###### tags: `資安事件新聞週報` # 資安事件新聞週報 2025/4/28 ~ 2025/5/2 1.重大弱點漏洞/後門/Exploit/Zero Day SSL.com 驗證漏洞：攻擊者可輕易取得重要網域憑證 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11849 SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models https://thehackernews.com/2025/05/sonicwall-confirms-active-exploitation.html 駭客2024年使用近百個零時差漏洞，逾半數被用於間諜軟體攻擊 https://www.bleepingcomputer.com/news/security/google-97-zero-days-exploited-in-2024-over-50-percent-in-spyware-attacks/ FastCGI程式庫存在重大漏洞，恐使嵌入式裝置遭遠端執行任意程式碼 https://www.ithome.com.tw/news/168661 遠端桌面軟體ScreenConnect存在重大漏洞 可導致遠端程式碼執行攻擊 https://www.ithome.com.tw/news/168627 Netscout修補nGeniusONE多項資安漏洞 https://securityonline.info/multiple-vulnerabilities-in-netscout-ngeniusone-threaten-infrastructure-visibility-platforms/ SAP 發布 NetWeaver的安全公告 https://www.ithome.com.tw/news/168625 https://support.sap.com/en/my-support/knowledge-base/security-notes-news/april-2025.html SAP NetWeaver關鍵漏洞遭駭客利用植入惡意網頁命令執行介面 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11858 SAP緊急修補允許非法上傳檔案的Netweaver安全漏洞，傳出已遭利用 https://www.ithome.com.tw/news/168625 1千多臺SAP NetWeaver伺服器可能遭入侵，駭客利用風險值滿分漏洞得逞 https://www.ithome.com.tw/news/168653 New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework https://thehackernews.com/2025/04/sap-confirms-critical-netweaver-flaw.html Commvault修補備份管理平臺，緩解遠端執行程式碼重大漏洞 https://www.ithome.com.tw/news/168623 American Megatrends (AMI) 發布 BMC (基板管理控制器) 的安全更新 https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf https://nvd.nist.gov/vuln/detail/CVE-2024-54085 https://www.ithome.com.tw/news/168581 華碩發布修補程式解決可能導致伺服器損壞的 AMI 漏洞 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11853 IBM QRadar SIEM contains multiple vulnerabilities https://www.ibm.com/support/pages/node/7231915 Windows更新產生的Inetpub資料夾恐遭濫用，攻擊者能阻止修補其他弱點 https://www.ithome.com.tw/news/168633 Microsoft: Windows 11 24H2 updates fail with 0x80240069 errors https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-11-24h2-updates-fail-with-0x80240069-errors/ 攻擊者藉Ivanti SSL VPN零時差漏洞，植入DslogdRAT滲透日本組織 https://www.ithome.com.tw/news/168624 Linux核心介面io_uring存在弱點，恐讓Rootkit在繞過資安系統偵測的情況下活動 https://www.bleepingcomputer.com/news/security/linux-io-uring-security-blindspot-allows-stealthy-rootkit-attacks/ 內容管理系統Craft CMS存在零時差漏洞，已有駭客用來從事攻擊 https://www.bleepingcomputer.com/news/security/craft-cms-rce-exploit-chain-used-in-zero-day-attacks-to-steal-data/ 思科確認部分產品受到10分Erlang/OTP重大漏洞影響 https://www.securityweek.com/cisco-confirms-some-products-impacted-by-critical-erlang-otp-flaw/ Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised https://thehackernews.com/2025/04/hackers-exploit-critical-craft-cms.html CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database https://thehackernews.com/2025/04/cisa-adds-actively-exploited-broadcom.html Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach https://thehackernews.com/2025/05/commvault-confirms-hackers-exploited.html Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products https://thehackernews.com/2025/04/google-reports-75-zero-days-exploited.html GitLab EE/CE CVE-2025-1908 https://nvd.nist.gov/vuln/detail/CVE-2025-1908 Samba https://nvd.nist.gov/vuln/detail/CVE-2024-58250 Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers https://thehackernews.com/2025/05/fake-security-plugin-on-wordpress.html Chrome 136修補存在長達20年的隱私弱點 https://cybersecuritynews.com/chrome-136-released/ macOS版Docker存在漏洞，攻擊者有機會透過任意機碼繞過身分驗證 https://gbhackers.com/docker-registry-vulnerability/ 2.銀行/金融/保險/證券/金融監理 新聞及資安 數發部與玉山金控聯手成立防詐實驗室，以跨業合作試驗防詐聯防技術 https://www.ithome.com.tw/news/168684 中信銀首揭金融資安韌性三大對策：建立縱深防禦工程、落實穿透測試、確認資安作業有效性 https://www.ithome.com.tw/news/168732 API資安威脅成挑戰，富邦金建立六項機制管控API安全 https://www.ithome.com.tw/news/168669 公私協力啟動防詐實驗室　強化金融資安韌性 https://www.netadmin.com.tw/netadmin/zh-tw/snapshot/8874EAD14CE94CC8A5591F733D853478#google_vignette 持續推動零信任架構，金管會著手發展金融雲端資安監控基準 https://www.ithome.com.tw/news/168570 永豐金證蟬聯 F-ISAC「資安情資分享」首獎 連二年奪冠 https://udn.com/news/story/7239/8701893 假貸款真詐騙偷個資 銀行關閉自然人憑證開戶 https://www.cardu.com.tw/news/detail.php?56763 詐團冒「自然人憑證」狂開數存戶　民眾無辜淪人頭戶！7銀行急喊停 https://today.line.me/tw/v2/article/PGJavMR 詐團盯上數位帳戶 8銀行急喊卡自然人憑證開戶！金管會：擬半年內解封 https://reurl.cc/VYWK3b 台灣2銀行「關閉10間分行」！裁撤一排店　金管會證實了 https://news.tvbs.com.tw/life/2855110 房屋稅2.0今開徵出狀況！北市5萬份稅單異常　財政部：延繳至6/30 https://tw.nextapple.com/finance/20250501/B052F3817AA1555F9817BCED81EB1EED 3.信用卡/電子支付/行動支付/pay/支付系統/資安 紐約將告別地鐵卡 改推行動支付 https://money.udn.com/money/story/122381/8656466 遊南韓icash Pay變支付神器！開通「韓國跨境支付」最高回饋30% https://tech.udn.com/tech/story/124457/8708097?form=udn_ch2_common3_cate 統一超icash Pay宣布 5月1日起可韓國跨境支付 https://reurl.cc/RYkxZ6 4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安 幣圈重磅！亞利桑那州通過比特幣儲備法案 全美首例 https://reurl.cc/YY3yaX 重磅！美亞利桑那州通過比特幣儲備法案：最高10%公資金投資BTC，就差州長簽署 https://www.blocktempo.com/arizona-bitcoin-reserve-bill-advances/ OSL集團推出OSL Pay - 全新機構級數字資產法幣通道 https://news.pchome.com.tw/internation/xpm/20250429/index-17459131809322560011.html 英國公布加密貨幣立法草案！宣告與美國合作加強支持加密產業 https://blockcast.it/2025/04/30/uk-government-reveals-draft-crypto-laws-in-effort-to-drive-growth/ CZ：不丹在加密貨幣戰略儲備方面走在前列 https://www.binance.com/zh-TC/square/post/04-30-2025-cz-23613360427857 支付巨頭 Mastercard 官方：推出全球點對點穩定幣支付方案，進一步整合加密貨幣產業 https://abmedia.io/mastercard-announcement 5.資安事件新聞 A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC 殭屍網路Dota將Linux電腦用於挖礦，利用弱SSH帳密入侵受害主機 https://securelist.com/outlaw-botnet/116444/ 竊資軟體Hannibal Stealer能繞過Chrome最新Cookie防護，竊取加密貨幣錢包、FTP用戶端資料 https://www.cyfirma.com/research/hannibal-stealer-a-rebranded-threat-born-from-sharp-and-tx-lineage/ Hitachi Vantara傳出遭遇勒索軟體Akira攻擊，伺服器離線因應 https://www.ithome.com.tw/news/168657 惡意NPM套件濫用Gmail及WebSocket挾持開發者電腦 https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-abuse-gmail-websockets-to-hijack-systems/ 勒索軟體VerdaCrypt廣泛針對超過100種檔案下手，並企圖透過USB裝置入侵隔離環境 https://medium.com/@smith_brendan/verdacrypt-the-powershell-ransomware-that-thinks-its-a-philosophy-professor-40c41fed0fbe 中國駭客組織IronHusky更新MysterySnail RAT，滲透蒙古與俄羅斯政府 https://www.ithome.com.tw/news/168622 吉隆坡國際機場3月遭遇攻擊，勒索軟體Qilin聲稱是他們所為 https://www.ithome.com.tw/news/168720 勒索軟體DragonForce東山再起，提供打手租用牟利 https://www.bleepingcomputer.com/news/security/dragonforce-expands-ransomware-model-with-white-label-branding-scheme/ 惡意軟體佯裝資安工具入侵WordPress網站 https://www.bleepingcomputer.com/news/security/wordpress-plugin-disguised-as-a-security-tool-injects-backdoor/ 初始入侵管道掮客ToyMaker部署後門程式Lagtoy，為勒索軟體Cactus鋪路 https://securityonline.info/toymakers-playbook-cisco-talos-exposes-iab-tactics-leading-to-cactus-ransomware/ ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion https://thehackernews.com/2025/04/toymaker-uses-lagtoy-to-sell-access-to.html DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks https://thehackernews.com/2025/04/dslogdrat-malware-deployed-via-ivanti.html WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors https://thehackernews.com/2025/04/woocommerce-users-targeted-by-fake.html Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools https://thehackernews.com/2025/04/earth-kurma-targets-southeast-asia-with.html Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool https://thehackernews.com/2025/04/malware-attack-targets-world-uyghur.html RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control https://thehackernews.com/2025/04/ransomhub-went-dark-april-1-affiliates.html FHS - Daixin Ransomware IOCs https://otx.alienvault.com/pulse/635777c908e489b484ed5209 DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics https://thehackernews.com/2025/05/darkwatchman-sheriff-malware-hit-russia.html Updates to TTPs in Latest Campaign Targeting Taiwan and Japan https://www.trendmicro.com/en_us/research/25/d/earth-kasha-updates-ttps.html https://documents.trendmicro.com/images/TEx/Earth-Kasha-Blog-IoCshFxTmpo.txt Earth Kurma APT Campaign Targets Southeast Asian Government, Telecom Sectors https://www.trendmicro.com/en_us/research/25/d/earth-kurma-apt-campaign.html https://documents.trendmicro.com/assets/txt/EarthKurma-IOCssVJ3RcK.txt Malicious PyPI packages abuse Gmail, websockets to hijack systems https://www.bleepingcomputer.com/news/security/malicious-pypi-packages-abuse-gmail-websockets-to-hijack-systems/ B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊 安卓惡意軟體埋藏於地圖App，鎖定俄羅斯軍隊而來 https://www.ithome.com.tw/news/168626 研究人員揭露眾多蘋果AirPlay安全漏洞 https://www.ithome.com.tw/news/168680 蘋果警告超過100個國家的iPhone用戶已遭間諜軟體鎖定 https://www.ithome.com.tw/news/168724 蘋果違反法院的反托拉斯裁決，恐面臨刑事調查 https://www.ithome.com.tw/news/168727 WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy https://thehackernews.com/2025/04/whatsapp-launches-private-processing-to.html C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力 駭客論壇BreachForums因使用舊版軟體元件遭駭 https://www.ithome.com.tw/news/168714 MITRE ATT&CK 發布17.0版，新增 ESXi 攻擊戰術技術與程序 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11854 鎖定資安領域再出發，前台積人花三年獲取專業能力，揭露轉職過程的第一手經驗 https://www.ithome.com.tw/news/168572 如何靠考取資安證照提升競爭力，並將專業能力對齊臺灣法規與資安環境 https://www.ithome.com.tw/news/168658 衛星科技快速崛起，從美國衛星安全CTF競賽看太空中的資安威脅 https://ithome.com.tw/news/168662 駭客論壇BreachForums傳出遭零時差漏洞攻擊被迫停機，管理者表示將捲土重來 https://hackread.com/breachforums-displays-message-shutdown-mybb-0day-flaw/ 教育機構Azure租戶遭到鎖定，駭客濫用AzureChecker從事挖礦活動 https://www.ithome.com.tw/news/168659 Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers https://thehackernews.com/2025/04/storm-1977-hits-education-clouds-with.html SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients https://thehackernews.com/2025/04/sentinelone-uncovers-chinese-espionage.html 法國指控APT28對當地政府機關、企業組織發起網路攻擊 https://www.ithome.com.tw/news/168676 Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations https://documents.trendmicro.com/assets/txt/IOCs_VoidDokkaebi_2t9ScKI5.txt https://www.trendmicro.com/en_us/research/25/d/russian-infrastructure-north-korean-cybercrime.html North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures https://thehackernews.com/2025/04/north-korean-hackers-spread-malware-via.html 中國駭客濫用IPv6發動對手中間人攻擊，挾持軟體更新散布惡意程式 https://www.bleepingcomputer.com/news/security/hackers-abuse-ipv6-networking-feature-to-hijack-software-updates/ Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool https://thehackernews.com/2025/04/chinese-hackers-abuse-ipv6-slaac-for.html Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign https://thehackernews.com/2025/05/claude-ai-exploited-to-operate-100-fake.html D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全 韓國大型電信業者SKT驚傳遭駭，客戶資料遭竊，該公司決定為2,500萬用戶免費換發SIM卡 https://www.ithome.com.tw/news/168675 網釣工具包Darcula結合生成式AI，大幅降低駭客使用門檻 https://thehackernews.com/2025/04/darcula-adds-genai-to-phishing-toolkit.html 巴基斯坦駭客APT36假借恐怖攻擊為誘餌，對印度國防單位從事網釣 https://medium.com/@d09r/apt36-uses-pahalgam-terror-attack-lure-in-targeted-phishing-against-indian-defense-personnel-4b407f09b9a0 執法單位圍剿網釣工具包JokerOTP，逮捕2名嫌犯 https://hackread.com/jokerotp-dismantled-28000-phishing-attacks-2-arrested/ Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers https://thehackernews.com/2025/04/researchers-identify-rackstatic.html Customer Account Takeovers: The Multi-Billion Dollar Problem You Don't Know About https://thehackernews.com/2025/04/customer-account-takeovers-multi.html MintsLoader Drops GhostWeaver via Phishing, ClickFix — Uses DGA, TLS for Stealth Attacks https://thehackernews.com/2025/05/mintsloader-drops-ghostweaver-via.html Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support https://thehackernews.com/2025/05/microsoft-sets-passkeys-default-for-new.html E.研究報告/工具 資安託管業者如何應對AI安全盲點 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11851 Why NHIs Are Security's Most Dangerous Blind Spot https://thehackernews.com/2025/04/why-nhis-are-securitys-most-dangerous.html How Breaches Start: Breaking Down 5 Real Vulns https://thehackernews.com/2025/04/how-breaches-start-breaking-down-5-real.html Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations https://thehackernews.com/2025/04/indian-court-orders-action-to-block.html Why top SOC teams are shifting to Network Detection and Response https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html How to Automate CVE and Vulnerability Advisory Response with Tines https://thehackernews.com/2025/05/how-to-automate-cve-and-vulnerability.html Why top SOC teams are shifting to Network Detection and Response https://thehackernews.com/2025/05/why-top-soc-teams-are-shifting-to.html New Research Reveals: 95% of AppSec Fixes Don't Reduce Risk https://thehackernews.com/2025/05/new-research-reveals-95-of-appsec-fixes.html F.商業 資安格局重塑：Mandiant 揭露2025年五大關鍵網路威脅 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11855 Sophos：「數位殘餘」讓企業暴露於網路邊緣設備攻擊風險中 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11856 Google在RSAC 2025推出新款AI資安代理，推進Agentic SOC https://www.ithome.com.tw/news/168645 Palo Alto Networks買下新創公司Protect AI，推出AI安全管理平臺 https://www.ithome.com.tw/news/168652 Cisco釋出首款開放權重資安大語言模型，助力AI資安維運與防護 https://www.ithome.com.tw/news/168696 Meta推出獨立AI程式Meta AI https://www.ithome.com.tw/news/168674 Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code https://thehackernews.com/2025/04/meta-launches-llamafirewall-framework.html 阿里巴巴開源Qwen3模型家族 https://www.ithome.com.tw/news/168655 Nvidia推DOCA Argus強化AI資料中心即時威脅偵測 https://www.ithome.com.tw/news/168654 韓國第一品牌AhnLab首度參展台灣Cybersec 攜手湛揚科技展現OT資安與防勒索解決方案 https://ithome.com.tw/pr/168609 Redis放棄SSPL授權回歸開源，釋出Redis 8整合核心與Stack功能 https://www.ithome.com.tw/news/168726 G.政府 資安院公布產品資安3大策略，重視安全軟體開發與檢測人才，推動PSIRT、臺灣ICT產品漏洞獵捕計畫 https://www.ithome.com.tw/news/168673 產品資安成國際法規必考題，也攸關國家安全，資安院專家呼籲臺灣ICT製造商需正視CVE與CWE風險 https://www.ithome.com.tw/news/168672 從呼叫器爆炸案談產品資安：資安院龔副院長分析供應鏈攻擊與電子產品的資安挑戰 https://www.nics.nat.gov.tw/latest_news/announcements/Latest_Announcement/6a18e56c-d2c6-4a83-882f-c6eacd677988/ 探索資安院！從互動遊戲到桌上推演，一覽資安院參與CYBERSEC 2025現場亮點 https://www.nics.nat.gov.tw/latest_news/announcements/Latest_Announcement/983ecbe2-ccf5-4c43-ae63-edcd09aaca08/ 張淵翔洩個資助罷團！謝國樑強調「立即導正」：公務員涉案絕非微罪 https://tw.nextapple.com/local/20250501/F3C62F8E3E9D3E75068A19E01BB7131E H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安 Viasat衛星數據機存在高風險漏洞，未經授權的攻擊者可遠端執行任意程式碼 https://gbhackers.com/viasat-modems-zero-day-vulnerabilities/ IT與OT協作新時代：智慧防禦×韌性共存 https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11833 智慧IoT效能重要一環　新平台推動邊緣AI革命 https://www.eettaiwan.com/20250430nt31-new-platform-driving-the-edge-ai-revolution/ Zyxel USG FLEX H series uOS firmware CVE-2025-1731 https://nvd.nist.gov/vuln/detail/CVE-2025-1731 I.教育訓練 資安事件發生必要知道的復原程序，降低傷害 https://www.ithome.com.tw/pr/163614 iPAS資訊安全工程師中級筆記 https://hackmd.io/@Not/iPASInformationSecuritySpecialist iPas資安工程師證照考前研習 https://reurl.cc/GEbA3p iPAS◆資訊安全規劃實務◆中級測驗題庫彙編(123題) https://reurl.cc/orlD1g GCP Associate Cloud Engineer (ACE) 學習心得、教材資源與筆記分享 — 學習天然高可用與零信任設計 https://medium.com/blacksecurity/gcp-associate-cloud-engineer-78f736aee7ad Coursera 盤點 7 項雲端資安認證，高薪跳板都在這了！ https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/ 一般人也能拿到國際資安認證！CSCU安全電腦使用者認證課程 https://www.ithome.com.tw/pr/160954 全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口 https://reurl.cc/m39MDj CISSP資安認證的8大領域 https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html CISSP考試心得 https://reurl.cc/KbY83j CISSP考試心得 – Benson https://reurl.cc/GbWvxd 目標導向-20天光速考過CISSP https://reurl.cc/2Zq6zn CISSP證照考試實戰心得 第一章：初期準備工作 https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat CISSP證照考試實戰心得 第二章：規律且有紀律的讀書策略 https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies CISSP證照考試實戰心得 第三章：終極一戰 https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle Quick CISSP Infographic for IPSec https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec CSSLP Certification - Security models in F# https://github.com/vbocan/csslp Certified Secure Software Lifecycle Professional in bullet points https://github.com/joeyhage/csslp-notes CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得 https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/ EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022 https://reurl.cc/1oyEM8 CEH v11 考試心得與準備方式 https://blog.sean.taipei/2022/01/ceh CEH https://github.com/a3cipher/CEH CodeRed by EC-Council https://github.com/codered-by-ec-council EC-Council CEH Practical / Master 準備心得 — 讓理論與實作相輔相成的學習 https://medium.com/blacksecurity/ceh-practical-master-3e80cac180a2 EC-Council CEHP考試準備心得 https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/r14xNn1po My ceh practical notes https://github.com/dhabaleshwar/CEHPractical/blob/main/Everything%20You%20Need.md CEHP課程筆記 https://hackmd.io/@nfu-johnny/B1Ju_BMPR ECSA v10 考試心得與讀書資料分享/ ECSA v10 Review and Study Materials https://medium.com/blacksecurity/ecsa-v10-1ec76c0eb7d4 EC-Council ECSA資安分析專家 v10 考試心得分享 https://javaxtalk.blogspot.com/2019/05/ec-council-ecsa-v10.html 20180817 EC-Council ECSA v10 PASS https://www.ptt.cc/bbs/License/M.1534571704.A.5BA.html 關於EC-Council CPENT和LPT Master滲透測試證照準備方式及心得分享 https://medium.com/@ChadSecurity/%E9%97%9C%E6%96%BCec-council-cpent%E5%92%8Clpt-master%E6%BB%B2%E9%80%8F%E6%B8%AC%E8%A9%A6%E8%AD%89%E7%85%A7%E6%BA%96%E5%82%99%E6%96%B9%E5%BC%8F%E5%8F%8A%E5%BF%83%E5%BE%97%E5%88%86%E4%BA%AB-efb63de00a8d 深度解析 CPENT 考試心得、以及與 OSCP 的比較 https://reurl.cc/41eL8v EC-Council CPENT v1 滲透測試認證 – 內容及心得分享 https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review CPENT 從暴力到破解 https://hackmd.io/@3WAsoRFgSlyy7pm10p60kg/ByO0zs295 Ec-Council CPENT心得 - 資安菜鳥從CEH到LPT Master https://4hsienyang.medium.com/cpent-lpt-master-ccaebf2dbc7f CPENT考試心得分享：一次拿到 LPT 滲透測試大師認證 https://ucom.uuu.com.tw/web/Testimony/Article/4404 kaizensecurity/CPENT https://github.com/kaizensecurity/CPENT/tree/master CPENT : Pentesting like NO OTHERS ! https://www.linkedin.com/pulse/cpent-pentesting-like-others-belly-rachdianto/ Journey of My CPENT Exam https://medium.com/techiepedia/journey-of-my-cpent-exam-3a5d7ee6d917 [備考心得]CompTIA Security+ (SY0–601) 上篇 https://reurl.cc/M053DK [備考心得]CompTIA Security+ (SY0–601) 下篇 https://reurl.cc/M053Gv comptia-security-plus https://github.com/ajfuto/comptia-security-plus security-plus https://github.com/fjavierm/security-plus CompTIA Security+ Certification Practice Test Questions https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette 不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書） https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html App防駭學，資安防護實戰課程全面提升安全觀念 https://www.ithome.com.tw/pr/161505 OSEP (Evasion Techniques and Breaching Defenses (PEN-300) 心得分享 https://hackmd.io/@henry-ko/HyQ56e8eF OSEP (Evasion Techniques and Breaching Defenses (PEN-300) http://github.com/In3x0rabl3/OSEP OSCP（Offensive Security Certified Professional） https://github.com/0x584A/oscp-notes/tree/master ISACA Certified Information Systems Auditor® (CISA) 國際電腦稽核師認證準備歷程心得、申請流程分享- 2023年 https://reurl.cc/aVLoX9 Learn NIST Inside Out With 21 Hours of Training @ 86% OFF https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html 駭客與國家: 網路攻擊與地緣政治新常態 The hacker and the state: cyber attacks and the new normal of geopolitic https://reurl.cc/D3nKKj Practical Network Penetration Tester (PNPT) Certification Review https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df WUSON常用的基本詞彙 https://choson.lifenet.com.tw/?p=1958 證照仍是學習資安基本功的主要管道，有專家打造「資安證照地圖」 https://www.ithome.com.tw/news/156754 用證照證明自己實力之餘，更應將證照視為督促學習的最大動力 https://www.ithome.com.tw/news/156756 打破證照誤解與迷思，資安專家帶你釐清資安證照的意義 https://www.ithome.com.tw/news/156755 Accelerate Your Career with the Global Leader in Cyber Security Training https://www.sans.org/mlp/promo-partnership-hacker-news/ 【成大資安社社課】資安禁術 - 逆向工程地獄試煉 https://www.youtube.com/watch?v=4Yc3-9CjG6U 透過實務演練，教你建立實作標準的安全SOP流程 https://www.ithome.com.tw/pr/163514 6.近期資安活動及研討會 【資安課程諮詢】物聯網資訊安全實務 2025/5/3 https://www.accupass.com/event/2412260750552102835426 【課程諮詢】物聯網邊緣運算與資安實戰 2025/5/3 https://www.accupass.com/event/2412260751154280345070 WordPress 彩虹小聚 ：線上課程是門好生意 2025/5/6 https://www.meetup.com/taipei-wordpress/events/307432972/ Revolutionizing Business Growth: The Monthly Website Acquisitions Forum 2025/5/6 https://www.meetup.com/nomads-entrepreneurs-community/events/305968898/ ONLINE ⭐️ Programming for Everybody - Free 3-week course for beginne rs2025/5/6 https://www.meetup.com/le-wagon-tokyo-coding-station/events/307281023/ [ITSMF Thailand] Webinar 2025/5/6 https://www.meetup.com/itsmbkk/events/307209513/ TEAMPROS Taipei 2025 2025/5/7 https://www.accupass.com/event/2504100341229539531870 T-box 工作坊：「掌握跨境電商新機遇：有效風險管理策略」 2025/5/7 https://www.meetup.com/meetups-hk-science-park/events/307226026/ Flutter Tokyo #7 2025/5/7 https://www.meetup.com/flutter-meetup-tokyo/events/307116530/ Stand & Deliver: Preparing for Submissions and Demo Day 2025/5/9 https://www.meetup.com/sui-network-korea/events/307395902/ DQS Taiwan: 國際資安研討會：TISAX® 車載資安解析 2025/5/9 https://www.accupass.com/event/2504070731307831173200 Startup Teaming (Online) 2025/5/10 https://www.meetup.com/startup-agile-group-thanh-pho-ho-chi-minh/events/307437032/ ONLINE COURSE 🚀 Data Science & AI foundations for beginners 2025/5/10 https://www.meetup.com/le-wagon-tokyo-coding-station/events/307332883/ Microcontroller (ESP32) Discussion @ Gongguan MRT Exit 3 2025/5/10 https://www.meetup.com/electronics-workshop/events/307361975/ Taipei dbt Meetup #36 Bitter Lessons from data Freelancing (Hybrid 👫 + 🧑‍💻) 2025/5/12 https://www.meetup.com/taipei-dbt-meetup/events/307160339/ 被世界低估的「資安」人才缺口：變動世代的隱藏主線 2025/5/14 https://www.accupass.com/event/2504170215051522930322 ONLINE 🌟 Intro to Geospatial Analysis workshop 2025/5/14 https://www.meetup.com/le-wagon-tokyo-coding-station/events/307396626/ Masterclass: Warren Redlich: Tesla, AI & the Future of Innovation 2025/5/15 https://www.meetup.com/workoptional-ai-future-of-work/events/306870563/ 從工地到雲端！e秒簽助攻營造業管理 2025/5/15 https://www.accupass.com/event/2504240851162098989769 AI 時代的資安新挑戰：如何讓開發更快速、更安全 2025/5/15 https://www.accupass.com/event/2503170831057559152230 一鍵保護SaaS資料！實測Keepit快速備份與還原 2025/5/16 https://www.accupass.com/event/2504160409167319207120 Digital Rogue Meetup #08 2025/5/19 https://www.meetup.com/taiwan-digital-rogue/events/307397895/ 智慧 ITSM 時代！Jira ITSM 自動化 2025/5/21 https://www.meetup.com/taipei-atlassian-community-events/events/307355629/ 數位資產與企業創新 2025/5/22 https://www.accupass.com/event/2504100336192273049230 前輩領航計畫｜破解中小企業轉型困境 2025/5/22 https://www.accupass.com/event/2504110857316439952740 How to Build AI Skills For Your Career 2025/5/22 https://www.meetup.com/techtalks-ph-manila/events/307352456/ Taipei dbt Meetup #37 for all folks working with data! (Hybrid 👫 + 🧑‍💻) 2025/5/23 https://www.meetup.com/taipei-dbt-meetup/events/307317858/ The No Hype Guide to Online Business Success 2025/5/23 https://www.meetup.com/internet-entrepreneurs-network-thailand/events/307318369/ 臺灣的下一步-國安青年論壇 2025/5/24 https://www.accupass.com/event/2504200843571170341738 【財訊資安論壇】AI時代的資安新解方 2025/5/26 https://www.accupass.com/event/2504150825081036102809 Elastic 資安 AI 實戰 — 攻擊偵測 & 威脅狩獵全攻略 2025/5/28 https://www.accupass.com/event/2504110633451794495661 Google Cloud Summit Taipei 2025/6/12 https://cloudonair.withgoogle.com/events/summit-taipei-2025 API 安全開發指南：漏洞修復與授權管理實務 2025/9/11-2025/9/12 https://www.accupass.com/event/2501021422337978365160