手法Bad Likert Judge
https://securityonline.info/new-research-reveals-a-novel-bad-likert-judge-technique-to-jailbreak-llms/

New AI Jailbreak Method 'Bad Likert Judge' Boosts Attack Success Rates by Over 60%
https://thehackernews.com/2025/01/new-ai-jailbreak-method-bad-likert.html

F.商業
供應鏈威脅多！資安托管業者應運用威脅情資與自動化技術
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11496

MSSP 資安防護必備：API 安全防護工具全覽
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11501

資安拉警報 D-Link分享網路安全小撇步 個資守護大升級
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11500

趨勢科技在 MITRE ATT&CK Evaluations取得 100%偵測率的成績
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11504

Sophos XDR 在 MITRE ATT&CK 評估：企業級中表現卓越
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11502

為強化Splunk SIEM產品線，思科計畫併購威脅偵測與防禦廠商SnapAttack
https://www.ithome.com.tw/news/166734

臺灣資安產品市場蓬勃發展！IDC臺灣預測2028年規模將達235億，密碼敏捷性與AI BOM將成2025年新焦點
https://www.ithome.com.tw/news/166790

G.政府
金管會宣布成立金融市場發展及創新處，負責推動金融科技創新、綠色金融和擬訂金融市場發展
https://www.ithome.com.tw/news/166760

資安院院長何全德闡述AI的機會與挑戰，正視與調適生成式AI的深度影響
https://www.ithome.com.tw/news/166748

高雄市擬今年合併研考會及資訊處成立一級機關，力推燈塔計畫發展主權生成式AI強化智慧治理
https://www.ithome.com.tw/news/166817

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
中國工控路由器高風險漏洞傳出已被用於攻擊行動，近1.5臺設備曝險
https://www.ithome.com.tw/news/166761

以國家安全為考量，美國政府要求中國無人機業者大疆於一年內提出相關證明
https://www.ithome.com.tw/news/166700

Four-Faith路由器高風險漏洞傳出已被用於攻擊行動
https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html

居易VPN閘道設備存在命令注入漏洞，逾6.6萬臺設備曝險，臺灣有超過1萬臺曝險
https://www.ithome.com.tw/news/166783

開源NAS作業系統TrueNAS Core存在高風險漏洞，攻擊者有機會遠端執行任意程式碼
https://securityonline.info/cve-2024-11944-truenas-core-vulnerability-allows-unauthenticated-attacks/

I.教育訓練
資安事件發生必要知道的復原程序，降低傷害
https://www.ithome.com.tw/pr/163614

iPAS資訊安全工程師中級筆記
https://hackmd.io/@Not/iPASInformationSecuritySpecialist

iPas資安工程師證照考前研習
https://reurl.cc/GEbA3p

iPAS◆資訊安全規劃實務◆中級測驗題庫彙編(123題)
https://reurl.cc/orlD1g

GCP Associate Cloud Engineer (ACE) 學習心得、教材資源與筆記分享 — 學習天然高可用與零信任設計
https://medium.com/blacksecurity/gcp-associate-cloud-engineer-78f736aee7ad

Coursera 盤點 7 項雲端資安認證，高薪跳板都在這了！
https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/

一般人也能拿到國際資安認證！CSCU安全電腦使用者認證課程
https://www.ithome.com.tw/pr/160954

全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口
https://reurl.cc/m39MDj

CISSP資安認證的8大領域
https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html

CISSP考試心得
https://reurl.cc/KbY83j

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

目標導向-20天光速考過CISSP
https://reurl.cc/2Zq6zn

CISSP證照考試實戰心得 第一章：初期準備工作
https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat

CISSP證照考試實戰心得 第二章：規律且有紀律的讀書策略
https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies

CISSP證照考試實戰心得 第三章：終極一戰
https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle

Quick CISSP Infographic for IPSec
https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec

CSSLP Certification - Security models in F#
https://github.com/vbocan/csslp

Certified Secure Software Lifecycle Professional in bullet points
https://github.com/joeyhage/csslp-notes

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

CEH
https://github.com/a3cipher/CEH

CodeRed by EC-Council
https://github.com/codered-by-ec-council

EC-Council CEH Practical / Master 準備心得 — 讓理論與實作相輔相成的學習
https://medium.com/blacksecurity/ceh-practical-master-3e80cac180a2

EC-Council CEHP考試準備心得
https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/r14xNn1po

My ceh practical notes
https://github.com/dhabaleshwar/CEHPractical/blob/main/Everything%20You%20Need.md

CEHP課程筆記
https://hackmd.io/@nfu-johnny/B1Ju_BMPR

ECSA v10 考試心得與讀書資料分享/ ECSA v10 Review and Study Materials
https://medium.com/blacksecurity/ecsa-v10-1ec76c0eb7d4

EC-Council ECSA資安分析專家 v10 考試心得分享
https://javaxtalk.blogspot.com/2019/05/ec-council-ecsa-v10.html

20180817 EC-Council ECSA v10 PASS
https://www.ptt.cc/bbs/License/M.1534571704.A.5BA.html

關於EC-Council CPENT和LPT Master滲透測試證照準備方式及心得分享
https://medium.com/@ChadSecurity/%E9%97%9C%E6%96%BCec-council-cpent%E5%92%8Clpt-master%E6%BB%B2%E9%80%8F%E6%B8%AC%E8%A9%A6%E8%AD%89%E7%85%A7%E6%BA%96%E5%82%99%E6%96%B9%E5%BC%8F%E5%8F%8A%E5%BF%83%E5%BE%97%E5%88%86%E4%BA%AB-efb63de00a8d

深度解析 CPENT 考試心得、以及與 OSCP 的比較
https://reurl.cc/41eL8v

EC-Council CPENT v1 滲透測試認證 – 內容及心得分享
https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review

CPENT 從暴力到破解
https://hackmd.io/@3WAsoRFgSlyy7pm10p60kg/ByO0zs295

Ec-Council CPENT心得 - 資安菜鳥從CEH到LPT Master
https://4hsienyang.medium.com/cpent-lpt-master-ccaebf2dbc7f

CPENT考試心得分享：一次拿到 LPT 滲透測試大師認證
https://ucom.uuu.com.tw/web/Testimony/Article/4404

kaizensecurity/CPENT
https://github.com/kaizensecurity/CPENT/tree/master

CPENT : Pentesting like NO OTHERS !
https://www.linkedin.com/pulse/cpent-pentesting-like-others-belly-rachdianto/

Journey of My CPENT Exam
https://medium.com/techiepedia/journey-of-my-cpent-exam-3a5d7ee6d917

[備考心得]CompTIA Security+ (SY0–601) 上篇
https://reurl.cc/M053DK

[備考心得]CompTIA Security+ (SY0–601) 下篇
https://reurl.cc/M053Gv

comptia-security-plus
https://github.com/ajfuto/comptia-security-plus

security-plus
https://github.com/fjavierm/security-plus

CompTIA Security+ Certification Practice Test Questions
https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

App防駭學，資安防護實戰課程全面提升安全觀念
https://www.ithome.com.tw/pr/161505

OSEP (Evasion Techniques and Breaching Defenses (PEN-300) 心得分享
https://hackmd.io/@henry-ko/HyQ56e8eF

OSEP (Evasion Techniques and Breaching Defenses (PEN-300)
http://github.com/In3x0rabl3/OSEP

OSCP（Offensive Security Certified Professional）
https://github.com/0x584A/oscp-notes/tree/master

ISACA Certified Information Systems Auditor® (CISA) 國際電腦稽核師認證準備歷程心得、申請流程分享- 2023年
https://reurl.cc/aVLoX9

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF
https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html

駭客與國家: 網路攻擊與地緣政治新常態
The hacker and the state: cyber attacks and the new normal of geopolitic
https://reurl.cc/D3nKKj

Practical Network Penetration Tester (PNPT) Certification Review
https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df

WUSON常用的基本詞彙
https://choson.lifenet.com.tw/?p=1958

證照仍是學習資安基本功的主要管道，有專家打造「資安證照地圖」
https://www.ithome.com.tw/news/156754

用證照證明自己實力之餘，更應將證照視為督促學習的最大動力
https://www.ithome.com.tw/news/156756

打破證照誤解與迷思，資安專家帶你釐清資安證照的意義
https://www.ithome.com.tw/news/156755

Accelerate Your Career with the Global Leader in Cyber Security Training
https://www.sans.org/mlp/promo-partnership-hacker-news/

【成大資安社社課】資安禁術 - 逆向工程地獄試煉
https://www.youtube.com/watch?v=4Yc3-9CjG6U

透過實務演練，教你建立實作標準的安全SOP流程
https://www.ithome.com.tw/pr/163514

6.近期資安活動及研討會
“团队敏捷教练进阶课程” 2025年1月4-5日 · A-CSM认证周末班 2025/1/4
https://www.meetup.com/shanghai-agile-scrum-user-group/events/305325241/

Advanced Scrum Case Study 2025/1/4
https://www.meetup.com/silicon-valley-professional-scrum-bangkok/events/305079787/

Use Predictive and Generative AI to Solve Problems 预测式和生成式人工智能 2025/1/4
https://www.meetup.com/hands-on-ai/events/304759577/

物聯網資訊安全實務 2025/1/4
https://www.accupass.com/event/2412260750552102835426

Focus and Take Action - Entrepreneurs and Digital Nomads 2025/1/5
https://www.meetup.com/taipei-accountability-group/events/305326517/

How to Build a Side Hustle with AI in One Weekend in 2025 2025/1/6
https://www.meetup.com/shanghai-startup-idea-to-ipo/events/304894155/

風傳媒2025《反詐新戰術》論壇 2025/1/7
https://www.accupass.com/event/2412040710511103164450

Discovering Big O: The REAL Definition 2025/1/7
https://www.meetup.com/new-coders-bangkok/events/305000079/

Algorithms Study Group! 2025/1/7
https://www.meetup.com/codeseoul/events/305093938/

CCSK 雲端安全知識證照培訓班 2025/1/7 ~ 2025/1/21
https://acsiacad.kktix.cc/events/ccsk

[Lunch and Learn] Data Visualization: Excel and Tableau 2025/1/7
https://www.meetup.com/meetups-hk-science-park/events/305175751/

ONLINE ⭐️ Workshop - Javascript for Beginners 💻 �) 2025/1/
https://www.meetup.com/le-wagon-tokyo-coding-station/events/305156395/

Taipei dbt Meetup #32 for all folks working with data! (Hybrid 👫 + 🧑‍💻) 2025/1/8
https://www.meetup.com/taipei-dbt-meetup/events/305061613/

Chinese Linguistics, History, and Etymology 2025/1/8
https://www.meetup.com/formosa-technology-and-philosophy-symposium/events/305061650/

AI 時代的資安新挑戰：如何讓開發更快速、更安全 2025/1/8
https://www.accupass.com/event/2412230632521737338847

Active Directory made accessible - 4 self-service features for everyday users 2025/1/8
https://www.meetup.com/manageengine-philippines-events/events/305326711/

[Lunch & Learn] Pitch to Impress 2025/1/9
https://www.meetup.com/meetups-hk-science-park/events/305175793/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2025/1/9
https://www.meetup.com/hackingthursday/events/psspctyhccbmb/

HackingThursday 固定聚會 台北場 Taipei 2025/1/9
https://www.meetup.com/hackingthursday/events/fcmtntyhccbmb/

IT Tech & Hobby Talk-Taipei 4th Event, supported by Wankuma Alliance Japan 2025/1/10
https://www.meetup.com/it-tech-and-hobby-talk-taipei/events/305046828/

2025 Yourator x TechOrange 數位職涯博覽會暨 AI 人才高峰會｜職涯進化論 AI · SDGs · SLASHIE 2925/1/11
https://www.accupass.com/event/2410231001162027531377

Focus and Take Action - Entrepreneurs and Digital Nomads 2025/1/12
https://www.meetup.com/taipei-accountability-group/events/rjcdptyhccbqb/

How to Build AI Skills For Your Career in 2025 2025/1/13
https://www.meetup.com/shanghai-startup-idea-to-ipo/events/305195103/

Algorithms Study Group! 2025/1/14
https://www.meetup.com/codeseoul/events/305093939/

Chinese Linguistics, History, and Etymology 2025/1/15
https://www.meetup.com/formosa-technology-and-philosophy-symposium/events/305263199/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2025/1/16
https://www.meetup.com/hackingthursday/events/psspctyhccbvb/

HackingThursday 固定聚會 台北場 Taipei 2025/1/16
https://www.meetup.com/hackingthursday/events/fcmtntyhccbvb/

讀書分享 Q1’25 之 管理類餐聚(請自行跟餐廳預約保留座） 2025/1/16
https://www.meetup.com/taipeiwomenintech/events/304376021/

Transformed: Moving to the Product Operating Model - with Marty Cagan 2025/1/16
https://www.meetup.com/producttank-bangkok/events/304283973/

[Online] Philippine Bitcoin meetup 2025/1/16
https://www.meetup.com/philippine-bitcoiners/events/300961129/

Saturday AI Hangout with Zack Lim 2025/1/18
https://www.meetup.com/internet-entrepreneurs-network-vietnam/events/305234492/

Advanced Scrum Case Study 2025/1/18
https://www.meetup.com/silicon-valley-professional-scrum-bangkok/events/305079789/

Focus and Take Action - Entrepreneurs and Digital Nomads 2025/1/19
https://www.meetup.com/taipei-accountability-group/events/rjcdptyhccbzb/

Algorithms Study Group! 2025/1/21
https://www.meetup.com/codeseoul/events/305093940/

Chinese Linguistics, History, and Etymology 2025/1/22
https://www.meetup.com/formosa-technology-and-philosophy-symposium/events/mkgkptyhccbdc/

The wild innovations of end 2024 and what 2025 will bring (online session) 2025/1/22
https://www.meetup.com/taipei-education-technology-meetup-group/events/305143337/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2025/1/23
https://www.meetup.com/hackingthursday/events/psspctyhccbfc/

HackingThursday 固定聚會 台北場 Taipei 2025/1/23
https://www.meetup.com/hackingthursday/events/fcmtntyhccbfc/

Saturday AI Hangout with Zack Lim 2025/1/25
https://www.meetup.com/internet-entrepreneurs-network-vietnam/events/305234530/

Focus and Take Action - Entrepreneurs and Digital Nomads 2025/1/26
https://www.meetup.com/taipei-accountability-group/events/rjcdptyhccbjc/

Algorithms Study Group! 2025/1/28
https://www.meetup.com/codeseoul/events/305093942/

Chinese Linguistics, History, and Etymology 2025/1/29
https://www.meetup.com/formosa-technology-and-philosophy-symposium/events/mkgkptyhccbmc/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2025/1/30
https://www.meetup.com/hackingthursday/events/psspctyhccbnc/

HackingThursday 固定聚會 台北場 Taipei 2025/1/30
https://www.meetup.com/hackingthursday/events/fcmtntyhccbnc/

IC TAIWAN GRAND CHALLENGE: GLOBAL CALL FOR PROPOSALS 2025/1/31
https://www.meetup.com/meetups-hk-science-park/events/304872613/

Advanced Scrum Case Study 2025/2/1
https://www.meetup.com/silicon-valley-professional-scrum-bangkok/events/ghffptyhcdbcb/

Focus and Take Action - Entrepreneurs and Digital Nomads 2025/2/2
https://www.meetup.com/taipei-accountability-group/events/rjcdptyhcdbdb/

Algorithms Study Group! 2025/2/4
https://www.meetup.com/codeseoul/events/305093944/

Chinese Linguistics, History, and Etymology 2025/2/5
https://www.meetup.com/formosa-technology-and-philosophy-symposium/events/mkgkptyhcdbhb/

自動化新視界：解鎖流程優化與工具整合實用策略課堂 2025/2/8 ~ 2025/2/15
https://www.accupass.com/event/2412020803131836788493

Advanced Scrum Case Study 2025/2/15
https://www.meetup.com/silicon-valley-professional-scrum-bangkok/events/ghffptyhcdbtb/

[Online] Philippine Bitcoin meetup 2025/2/20
https://www.meetup.com/philippine-bitcoiners/events/300961130/

第八屆《Hit AI & Blockchain》人工智慧暨區塊鏈產業高峰會 2025/2/20
https://www.accupass.com/event/2411261044223773652370

Advanced Scrum Case Study 2025/3/1
https://www.meetup.com/silicon-valley-professional-scrum-bangkok/events/ghffptyhcfbcb/

DEVCORE CONFERENCE 2025 2025/3/15
https://devcore.kktix.cc/events/devcoreconf2025

[Online] Philippine Bitcoin meetup 2025/3/20
https://www.meetup.com/philippine-bitcoiners/events/304057810/