MYInstituições
MyCERT
Incident response and security advisories in Malaysia.
O PORTAL CIBER INTERNACIONAL / DIRECTORY
Um mundo de conhecimento.
Instituições públicas, equipas de resposta, empresas e investigação. Encontre recursos para o seu país e os seus desafios.
Distribuição dos perfis FIRST · 883
Perfis no instantâneo : 883 ·
- Government, Private and Public sectors
252 / 883 252 - Other commercial
207 / 883 207 - Industrial sector
95 / 883 95 - Financial sector
94 / 883 94 - ICT vendor customer base
57 / 883 57 - Setor não indicado
50 / 883 50 - Government & military
46 / 883 46 - Research & education
45 / 883 45 - ISP customer base
37 / 883 37
O país e o setor não determinam o âmbito de intervenção. Confirme as condições no perfil oficial. FIRST ↗
AUInstituições
Australian Cyber Security Centre
Australian cybersecurity guidance and resources.
NCInstituições
NCSC · New Zealand
New Zealand cybersecurity guidance and information.
DGInstituições
DGSSI · Maroc
Morocco information systems security authority.
AGInstituições
Agence Nationale de la Cybersécurité · Tunisie
Tunisian national cybersecurity resources.
NGInstituições
ngCERT
Nigeria national computer emergency response team.
KEInstituições
KE-CIRT/CC
Kenya national incident response coordination.
CYInstituições
Cybersecurity Hub · South Africa
Public cybersecurity resources in South Africa.
NAInstituições
National Cybersecurity Authority · Saudi Arabia
National cybersecurity guidance and controls.
AEInstituições
aeCERT · TDRA
UAE telecommunications and cybersecurity resources.
ISInstituições
Israel National Cyber Directorate
Public national cyber directorate resources.
FIComunidades e normas
FIRST
International network of incident response teams.
CEComunidades e normas
Center for Internet Security
Security controls and benchmarks.
MISetor privado
Microsoft Security
Security research and analysis published by Microsoft.
GOSetor privado
Google Threat Intelligence
Threat intelligence research publications.
UNSetor privado
Unit 42 · Palo Alto Networks
Threat research and technical reports.
CISetor privado
Cisco Talos
Threat analysis and research publications.
CLSetor privado
Cloudflare
Networking, security and infrastructure analysis.
FIComunidades e normas
FIRST · EPSS
Vulnerability exploitation probability model. Compare with technical severity, local exposure and business impact.
Informação documental
- Dado ou referência verificada
- The model looks ahead 30 days. Its score is a probability; its percentile ranks that score relative to other CVEs.
- Como utilizar
- Record the data date and distinguish probability from percentile. Add asset exposure and confirmed exploitation evidence.
- Limite a preservar
- The model does not predict harm to your organisation. Low probability does not cancel a critical exposure.
Documentação consultada em
CVSS, EPSS, KEV e VEX
What is the estimated probability of observing exploitation of this CVE in the next thirty days?
It does not describe compromise of your instance, its controls or business loss.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- FIRST · EPSS Frequently Asked Questions · Living FAQ · reviewed 2026-10-22
What is EPSS? · Reading the score · Percentile · Score changes
Sources checked on
FIComunidades e normas
FIRST · CVSS
Vulnerability severity specification and calculators. A score alone does not describe organisation-specific risk.
Informação documental
- Dado ou referência verificada
- CVSS 4.0 scores run from 0.0 to 10.0. Base, Threat, Environmental and Supplemental metric groups serve different purposes.
- Como utilizar
- Retain the score version, vector and date. Compare it with the installed version, access paths and business consequences before ordering remediation.
- Limite a preservar
- A high score is not evidence of exploitation; a low score does not mean a service has no risk.
Documentação consultada em
CVSS, EPSS, KEV e VEX
What is the technical severity under the assessed metrics?
The score proves neither exploitation nor consequences for your service.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- FIRST · CVSS 4.0 Specification · CVSS 4.0 · document 1.2 · reviewed 2026-10-22
Overview · Assessment · Nomenclature · Supplemental Metrics
Sources checked on
CVComunidades e normas
CVE Program
Public vulnerability identifiers and records. Check products, affected versions and links to original advisories.
Informação documental
- Dado ou referência verificada
- A JSON schema defines the CVE record format. An identifier and the published contents of its record are distinct things.
- Como utilizar
- Open the record and references; check its state, described affected versions and supplier information. Keep the identifier in action tracking.
- Limite a preservar
- A CVE identifier is neither a severity score nor proof that your installation is affected.
Documentação consultada em
NIInstituições
NIST · National Vulnerability Database
Vulnerability database and technical enrichment. Cross-check records against vendor advisories and the deployed configuration.
NIInstituições
NIST · Cybersecurity Framework
Cyber risk management framework and implementation resources. Organises intended outcomes rather than providing certification.
Informação documental
- Dado ou referência verificada
- CSF 2.0 has six functions: Govern, Identify, Protect, Detect, Respond and Recover. It does not prescribe a single way to achieve outcomes.
- Como utilizar
- Describe current and target profiles with evidence, gaps and owners. Connect each priority to the services it helps protect.
- Limite a preservar
- Mapping to the framework is neither certification nor proof that every control works.
Documentação consultada em
Incidentes cibernéticos: decisões e evidências
Qualifying a signal, preserving investigative material and restoring a service answer different questions. CSF 2.0 distinguishes recovery initiation, integrity of restoration assets, validation of restored assets and the end of recovery. These are outcomes to document, not certification or one mandatory procedure.
The twelve entries below are a selected, paraphrased part of CSF 2.0. Evidence columns, timelines and injects are original teaching proposals. They do not replace a local plan and imply no universal timing, severity level or authority. SP 800-61 Revision 3 has been final since April 2025 and supersedes Revision 2.
Explore NIST outcomes and the timeline →
Primary references and limits
Identifiers and outcome meanings come from CSF 2.0; SP 800-61r3 adds incident response and recovery recommendations. Evidence tables, times and scenarios are educational, with no client results, certification or actual notification.
- NIST · SP 800-61 Rev. 3 · Final · 2025-04-03
Community Profile CSF 2.0 ; remplace / supersedes Rev. 2 - NIST · SP 800-61r3 — recommandations détaillées / detailed recommendations · April 2025
Pages imprimées / printed pages 27–29, 34–35 : RS.MA, RS.AN, RC.RP, RC.CO - NIST · Cybersecurity Framework 2.0 · 2024-02-26 · NIST CSWP 29
Appendix A, printed pages 22–23 : official outcome identifiers - NIST · SP 800-184 — Guide for Cybersecurity Event Recovery · Final · 2016-12-22
Recovery planning, playbooks, testing and improvement
References reviewed
10CERT / CSIRT / SOC
104 CSIRT
- Nome completo
- 104 CSIRT
- Setor do perfil FIRST
- Other commercial
- Organização de acolhimento
- 104 Corporation
- Tipo de equipa declarado
- CSIRT, SOC
- Criação declarada
- October 18, 2017
- Membro FIRST desde
- December 17, 2025
Dados obtidos em · FIRST