ABBYY has announced the release of a new mobile app, FineScanner AI, for iOS and Android, designed for document scanning tasks. This product, created by a Russian developer, allows users to create PDF or JPG files from any printed documents (bills, certificates, contracts, personal documents). The app incorporates OCR technology that recognizes text in 193 languages while preserving formatting […]
A vulnerability has been identified in the Docker management tool for isolating Linux containers (CVE-2018-15664), which, under certain circumstances, allows access to the host environment from a container if there is permission to run images in the system or access to the running container. This issue affects all versions of Docker and remains unpatched (a patch has been proposed but not yet accepted).
Hello, dear IT specialists! Stop picking your noses; instead, listen to an economics course. From this course, you will learn about the most important economic concepts, and as a result, you will become incredibly smart. And if you answer the questions correctly, your parents will buy you ice cream and take you to the zoo. Task 1 In a faraway kingdom, in a distant state, a grandfather grew a turnip, and the hen Ryaba laid […]
Iranian pro-government hackers are facing significant problems. Throughout the spring, unknown individuals published "secret leaks" in Telegram—information about Iranian government-related APT groups—OilRig and MuddyWater—their tools, victims, and connections. But not all of them. In April, Group-IB specialists discovered a leak of email addresses from the Turkish corporation ASELSAN A.Ş, which specializes in the production of tactical military radios and electronic […]
This article's translation is prepared for students in the course 'DevOps Practices and Tools' in the educational project OTUS. You should choose a monorepository because the behavior it fosters in your teams is transparency and collective responsibility, especially as teams grow. In any case, you will have to invest in the tooling, but it is always better when the default behavior is this behavior, […]
Safety first – it's not an abstract call, but a concrete action plan for enterprises with industrial safety risks. Data centers fall into this category, which means they must have well-developed labor protection rules. Today, I will discuss how the LOTO system at Linxdatacenter's site in St. Petersburg enhances data center operational safety. Analyzing industrial accidents, injuries, incidents, and occupational diseases [...]
This article is the sixth in the series "How to Take Control of Your Network Infrastructure." You can find the content and links to all articles in the series here. After leaving a few topics behind, I decided to start a new chapter. I will return to security a bit later. Here, I want to discuss one simple yet effective approach that I believe, in one way or another, [...]
Note: May 16 this year marks a significant milestone in the development of the package manager for Kubernetes — Helm. On this day, the first alpha release of the upcoming major version of the project — 3.0 was presented. Its release will bring substantial and long-awaited changes to Helm, on which many in the Kubernetes community are placing great hopes. We are among them, as we are actively […]
Comparison and selection of data migration systems. The data model during development tends to change, and at some point, it no longer matches the database. Of course, the database can be deleted, and then the ORM will create a new version that will correspond to the model, but this procedure will lead to the loss of existing data. Thus, the function of the migration system comes down to […]
The W3C and WHATWG organizations have signed an agreement for further joint development of the HTML and DOM specifications. The signing of the agreement marked the conclusion of the rapprochement process between W3C and WHATWG, initiated in December 2017 after the introduction of some shared workflows in WHATWG and the approval of uniform rules regarding intellectual property. A new working group has been created in W3C for collaborative work on the specifications […]
In the first part of our article on ISTQB certification, we tried to answer the questions: Who? and Why? is this certificate needed. A little spoiler: collaboration with ISTQB opens more doors more for the employer company than for the newly minted certificate holder. In the second part of the article, our staff will share their stories, impressions, and insights regarding passing the ISTQB test, both within the CIS, […]
A story about research and development in three parts. Part 1 — research. There are many books — even more benefits. Task statement In the course of conducting penetration tests and Red Team campaigns, it is not always possible to use the standard tools of the Clients, such as VPN, RDP, Citrix, etc., as a means to gain access to the internal network. Sometimes the standard VPN operates under MFA […]