###### tags: `資安事件新聞週報`
# 資安事件新聞週報 2024/6/17 ~ 2024/6/21

1.重大弱點漏洞/後門/Exploit/Zero Day
VMware修補vCenter Server的遠端執行漏洞
https://www.ithome.com.tw/news/163541

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi CVE-2024-37081
https://thehackernews.com/2024/06/vmware-issues-patches-for-cloud.html
https://nvd.nist.gov/vuln/detail/CVE-2024-37081
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453

未補漏洞且暴露在外網的舊款F5 BIG-IP設備遭中國駭客Velvet Ant攻破，潛入受害組織內部長達3年，暗中竊取敏感客戶資料
https://www.ithome.com.tw/news/163512

Hackers use F5 BIG-IP malware to stealthily steal data for years
https://www.bleepingcomputer.com/news/security/hackers-use-f5-big-ip-malware-to-stealthily-steal-data-for-years/amp/

China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices
https://thehackernews.com/2024/06/china-linked-hackers-infiltrate-east.html

China-Nexus Threat Group ‘Velvet Ant’ Abuses F5 Load Balancers for Persistence
https://www.sygnia.co/blog/china-nexus-threat-group-velvet-ant/

中國駭客UNC3886利用Fortinet、VMware設備零時差漏洞持續在受害組織網路環境活動
https://www.ithome.com.tw/news/163572

UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
https://thehackernews.com/2024/06/chinese-cyber-espionage-group-exploits.html

全球至少2萬臺FortiGate防火牆遭到中國駭客Volt Typhoon滲透
https://blog.billows.com.tw/?p=3197

Fortinet FortiClientEMS存在高風險安全漏洞(CVE-2023-48788)，請儘速確認並進行修補
https://nvd.nist.gov/vuln/detail/CVE-2023-48788

Fortinet FortiOS存在高風險弱點CVE-2024-21762已有可被利用之攻擊程式碼
https://nvd.nist.gov/vuln/detail/CVE-2024-21762
https://fortiguard.com/psirt/FG-IR-24-015
https://github.com/h4x0r-dz/CVE-2024-21762
https://github.com/BishopFox/cve-2024-21762-check
https://www.assetnote.io/resources/research/two-bytes-is-plenty-fortigate-rce-with-cve-2024-21762
https://research.qianxin.com/archives/1854
https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/1256/

Fortinet FortiOS CVE-2024-23110
https://nvd.nist.gov/vuln/detail/CVE-2024-23110

Fortinet FortiPAM CVE-2024-26010
https://nvd.nist.gov/vuln/detail/CVE-2024-26010

Attacks Surge on Check Point's Recent VPN Zero-Day Flaw
https://www.darkreading.com/cyberattacks-data-breaches/attacks-surge-on-check-points-recent-vpn-zero-day-flaw

Openfind MailGates及MailAudit存在高風險弱點CVE-2024-6048
https://nvd.nist.gov/vuln/detail/CVE-2024-6048
https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html
https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html

Avast Antivirus CVE-2024-5102
https://nvd.nist.gov/vuln/detail/CVE-2024-5102

Windows 系統曝 WiFi 資安漏洞所有版本皆受影響！微軟釋出安全修補 CVE-2024-30078
https://3c.ltn.com.tw/news/58596

研究人員針對微軟本月修補的Wi-Fi驅動程式漏洞提出警告，所有版本Windows都可能曝險
https://www.ithome.com.tw/news/163562

Microsoft Office存在多個高風險弱點
https://nvd.nist.gov/vuln/detail/CVE-2024-30101
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30101
https://nvd.nist.gov/vuln/detail/CVE-2024-30102
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30102
https://nvd.nist.gov/vuln/detail/CVE-2024-30104
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30104
https://www.tenable.com/cve/CVE-2024-30101
https://www.tenable.com/cve/CVE-2024-30102
https://www.tenable.com/cve/CVE-2024-30104

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor
https://www.linkedin.com/pulse/hackers-exploit-legitimate-websites-deliver-badspace-windows-ldbhf/

KB5039239: Microsoft releases Windows 11 24H2 (2024 update) but you may not get it
https://www.neowin.net/news/kb5039239-microsoft-releases-windows-11-24h2-2024-update-but-you-may-not-get-it/

CVE-2024-26229: Windows Elevation of Privilege Flaw Weaponized, PoC Exploit on GitHub
https://securityonline.info/cve-2024-26229-windows-elevation-of-privilege-flaw-weaponized-poc-exploit-on-github/

美國CISA證實Windows權限提升漏洞CVE-2024-26169已被用於勒索軟體攻擊行動
https://www.cisa.gov/news-events/alerts/2024/06/13/cisa-adds-three-known-exploited-vulnerabilities-catalog

Trend Micro Security存在高風險弱點CVE-2024-32849
https://nvd.nist.gov/vuln/detail/CVE-2024-32849
https://helpcenter.trendmicro.com/en-us/article/tmka-19175
https://www.zerodayinitiative.com/advisories/ZDI-24-576

Dropbox Desktop Folder Sharing Mark-of-the-Web存在高風險弱點CVE-2024-5924
https://nvd.nist.gov/vuln/detail/CVE-2024-5924
https://www.zerodayinitiative.com/advisories/ZDI-24-677

Linux Kernel存在高風險安全漏洞(CVE-2024-1086)
https://nvd.nist.gov/vuln/detail/CVE-2024-1086
https://access.redhat.com/security/cve/CVE-2024-1086
https://ubuntu.com/security/CVE-2024-1086
https://security-tracker.debian.org/tracker/CVE-2024-1086
https://src.uniontech.com/#/security_advisory_detail?utsa_id=UTSA-2024-000633
https://kylinos.cn/support/loophole/patch/5561.html
https://lists.fedoraproject.org/archives/list/[e-mail]/message/7LSPIOMIJYTLZB6QKPQVVAYSUETUWKPF/
https://lists.centos.org/pipermail/centos-announce/2024-March/099235.html

CVE-2024-37051: Critical JetBrains Flaw Exposes GitHub Tokens in IntelliJ IDEs, PoC Published
https://securityonline.info/cve-2024-37051-exploit-poc-jetbrains-github-tokens/

CVE-2024-29824 Deep Dive: Ivanti EPM SQL Injection Remote Code Execution Vulnerability
https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability/?fbclid=IwZXh0bgNhZW0CMTAAAR3_923MxwvEUlUzZ6t_hRWELGNZZmb_CMYF_ctPkh6t0edMVMMccncZWNU_aem_z5_vdkpWw1DzOlpLpNCqcQ

ASUS Download Master - Buffer Overflow
https://nvd.nist.gov/vuln/detail/CVE-2024-31163

開發者必看！PHP 最新安全更新修復嚴重 RCE 漏洞
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11108

研究人員揭露Mailcow郵件伺服器系統的遠端程式碼執行漏洞
https://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages/

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution
https://thehackernews.com/2024/06/mailcow-mail-server-flaws-expose.html

Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer
https://thehackernews.com/2024/06/cybercriminals-exploit-free-software.html

SQL Server 2014 follows the Fixed Lifecycle Policy.
https://learn.microsoft.com/en-us/lifecycle/products/sql-server-2014

Google發布Chrome 126更新，修補漏洞懸賞競賽揭露的弱點
https://chromereleases.googleblog.com/2024/06/stable-channel-update-for-desktop_18.html

SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately
https://thehackernews.com/2024/06/solarwinds-serv-u-vulnerability-under.html

研究人員公布Ivanti Endpoint Manager重大漏洞的細節
https://www.horizon3.ai/attack-research/attack-blogs/cve-2024-29824-deep-dive-ivanti-epm-sql-injection-remote-code-execution-vulnerability/

全球最大ZDI零日漏洞懸賞計畫負責人剖析垂直產業漏洞管理四類型，更提出GenAI對未來漏洞揭露的影響
https://www.ithome.com.tw/news/162856

研究人員針對Wget漏洞提出警告，呼籲用戶近期應留意相關資安公告
https://www.ithome.com.tw/news/163594

2.銀行/金融/保險/證券/金融監理 新聞及資安
富邦金建立跨子公司偽冒案件應變小組，系統化執行偽冒網站下架作業
https://www.ithome.com.tw/news/163467

專家：因應中國網攻與金融攻擊 台灣須準備好
https://www.rti.org.tw/news/view/id/2209716

金融資安國際攻防 智庫投書美媒彰顯台灣在準備
https://reurl.cc/VzoRgy

iKala「金融高階早餐會」 導入GenAI的3個策略及4道程序
https://www.bnext.com.tw/article/79392/2024ikala

網釣工具套件租賃服務Onnx鎖定金融業的Microsoft 365帳號而來
https://blog.eclecticiq.com/onnx-store-targeting-financial-institution

國泰金深化數位轉型更落實資安 金融服務評鑑大賞獲五大獎
https://reurl.cc/Rq7N86

中華郵政獲服務品質獎、資訊安全獎雙獎榮耀
https://money.udn.com/money/story/5636/8043991

Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan
https://thehackernews.com/2024/06/grandoreiro-banking-trojan-hits-brazil.html

Truist Bank confirms breach after stolen data shows up on hacking forum
https://www.bleepingcomputer.com/news/security/truist-bank-confirms-data-breach-after-stolen-data-shows-up-on-hacking-forum/

3.信用卡/電子支付/行動支付/pay/支付系統/資安
銀行爭議案增加!線上支付成詐騙集團 最愛的盜刷漏洞
https://www.youtube.com/watch?v=ljyh4mc1ESU

全聯刷卡系統大出包！連兩天只能用現金、APP付款 業者：持續修復中
https://reurl.cc/LWoN0K

不能用LINE Pay付錢了？確定2025年終止所有服務，行動支付還可以選哪家
https://cava.tw/lifestyle/technology/251433

《屁孩PAY》日本大垣市推出專屬行動支付 奇葩命名讓網友傻眼了
https://news.gamme.com.tw/1768760

陸行動支付占近9成　實測北京小學生認識紙鈔銅板嗎
https://news.tvbs.com.tw/china/2522460

日本LINE Pay退出市場！內行激推出國「2支付方式」：好用超多、打敗一堆Pay
https://www.storm.mg/lifestyle/5157526

北上電子支付｜螞蟻幫阿里巴巴對手吸港客？ AlipayHK支援拼多多山姆購物、美團充電寶
https://reurl.cc/oRb7AD

內地電子支付｜WeChat Pay HK/Alipay HK/八達通Pro大比併
https://reurl.cc/9vA4an

iPASS一卡通可掃TWQR了！六都指定店家掃碼支付　享消費10%回饋
https://finance.ettoday.net/news/2757779

4.加密貨幣/數位貨幣/挖礦/區塊鍊/智能合約/WEB3 資安
MaiCoin集團旗下 MaiCoin平台、MAX交易所 取得ISO 27001資安驗證
https://money.udn.com/money/story/5636/8030341?from=edn_search_result

幣圈日常？「這款新幣」一夜暴跌 80%，官方修漏洞後急喊：正在報警
https://www.cryptocity.tw/one-new-coin-fell-80-after-hacked-for-1-billion-minted

新手、老手都可能被騙！區塊鏈詐騙真的這麼難防嗎
https://web3plus.bnext.com.tw/article/2681

OKX Web3 & GoPlus：鏈上安全監控與事後搶救
https://news.cnyes.com/news/id/5601306

交易所安全警報：OKX帳戶被盜事件及其對產業的影響
https://www.panewslab.com/zh_hk/articledetails/uxwrubknFt.html

OKX Web3 與 GoPlus 對談：鏈上安全監控與事後搶救
https://blockcast.it/2024/06/15/okx-web3-crypto-security-special-column-6/

小心駭客橫行 幣安與 OKX 接連爆出用戶資產遭盜取
https://www.cna.com.tw/postwrite/chi/374065

acc01ade.eth將盜取的部分HLG經USDT兌換成ETH，小部分已流入混幣器
https://www.panewslab.com/zh_hk/sqarticledetails/90pxg9niFt.html

Curve創始人：UwU Lend安全事件引發CRV借貸倉位清算
https://news.cnyes.com/news/id/5601577

何一：並未發行Meme幣，請勿與此類詐騙鏈接或X帳戶交互
https://news.cnyes.com/news/id/5601607

要不要發數位新台幣？央行委外調查結果出爐
https://reurl.cc/XGb5yR

央行問卷出爐：9成民眾沒聽過「CBDC數位新台幣」
https://www.ctee.com.tw/news/20240620701696-430303

駭客橫行！加密貨幣交易所接連爆出用戶資產遭盜取
https://money.udn.com/money/amp/story/5635/8037013

Mindao：黑客攻击事件放大了Curve的问题，代币高集中度和创始人的明牌操作容易引起監管調查
https://www.theblockbeats.info/flash/161291

國內加密貨幣交易所XREX打造威脅引擎，快一步揪出詐騙、洗錢帳戶
https://www.ithome.com.tw/news/163373

比特幣第一起竊案：加密OG因祕鑰洩露被盜2.5萬枚BTC
https://www.blocktempo.com/bitcoin-was-stolen-by-hacker/

某「安全團隊」在向Kraken披露平台漏洞的同時盜走300萬美元加密資產
https://www.theblockbeats.info/flash/253989

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw
https://thehackernews.com/2024/06/kraken-crypto-exchange-hit-by-3-million.html

2024最新Bybit開戶教學：註冊流程、KYC認證、2FA安全驗證、出入金…全教學
https://www.blocktempo.com/the-most-complete-bybit-account-opening-tutorial-in-2024-registration-process-kyc-certification-2fa-protection-deposit-tutorial/

5.資安事件新聞

A.病毒木馬 / 殭屍網路 / 勒索軟體 / Adware /APT /後門程式/IOC
駭客利用Excel 文件針對烏克蘭部署Cobalt Strike
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11111

駭客利用惡意軟體CloudMensis，從Mac電腦竊取訊息
https://reurl.cc/ezoW4x

北韓駭客Moonstone Sleet散布惡意NPM套件，鎖定開發人員下手
https://checkmarx.com/a-new-north-korean-group-emerges-disrupting-the-open-source-ecosystem/

駭客假借提供破解軟體，意圖對韓國用戶散布惡意程式NiceRAT
https://asec.ahnlab.com/en/66790/

駭客組織Arid Viper鎖定行動裝置從事網路間諜活動，散布惡意程式AridSpy
https://www.welivesecurity.com/en/eset-research/arid-viper-poisons-android-apps-with-aridspy/

勒索軟體駭客組織Cactus聲稱攻擊光纖網路設備供應商康聯訊
https://www.redpacketsecurity.com/cactus-ransomware-victim-https-www-ctsystem-com/

英國倫敦多家醫院受到Synnovis勒索軟體事故波及，被迫取消逾800項手術
https://www.bleepingcomputer.com/news/security/london-hospitals-cancel-over-800-operations-after-ransomware-attack/

日本影音共享平臺Niconico、角川書店因資料中心遭受勒索軟體攻擊，被迫暫停相關服務
https://www.ithome.com.tw/news/163495

駭客製造假應用程式錯誤訊息引誘用戶上當，執行PowerShell指令碼植入惡意程式
https://www.ithome.com.tw/news/163513

Linux惡意軟體Disgomoji鎖定印度政府機關而來，攻擊者利用表情符號來下達命令
http://www.volexity.com/blog/2024/06/13/disgomoji-malware-used-to-target-indian-government/

RA World玩弄多重階段攻擊　勒索工具來自已退役集團 舊病毒源碼外流二次公害　新駭客撿到槍進軍勒索
https://www.netadmin.com.tw/netadmin/zh-tw/technology/E43ABE2F44184ACAA718AC19305EFB0E

後門程式BadSpace透過被感染的WordPress網站散布
https://www.gdatasoftware.com/blog/2024/06/37947-badspace-backdoor

駭客鎖定公開的Docker API下手，從而部署惡意程式並挖掘加密貨幣
https://securitylabs.datadoghq.com/articles/attackers-deploying-new-tactics-in-campaign-targeting-exposed-docker-apis/

有人假借提供思科Webex視訊會議軟體，意圖散布竊資軟體Vidar Stealer
https://www.trellix.com/blogs/research/how-attackers-repackaged-a-threat-into-something-that-looked-benign/

研究人員揭露鎖定亞太地區的惡意軟體Noodle RAT
https://www.trendmicro.com/en_us/research/24/f/noodle-rat-reviewing-the-new-backdoor-used-by-chinese-speaking-g.html

駭客假借提供思科Webex視訊會議軟體，意圖散布竊資軟體Vidar Stealer
https://www.ithome.com.tw/news/163565

駭客組織Void Arachne鎖定中國用戶，假借提供VPN軟體散布惡意程式Winos
https://www.trendmicro.com/en_us/research/24/f/behind-the-great-wall-void-arachne-targets-chinese-speaking-user.html

巴基斯坦駭客組織Cosmic Leopard鎖定Windows、macOS、安卓裝置散布惡意程式
https://www.ithome.com.tw/news/163474

駭客鎖定WordPress網站下手，目的是要脅瀏覽網站的使用者瀏覽器過舊，藉此散布惡意程式
https://www.ithome.com.tw/news/163473

惡意軟體載入工具SquidLoader鎖定中國企業組織而來
https://cybersecurity.att.com/blogs/labs-research/highly-evasive-squidloader-targets-chinese-organizations

Rust竊資軟體Fickle Stealer利用PowerShell繞過使用者帳號控制防護機制
https://www.fortinet.com/blog/threat-research/fickle-stealer-distributed-via-multiple-attack-chain

中國駭客組織針對亞洲電信業者植入後門，嘗試竊取帳密資料
https://symantec-enterprise-blogs.security.com/threat-intelligence/telecoms-espionage-asia

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor
https://thehackernews.com/2024/06/hackers-exploit-legitimate-websites-to.html

Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity rating
https://arstechnica.com/security/2024/06/thousands-of-servers-infected-with-ransomware-via-critical-php-vulnerability/

Pakistani Hackers Use DISGOMOJI Malware in Indian Government Cyber Attacks
https://thehackernews.com/2024/06/pakistani-hackers-use-disgomoji-malware.html

Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware
https://intezer.com/blog/research/ssload-technical-malware-analysis/

Oyster Backdoor Spreading via Trojanized Popular Software Downloads
https://thehackernews.com/2024/06/oyster-backdoor-spreading-via.html

New Linux malware is controlled through emojis sent from Discord
https://www.bleepingcomputer.com/news/security/new-linux-malware-is-controlled-through-emojis-sent-from-discord/amp/

NiceRAT Malware Targets South Korean Users via Cracked Software
https://www.linkedin.com/pulse/nicerat-malware-targets-south-korean-users-via-cracked-l4d4f/

Bondnet Using High-Performance Bots For C2 Server
https://cybersecuritynews.com/bondnet-high-performance-bots-c2-server/

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining
https://thehackernews.com/2024/06/new-malware-targets-exposed-docker-apis.html

SolarMarker Impersonates Job Employment Website
https://www.esentire.com/blog/solarmarker-impersonates-job-employment-website-indeed-with-a-team-building-themed-lure

Analysis of Coin Miner Attack Case Against Domestic Web Server
https://asec.ahnlab.com/ko/66860/

New Threat Actor 'Void Arachne' Targets Chinese Users with Malicious VPN Installers
https://thehackernews.com/2024/06/void-arachne-uses-deepfakes-and-ai-to.html

A New Stealer Named SatanStealer
https://otx.alienvault.com/pulse/6672cfa0305b3ffc75490a6a

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration
https://thehackernews.com/2024/06/new-rust-based-fickle-malware-uses.html

Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations
https://thehackernews.com/2024/06/experts-uncover-new-evasive-squidloader.html

Fickle Stealer Distributed via Multiple Attack Chain
https://www.fortinet.com/blog/threat-research/fickle-stealer-distributed-via-multiple-attack-chain

RAFEL RAT, ANDROID MALWARE FROM ESPIONAGE TO RANSOMWARE OPERATIONS
https://research.checkpoint.com/2024/rafel-rat-android-malware-from-espionage-to-ransomware-operations/

B.行動安全 / iPhone / Android /穿戴裝置 /App / 5G / 即時通訊
台電示警「3C充電7做法」恐釀火災！ 睡覺時充秒中
https://www.ettoday.net/news/20240615/2758541.htm

他們iPhone狂跳「自動安裝APP」關不掉 全因這色色遊戲害慘！解決方法曝光
https://tech.udn.com/tech/amp/story/123154/8041009

Alleged Scattered Spider sim-swapper arrested in Spain
https://www.bleepingcomputer.com/news/legal/alleged-scattered-spider-sim-swapper-arrested-in-spain/

Singapore Police Extradites Malaysians Linked to Android Malware Fraud
https://thehackernews.com/2024/06/singapore-police-extradites-malaysians.html

Signal Foundation Warns Against EU's Plan to Scan Private Messages for CSAM
https://thehackernews.com/2024/06/signal-foundation-warns-against-eus.html

C.事件 / 駭客 / DDOS / APT / 雲端/ 暗網/ 徵才 / 國際資安事件 / 資安人力
資安產業具備輕資產、高價值特性，吸引年輕人投入創業
https://www.ithome.com.tw/article/163110

中國民眾不熱衷！李開復：中國 AI 助理用戶僅千萬，大幅落後 ChatGPT
https://www.inside.com.tw/article/35328-china-ai-not-hot#google_vignette

企業IT預算的資安占比創新高，資安轉型企業加碼力道翻倍
https://www.ithome.com.tw/article/163452

網路攻擊促使北美汽車經銷業者SaaS服務供應商CDK Global暫時關閉系統
https://www.ithome.com.tw/news/163563

產業創新條例的修訂，推動「資安產業化」以及「產業資安化」是主要目標
https://www.ithome.com.tw/article/163109

學術網路跨單位預警 助百萬台主機應對資安威脅
https://www.cna.com.tw/news/ahel/202406190040.aspx

資安警戒！半導體業接二連三出現遭駭事件
https://ec.ltn.com.tw/article/breakingnews/4707412

謀定而後動，善用資安框架是上上策
https://www.ithome.com.tw/article/163232

俊思集團系統遭入侵 逾5.4萬會員及員工或受影響
https://hk.epochtimes.com/news/2024-06-19/72031025#google_vignette

不僅AMD ?! 知名駭客IntelBroker也聲稱入侵Apple?! 暗網兜售疑是兩家公司的資料
https://blog.billows.com.tw/?p=3200

知名駭客稱已盜取AMD大量敏感訊息、公司要查
https://www.ctee.com.tw/news/20240619701003-430702

AMD傳遭駭！產品資訊及員工個資等流入暗網販售，AMD：聯手執法機關調查中
https://today.line.me/tw/v2/article/Vx331y2

晶片大廠AMD驚傳產品研發、客戶資料外洩，初始入侵管道掮客IntelBroker於駭客論壇兜售相關資料
https://www.ithome.com.tw/news/163539

海事工業署四網絡體系 遭駭客於週日侵入
https://unitednews.net.ph/article.php?post=102502

永信藥品工業遭駭客攻擊，首見公開發行公司發布資安重訊
https://www.ithome.com.tw/news/163503

永信：永信藥品工業部份資訊系統遭受駭客攻擊事宜
https://www.moneydj.com/kmdj/news/newsviewer.aspx?a=2b637cfc-52af-40f9-a688-ea76ae52986f

永信藥品:公告本公司部份資訊系統遭受駭客攻擊
https://news.cnyes.com/news/id/5603105

遭駭客攻擊「重要系統未受害」 環球晶喊：明天恢復出貨
https://reurl.cc/RqoOpn

針對部分廠區遭遇網路攻擊，半導體晶圓廠環球晶圓二度發布重大訊息，證實生產及出貨出現延遲
https://www.ithome.com.tw/news/163491

日本航太機構JAXA遭駭客攻擊！　「高機密合約」疑外洩
https://www.ettoday.net/news/20240621/2762255.htm

19座美軍基地旁有中資農地 恐被安裝偵察設備 引國安疑慮
https://udn.com/news/story/6813/8045568?from=udn-catebreaknews_ch2

美國宣布全面禁售卡巴斯基產品
https://www.ithome.com.tw/news/163589

U.S. Bans Kaspersky Software, Citing National Security Risks
https://thehackernews.com/2024/06/us-bans-kaspersky-software-citing.html

美國CISA針對AI資安事故進行首次演習
https://www.cisa.gov/topics/partnerships-and-collaboration/joint-cyber-defense-collaborative/Joint-Cyber-Defense-Collaborative-Artificial-Intelligence-Cyber-Tabletop-Exercise

美國首度模擬「國家級 AI 網攻」，微軟、OpenAI、NVIDIA 皆參與演習
https://www.inside.com.tw/article/35359-cisa-tech-companies-ai-cyberattack-simulation#google_vignette

中國疫情死了4億多人？駭客入侵中共資料庫 意外揭露絕機密
https://reurl.cc/3XQ3gV

中國駭客輕鬆盜走政府資料？微軟總裁受美眾院「靈魂拷問」
https://ec.ltn.com.tw/article/breakingnews/4705080

美國務院六萬封電郵遭中共入侵 微軟總裁國會作證
https://www.ntdtv.com/b5/2024/06/14/a103889322.html

紀錄片揭中國滲透紐西蘭干預政壇 適逢李強到訪引關注
https://www.cna.com.tw/news/aopl/202406150056.aspx

中國駭客組織SecShow在全球進行大規模DNS探測行動
https://www.ithome.com.tw/news/163528
https://blogs.infoblox.com/threat-intelligence/what-a-show-an-amplified-internet-scale-dns-probing-operation/

Sophos揭露《紅宮行動》報告：中國國家支持的駭客組織鎖定東南亞政府機構
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11109

U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain
https://thehackernews.com/2024/06/uk-hacker-linked-to-notorious-scattered.html

Mass exploitation: The vulnerable edge of enterprise security
https://labs.withsecure.com/publications/mass-exploitation-the-vulnerable-edge-of-enterprise-security

The Professionalization of Cyber Crime
https://www.withsecure.com/content/dam/with-secure/en/resources/WS_Professionalisation_of_CyberCrime_EN.pdf

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software
https://thehackernews.com/2024/06/warning-markopolos-scam-targeting.html

Hamas Hackers Sling Stealthy Spyware Across Egypt, Palestine
https://www.linkedin.com/pulse/hamas-hackers-sling-stealthy-spyware-across-egypt-palestine-stfef/

Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021
https://thehackernews.com/2024/06/chinese-cyber-espionage-targets-telecom.html

Sustained Campaign Using Chinese Espionage Tools Targets Telcos
https://symantec-enterprise-blogs.security.com/threat-intelligence/telecoms-espionage-asia

French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks
https://thehackernews.com/2024/06/french-diplomatic-entities-targeted-in.html

儀科中心-資訊服務與資安組-誠徵「資訊工程師」1名
https://www.1111.com.tw/job/130279056/

資安專員
https://ilabor.ntpc.gov.tw/cloud/GoodJob/job_title/992012023

系統工程師(新媒體事業群資訊部)
https://job.taiwanjobs.gov.tw/internet/index/JobDetail.aspx?R2=11&EMPLOYER_ID=11265&HIRE_ID=12820423

資安弱點掃描工程師
https://www.104.com.tw/job/8d3fo?jobsource=google

資訊專員
https://job.taiwanjobs.gov.tw/Internet/index/jobDetail.aspx?R2=&EMPLOYER_ID=98999&HIRE_ID=12826695

網路資安工程師(上班地點：新竹)
https://www.104.com.tw/job/75nlq?jobsource=google

D.資料外洩/個資法/GDPR/網路詐騙/網路釣魚/盜刷/假新聞/網路霸凌/帳號安全
Proofpoint 2024 網路釣魚狀況報告
https://www.ciphertech.com.tw/all_news/products_news/2024-state-of-the-phish/

「兒童網紅」風潮席捲全球！歐美國家立法保護孩童權益
https://www.limedia.tw/edu/51023/

抖音涉侵犯兒少隱私 美國啟動司法調查
https://anntw.com/articles/20240620-bvR2

中國洛縣公共衛生局遭駭客攻擊 20萬人個資恐外洩
https://reurl.cc/VzoRk6

接到這幾種電話 可能是詐騙
https://www.worldjournal.com/wj/story/121360/8032829?from=wj_maintab_index

Synology 隱瞞黑客入侵盜取 51GB 資料 陸續有受害人被釣魚網站勒索攻擊
https://hk.xfastest.com/188430/synology-hacked-51gb-data/

駭客組織Scattered Spider鎖定IT服務人員發動社交工程攻擊，竊取各式SaaS應用程式機密資料
https://www.ithome.com.tw/news/163500

研究人員針對鎖定巴黎奧運賽事而來的詐騙網站提出警告
https://www.ithome.com.tw/news/163471

微軟9月起淘汰個人電子郵件帳號的基礎身分驗證措施
https://www.ithome.com.tw/news/163493

中共傳播菲律賓內戰謠言 利用社媒打認知戰
https://www.epochtimes.com/b5/24/6/17/n14272124.htm

微軟資安問題頻傳，員工電子郵件遭冒用風險升高
https://buzzorange.com/techorange/2024/06/19/security-bug-allows-anyone-to-spoof-microsoft-employee-emails/

中國駭客組織發起釣魚簡訊攻擊Smishing Triad規模擴大，鎖定巴基斯坦用戶發送惡意訊息
https://www.ithome.com.tw/news/163550

曾介紹群暉產品的臉書粉絲專頁被駭客盯上，歹徒冒用該公司名義發出侵害智財權的釣魚信
https://www.ithome.com.tw/news/163537

二一勒令退學？大學生也收詐騙簡訊騙個資
https://www.chinatimes.com/newspapers/20240620000543-260114?chdtv

女子假冒銀行代表 騙取史坦頓島77歲老婦1.5萬元
https://www.epochtimes.com/b5/24/6/20/n14273799.htm

Smishing Triad Targets Pakistan with Large-Scale Banking Scam
https://securityonline.info/smishing-triad-targets-pakistan-with-large-scale-banking-scam/

Meta Pauses AI Training on EU User Data Amid Privacy Concerns
https://thehackernews.com/2024/06/meta-halts-ai-training-on-eu-user-data.html

Google's Privacy Sandbox Accused of User Tracking by Austrian Non-Profit
https://thehackernews.com/2024/06/googles-privacy-sandbox-accused-of-user.html

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws
https://thehackernews.com/2024/06/zkteco-biometric-system-found.html

New phishing toolkit uses PWAs to steal login credentials
https://www.bleepingcomputer.com/news/security/new-phishing-toolkit-uses-pwas-to-steal-login-credentials/

23andMe data breach under investigation in UK and Canada
https://www.linkedin.com/pulse/23andme-data-breach-under-investigation-uk-canada-cisos-insights-8bzwf/

Microsoft: New Outlook security changes coming to personal accounts
https://www.bleepingcomputer.com/news/security/microsoft-new-outlook-security-changes-coming-to-personal-accounts/amp/

E.研究報告/工具
你不知道的 AI 產業鏈！（上）台灣供應鏈的機會來了
https://techops.digiwin.com/ai-chain-taiwan/

你不知道的 AI 產業鏈！（下）資安怎麼做才能跟上時代
https://techops.digiwin.com/ai-chain-security/

統一平台掌握應用程式風險　及時發現異常防資料遭竊 持續發展API全面防護　強化數位營運安全
https://www.netadmin.com.tw/netadmin/zh-tw/viewpoint/CEF3E6C3EC8B40629E6A3D63E3AE7A52

研究人員揭露針對機器學習模型而來的攻擊手法Sleepy Pickle
https://www.ithome.com.tw/news/163545

New Wi-Fi Takeover Attack—All Windows Users Warned To Update Now
https://www.forbes.com/sites/daveywinder/2024/06/14/new-wi-fi-takeover-attack-all-windows-users-warned-to-update-now/

Why Regulated Industries are Turning to Military-Grade Cyber Defenses
https://thehackernews.com/2024/06/why-regulated-industries-are-turning-to.html

TikStalker
https://github.com/P4nD3m1CB0Y0xD/TikStalker

2/6 | Exposing Malicious Extensions: Shocking Statistics from the VS Code Marketplace
https://reurl.cc/9vqNq8

What is DevSecOps and Why is it Essential for Secure Software Delivery
https://thehackernews.com/2024/06/what-is-devsecops-and-why-is-it.html

DJI Mavic 3 Drone Research Part 1: Firmware Analysis
https://www.nozominetworks.com/blog/dji-mavic-3-drone-research-part-1-firmware-analysis

DJI Mavic 3 Drone Research Part 2: Vulnerability Analysis
https://www.nozominetworks.com/blog/dji-mavic-3-drone-research-part-2-vulnerability-analysis

The Annual SaaS Security Report: 2025 CISO Plans and Priorities
https://thehackernews.com/2024/06/the-annual-saas-security-report-2025.html

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024
https://thehackernews.com/2024/06/tool-overload-why-msps-are-still.html

How to Use Tines's SOC Automation Capability Matrix
https://thehackernews.com/2024/02/how-to-use-tiness-soc-automation.html

Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs
https://thehackernews.com/2024/06/researchers-uncover-uefi-vulnerability.html

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024
https://thehackernews.com/2024/06/tool-overload-why-msps-are-still.html

F.商業
微軟將砸2296億元 在西班牙新建資料中心
https://ec.ltn.com.tw/article/breakingnews/4706794

酷澎Coupang在韓遭重罰33億　稱「操控關鍵字」是全球電商慣例
https://www.ettoday.net/news/20240616/2759377.htm

全景軟體強化數位信任 推符合國際標準IoT與零信任安全解決方案
https://www.digitimes.com.tw/tech/dt/n/shwnws.asp?id=0000694167_S7P0R35K7IAKFN6YKQ64V

銓鍇國際廣招人才！解密混合雲浪潮下雲端工程師「必備能力」
https://www.bnext.com.tw/article/79436/ckmates202406

Google培育台灣資安即戰力 明年底新增2000人
https://www.cna.com.tw/news/afe/202406170118.aspx

2025年底前培育超過2000名資安人才，Google攜手數發部、資策會及北科大推動資安人才培育計畫
https://mashdigi.com/to-cultivate-more-than-2000-information-security-talents-by-the-end-of-2025-google-joins-hands-with-the-digital-development-department-information-policy-council-and-beijing-university-of-science-a/

Google 資安證照引進台灣，全英文授課、文組也能報名
https://infosecu.technews.tw/2024/06/17/google-cybersecurity-certificate-launched-in-taiwan/

剖析中小企防禦痛點　兩大技術助企業築防火牆
https://www.hk01.com/article/1023661?utm_source=01articlecopy&utm_medium=referral

是方裸機雲服務上陣，雲米協助台灣電商落地越南
https://www.ithome.com.tw/pr/163433

企業為何上雲，上雲戰略的4大關鍵點
https://enterprise.fetnet.net/content/ebu/tw/epaper/tech/2024/2024_CloudMigration.html

思科台灣數位加速計劃3.0 攜手產官學合作加速數位轉型
https://www.sinotrade.com.tw/richclub/news/666fed02016bc527356a74b1

思科台灣數位加速計畫 TDA 3.0 聚焦永續、資安與 AI 數位轉型
https://reurl.cc/vaxRAN

防堵零時差攻擊 趨勢科技籲制定防禦預防針
https://www.cio.com.tw/technology-for-prevention-of-zero-zero-differential-attack-on-trend-prevention-and-prevention/

XCockpit Identity 洞悉AD安全-預視駭客攻擊路徑，有恃無恐
https://www.metaage.com.tw/news/products/677

New Case Study: Unmanaged GTM Tags Become a Security Nightmare
https://thehackernews.com/2024/06/new-case-study-unmanaged-gtm-tags.html

Proofpoint 協助您完美防範 12 大資安風險
https://www.ciphertech.com.tw/all_news/products_news/proofpoint-news/against-12-cyberthreats/

思科舉行AIoT夥伴鏈結大會
https://www.tssdnews.com.tw/?FID=14&CID=746391#google_vignette

AWS安全長揭露防護生成式AI的心法
https://www.ithome.com.tw/news/163577

G.政府
臺灣推動「資安即國安」領先世界各國，將資安拉高到國安層級
https://www.ithome.com.tw/article/163108

建數位經濟高速公路 黃彥男：打造台灣AI生態園區
https://www.1111.com.tw/news/jobns/156468

資源資安資通三位一體　數發部長黃彥男：讓AI成為下一個護國神山
https://www.technice.com.tw/experience/118601/

資通安全網路月報 （113年5月）
https://moda.gov.tw/ACS/press/report/12956

營區警監系統伺服器誤植為陸製 中科院向廠商求償467萬
https://www.chinatimes.com/amp/realtimenews/20240615002134-260407

顧立雄擬成立聯合督導小組　盯緊中科院成效若未達標撤案裁員
https://n.yam.com/Article/20240615629954

國科會主委盼攜國際廠商 將沙崙打造亞太AI研發重鎮
https://udn.com/news/story/7238/8033202

苗縣府推數位學生證 家長憂資安問題
https://www.chinatimes.com/realtimenews/20240616001965-260421?chdtv

資策會18日董事會將推舉新任董座 智崴前董座黃仲銘出線
https://www.ctee.com.tw/news/20240616700514-430104

苗栗 學生證將全面數位化 家長憂資安
https://www.chinatimes.com/newspapers/20240617000542-260107?chdtv

批內政部塗黑資料 藍委擬刪數位身分證維護費
https://www.cna.com.tw/news/aipl/202406170081.aspx

個資外洩頻傳 資安院協助59家業者提升技術防護
https://udn.com/news/story/7238/8036153

資安院祭2項輔導服務 提升中小企業資安防護能量
https://www.cna.com.tw/news/afe/202406170304.aspx

內政布2.0？調閱數位身分證文件全被塗黑　徐巧芯拿「這物」狠酸
https://www.nownews.com/news/6450736

英國智庫皇家國際事務研究所舉辦2024年網路安全會議，邀請數位發展部分享臺灣防禦策略
https://news.pts.org.tw/article/699798

「資安即國安」戰略目標確立臺灣8年資安發展
https://www.ithome.com.tw/article/163001

打造數位韌性！數發部長：資安扮演關鍵角色
https://reurl.cc/mMQKAA

北科大與Google台灣、數發部、資策會 共同培育台灣資安人才
https://www.ctee.com.tw/news/20240617701304-431204

微軟大型資料中心落腳桃園 張善政：市府已運用微軟AI工具推動業務
https://ec.ltn.com.tw/article/breakingnews/4708102

資安院發表AI打詐技術 大幅提升詐騙廣告識別率
https://www.rti.org.tw/news/view/id/2210122

資策會轉型3年有成 第三方服務占6成收入
https://www.rti.org.tw/news/view/id/2210288

立委民間齊發聲 籲政府建立資安產品國家認證制度
https://www.cna.com.tw/news/aipl/202406180359.aspx

本土資安人才荒 企業啟動資安人才培育計畫
https://www.hakkatv.org.tw/news-detail/1718685061394904

台數發部AI打詐每天辨別萬筆詐騙通報平台下架率達9成
https://www.epochtimes.com/b5/24/6/19/n14273323.htm

數發部運用AI技術識別社群詐騙廣告：每天能搜到5千至1萬筆
https://www.chinatimes.com/amp/realtimenews/20240619003997-260407

新技術打詐！數發部林宜敬：用科技對付科技詐騙
https://reurl.cc/EjNAmv

詐團猖獗無孔不入 民眾防不勝防！資安院研發AI技術助阻詐
https://reurl.cc/9vYv6x

打詐科技偵查政院索「空白授權」立委巧諷「王膝知」恐更多
https://www.ctwant.com/article/344295

學術網路跨單位預警 助百萬台主機應對資安威脅
https://news.cts.com.tw/cna/life/202406/202406192339270.html#google_vignette

資安院今年擬擴大培訓 助攻金融醫療領域資安人才
https://news.pchome.com.tw/finance/cna/20240621/index-17189595357849918003.html

H.工控系統/ICS/SCADA/IOT/物聯網/車聯網/電動車/人工智慧/AI/ML/人臉辨識/醫療 相關資安
革新汽車網路安全 VicOne與ASRG聯手提供無與倫比的汽車威脅情報網
https://www.cdns.com.tw/articles/1029882

汽車關鍵核心的ADAS系統成為駭客鎖定目標，如何避免未來自駕車遭駭而失控將是更大的挑戰
https://www.ithome.com.tw/news/162879

CISA針對AutomationDirect旗下的可程式化邏輯控制器漏洞提出警告
https://www.cisa.gov/news-events/ics-advisories/icsa-24-144-01

ASUS warns of critical remote authentication bypass on 7 routers
https://www.bleepingcomputer.com/news/security/asus-warns-of-critical-remote-authentication-bypass-on-7-routers/

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models
https://thehackernews.com/2024/06/asus-patches-critical-authentication.html

華碩 7 款路由器曝高危險資安漏洞恐遭駭入侵！官方釋安全修補
https://3c.ltn.com.tw/news/58566

Hidden Backdoor in D-Link Routers Let Attacker Login as Admin
https://gbhackers-com.cdn.ampproject.org/c/s/gbhackers.com/hidden-backdoor-in-d-link-routers/amp/

2024年巴塞隆納物聯網展IoT Solutions World Congress 回歸5月展期吸引
https://www.trademag.org.tw/page/newsid1/?id=7903330&iz=6

研究人員揭露攻擊Arm裝置的手法TikTag，能針對Linux版的Chrome下手
https://www.bleepingcomputer.com/news/security/new-arm-tiktag-attack-impacts-google-chrome-linux-systems/

ZKTeco生物識別門禁系統曝嚴重漏洞風險隱患多
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11112

VicOne攜手ASRG發布AutoVulnDB，樹立汽車網路安全新標準
https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11110

VicOne可偵測漏洞並提供獨家解決方案出爐！已在AWS Marketplace上架
https://cars.tvbs.com.tw/car-news/199106

從專案管理角度，看門禁系統資安認證的挑戰
https://www.asmag.com.tw/mobile/article_detail.aspx?aid=12946

快更新！華碩家用路由器有重大漏洞，可讓外人登入
https://netmag.tw/2024/06/20/update-now-major-asus-router-vulnerability

I.教育訓練
iPAS資訊安全工程師中級筆記
https://hackmd.io/@Not/iPASInformationSecuritySpecialist

iPas資安工程師證照考前研習
https://reurl.cc/GEbA3p

iPAS◆資訊安全規劃實務◆中級測驗題庫彙編(123題)
https://reurl.cc/orlD1g

GCP Associate Cloud Engineer (ACE) 學習心得、教材資源與筆記分享 — 學習天然高可用與零信任設計
https://medium.com/blacksecurity/gcp-associate-cloud-engineer-78f736aee7ad

Coursera 盤點 7 項雲端資安認證，高薪跳板都在這了！
https://buzzorange.com/techorange/2022/07/12/cloud-security-certificates/

一般人也能拿到國際資安認證！CSCU安全電腦使用者認證課程
https://www.ithome.com.tw/pr/160954

全球網絡安全勞動力失衡 (ISC)2免費課程及考試填補人才缺口
https://reurl.cc/m39MDj

CISSP資安認證的8大領域
https://2formosa.blogspot.com/2022/12/CISSP-topic-domains.html

CISSP考試心得
https://reurl.cc/KbY83j

CISSP考試心得 – Benson
https://reurl.cc/GbWvxd

目標導向-20天光速考過CISSP
https://reurl.cc/2Zq6zn

CISSP證照考試實戰心得 第一章：初期準備工作
https://netmag.tw/2022/06/17/the-cissp-has-learned-the-first-chapter-in-actual-combat

CISSP證照考試實戰心得 第二章：規律且有紀律的讀書策略
https://netmag.tw/2022/07/01/the-cissp-is-in-the-field-of-combat-chapter-two-regular-and-disciplined-reading-strategies

CISSP證照考試實戰心得 第三章：終極一戰
https://netmag.tw/2022/07/12/the-cissp-has-learned-a-third-chapter-in-actual-combat-experience-the-ultimate-battle

Quick CISSP Infographic for IPSec
https://www.studynotesandtheory.com/single-post/quick-cissp-infographic-for-ipsec

CSSLP Certification - Security models in F#
https://github.com/vbocan/csslp

Certified Secure Software Lifecycle Professional in bullet points
https://github.com/joeyhage/csslp-notes

CPSA(CREST Practitioner Security Analyst) 資安分析師考試心得
https://tech-blog.cymetrics.io/posts/huli/crest-cpsa-prepare/

EC-Council CEH v11 考試心得、改版資訊以及準備方向 2021、2022
https://reurl.cc/1oyEM8

CEH v11 考試心得與準備方式
https://blog.sean.taipei/2022/01/ceh

CEH
https://github.com/a3cipher/CEH

CodeRed by EC-Council
https://github.com/codered-by-ec-council

EC-Council CEH Practical / Master 準備心得 — 讓理論與實作相輔相成的學習
https://medium.com/blacksecurity/ceh-practical-master-3e80cac180a2

EC-Council CEHP考試準備心得
https://hackmd.io/@9dCJrgb6QHGd8dRfgHO0zg/r14xNn1po

ECSA v10 考試心得與讀書資料分享/ ECSA v10 Review and Study Materials
https://medium.com/blacksecurity/ecsa-v10-1ec76c0eb7d4

EC-Council ECSA資安分析專家 v10 考試心得分享
https://javaxtalk.blogspot.com/2019/05/ec-council-ecsa-v10.html

20180817 EC-Council ECSA v10 PASS
https://www.ptt.cc/bbs/License/M.1534571704.A.5BA.html

關於EC-Council CPENT和LPT Master滲透測試證照準備方式及心得分享
https://medium.com/@ChadSecurity/%E9%97%9C%E6%96%BCec-council-cpent%E5%92%8Clpt-master%E6%BB%B2%E9%80%8F%E6%B8%AC%E8%A9%A6%E8%AD%89%E7%85%A7%E6%BA%96%E5%82%99%E6%96%B9%E5%BC%8F%E5%8F%8A%E5%BF%83%E5%BE%97%E5%88%86%E4%BA%AB-efb63de00a8d

深度解析 CPENT 考試心得、以及與 OSCP 的比較
https://reurl.cc/41eL8v

EC-Council CPENT v1 滲透測試認證 – 內容及心得分享
https://hackercat.org/pentesting/ec-council-cpent-v1-experience-review

CPENT 從暴力到破解
https://hackmd.io/@3WAsoRFgSlyy7pm10p60kg/ByO0zs295

Ec-Council CPENT心得 - 資安菜鳥從CEH到LPT Master
https://4hsienyang.medium.com/cpent-lpt-master-ccaebf2dbc7f

CPENT考試心得分享：一次拿到 LPT 滲透測試大師認證
https://ucom.uuu.com.tw/web/Testimony/Article/4404

kaizensecurity/CPENT
https://github.com/kaizensecurity/CPENT/tree/master

CPENT : Pentesting like NO OTHERS !
https://www.linkedin.com/pulse/cpent-pentesting-like-others-belly-rachdianto/

Journey of My CPENT Exam
https://medium.com/techiepedia/journey-of-my-cpent-exam-3a5d7ee6d917

[備考心得]CompTIA Security+ (SY0–601) 上篇
https://reurl.cc/M053DK

[備考心得]CompTIA Security+ (SY0–601) 下篇
https://reurl.cc/M053Gv

comptia-security-plus
https://github.com/ajfuto/comptia-security-plus

security-plus
https://github.com/fjavierm/security-plus

CompTIA Security+ Certification Practice Test Questions
https://www.examcompass.com/comptia/security-plus-certification/free-security-plus-practice-tests#google_vignette

不只是工程師才要懂的 App 資訊安全：取得資安檢測合格證書血淚史（iT邦幫忙鐵人賽系列書）
https://news.pchome.com.tw/living/books/20220202/index-64375841669874292009.html

App防駭學，資安防護實戰課程全面提升安全觀念
https://www.ithome.com.tw/pr/161505

OSEP (Evasion Techniques and Breaching Defenses (PEN-300) 心得分享
https://hackmd.io/@henry-ko/HyQ56e8eF

OSCP（Offensive Security Certified Professional）
https://github.com/0x584A/oscp-notes/tree/master

ISACA Certified Information Systems Auditor® (CISA) 國際電腦稽核師認證準備歷程心得、申請流程分享- 2023年
https://reurl.cc/aVLoX9

Learn NIST Inside Out With 21 Hours of Training @ 86% OFF
https://thehackernews.com/2022/06/learn-nist-inside-out-with-21-hours-of.html

駭客與國家: 網路攻擊與地緣政治新常態
The hacker and the state: cyber attacks and the new normal of geopolitic
https://reurl.cc/D3nKKj

Practical Network Penetration Tester (PNPT) Certification Review
https://tmc222.medium.com/practical-network-penetration-tester-pnpt-certification-review-4280e4e164df

WUSON常用的基本詞彙
https://choson.lifenet.com.tw/?p=1958

證照仍是學習資安基本功的主要管道，有專家打造「資安證照地圖」
https://www.ithome.com.tw/news/156754

用證照證明自己實力之餘，更應將證照視為督促學習的最大動力
https://www.ithome.com.tw/news/156756

打破證照誤解與迷思，資安專家帶你釐清資安證照的意義
https://www.ithome.com.tw/news/156755

Accelerate Your Career with the Global Leader in Cyber Security Training
https://www.sans.org/mlp/promo-partnership-hacker-news/

【成大資安社社課】資安禁術 - 逆向工程地獄試煉
https://www.youtube.com/watch?v=4Yc3-9CjG6U

透過實務演練，教你建立實作標準的安全SOP流程
https://www.ithome.com.tw/pr/163514

6.近期資安活動及研討會
Just a chat - with no Expectations 2024/6/22
https://www.meetup.com/taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-cryptocurrency-meetup/events/lsmkqsygcjbdc/

AI 無法無天？沒法度可管？真人現身說法 2024/6/23
https://www.accupass.com/event/2405140314463639696970

Self-Taught Coding Tuesdays - Study, Code, Design, Build, Network 2024/6/25
https://www.meetup.com/taiwan-code-camp/events/xfxtjtygcjbhc/

高雄 Rails Meetup 2024/6/26
https://www.meetup.com/rails-taiwan/events/qxfvjkygcjbjc/

SyntaxError 2024/6/26
https://www.meetup.com/pythonhug/events/pqnsctygcjbjc/

Free Startup Fundraising Office Hours Expert AMA with Angel Investor Scott Fox! 2024/6/26
https://www.meetup.com/taipei-startups-investors-masterminds-network/events/299702428/

數據掌權時代 解鎖資料解決方案的完整攻略 2024/6/26
https://www.accupass.com/event/2405251051471673260983

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2024/6/27
https://www.meetup.com/hackingthursday/events/psspctygcjbkc/

AI應用系統開發與生成式AI應用人才培訓班第一梯次 2024/6/27
https://www.accupass.com/event/2401100729511706489107

市場趨勢--不怕被AI取代，企業資安關鍵人才剖析 2024/6/27
https://www.accupass.com/event/2405230228276957814350

AI應用系統開發與生成式AI應用人才培訓班第一梯次 2024/6/27 ~ 2024/8/9
https://www.accupass.com/event/2401100729511706489107

永續轉型：綠色供應鏈x資訊安全x多元共融 2024/6/28
https://smeoda.kktix.cc/events/2024-1

Just a chat - with no Expectations 2024/6/29
https://www.meetup.com/taipei-%E6%9A%97%E5%8F%B7%E9%80%9A%E8%B2%A8-cryptocurrency-meetup/events/lsmkqsygcjbmc/

高雄 Rails Meetup 2024/7/3
https://www.meetup.com/rails-taiwan/events/qxfvjkygckbfb/

SyntaxError 2024/7/3
https://www.meetup.com/pythonhug/events/pqnsctygckbfb/

HackingThursday 黑客星期四 - Week meetup Tamsui 固定聚會 淡水 2024/7/4
https://www.meetup.com/hackingthursday/events/psspctygckbgb/

國家高速網路與計算中心 教育訓練 RSC The Merck Index資料庫中文線上 2024/7/4
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4105&from_course_list_url=homepage

ISO 27001：2022資訊安全管理系統主導稽核員訓練 2024/7/8 ~ 2024/7/12
https://www.accupass.com/event/2403090707238144555890

國家高速網路與計算中心 教育訓練 ABAQUS基礎訓練課程 2024/7/9
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4099&from_course_list_url=homepage

InfoSec Taiwan 2024 國際資安組織大會 2024/7/9 ~ 2024/7/11
https://csa.kktix.cc/events/infosectaiwan2024

.NET / Java 安全程式開發達人集訓班 2024/7/11 ~ 2024/7/12
https://www.accupass.com/event/2405280149081202805431

CraftCon Taiwan 奧義 AI 資安年會 2024/7/12
https://www.accupass.com/event/2404221057531664149101

【第1期】2024企業資訊安全基礎課程 2024/7/17
https://www.accupass.com/event/2402020448251773447860

Free Startup Fundraising Office Hours Expert AMA with Angel Investor Scott Fox! 2024/7/24
https://www.meetup.com/taipei-startups-investors-masterminds-network/events/299702433/

國家高速網路與計算中心 教育訓練 NVIDIA GPU 計算 2024/7/24
https://edu.nchc.org.tw/course/one_course_introduction.asp?lms_auto_course_id=4094&from_course_list_url=homepage

HITCON Cyber Range 2024 企業藍隊競賽 2024/7/26 ~ 2024/10/30
https://hitcon.kktix.cc/events/hitcon-cyberrange-2024

【安碁學苑】資安職能培訓｜系統網路安全管理師 2024/7/27 ~ 2024/8/24
https://acsiacad.kktix.cc/events/6ebd7fbd-copy-4

FinTech Summer CAMP 2024/8/5 ~ 2024/8/9
https://isipevent.kktix.cc/events/f2ce8bcc-copy-6

Free Startup Fundraising Office Hours Expert AMA with Angel Investor Scott Fox! 2024/8/28
https://www.meetup.com/taipei-startups-investors-masterminds-network/events/299702435/