Website Security Tester

Mataqali Faile Vakayagataki Vakaiyaqaqa e Cake – iTaqomaki nei NEI Wolf Security era sa dau vakayagataka na mataqali faile kei na spreadsheet e cake.

Na ripote vou ni vakadidike ena vakatakila na Spreadsheest me isevu ni faile ni veiteitei ena 34% kei na 11% vakalevutaki ni veivakarerei e vakarerei ena Akaivi.

E vakarautaka na Wolf Security na veitaqomaki e rabailevu ni icavacava kei na yalodei ka tekivu mai na gacagaca ni gacagaca ka raba ni parokaramu kei na veiqaravi.

E railesuva na ripote na veivakarerei bibi eso, na veiveisau kei na iwalewale era kunea na dauveivoli nei NEI Wolf Security ena ivolanivula Q2 2022. Na veika me saravi e oka kina na dikevi ni veika ririkotaki e cakava na CVE-2022-30190, e dua na nuiqawaqawa sega ni rawa ni yaco me tara na Microsoft Support Tool, oka kina na veiroini e laurai vei ira na dauvakasaqaso ka ra vakatakila na cala oqo, kei na cabe ni sala leleka (NK) faile me isosomi sega ni saumi vakalawa me vakasaqaqataki kina na veivakarautaki lesu.

 

A security incident at Cisco sheds light on how attacks of the future will unfold.

Here’s how it went down:

1. The hacker gained access to a Cisco employee’s personal Gmail account. That Gmail account had saved credentials for the Cisco VPN.

2. The VPN required MFA for authentication. To bypass this, the hacker used a combination of MFA push spamming (sending multiple MFA prompts to the user’s phone) and impersonating Cisco IT support and calling the user.

3. After connecting to the VPN, the hackers enrolled new devices for MFA. This removed the need to spam the user every time and allowed them to log into the network and begin moving laterally.

There isn’t a silver bullet in cyber security. As organizations roll out defenses like MFA, attackers will find a way to bypass. While this can be frustrating for organizations, it is the reality security professionals live in.

We can either get frustrated by the constant change or choose to adapt and stay alert. It helps to recognize that there is no finish line in cyber security – it is an endless game of survival.

Kaukauwa ni WordPress 37% ni mataveilawa taucoko ena initaneti ena 2021. Oqori 10% levu cake mai na 2016 ni ra qaqa walega 25% ni mataveilawa. Kaukauwa ni WordPress 13 gauna e vakatauvatani kina na levu ni mataveilawa ni CMS ki na, na ikarua ni kaiwaqa ni CMS kilai levu duadua.

Sa ka bibi sara na kena vakayacori e dua na vakatovotovo ni itataqomaki ni mataveilawa ni WordPress me vakadeitaki kina na malumalumu se na veimataqali vakayagataki vakamatailalai.

E dua na ivakaraitaki ni dautaqaya oqo e tukuni ni ra a vakadikevi voleka sara ga 1.6 milioni na mataveilawa ni WordPressn ena kena sagai me vakayagataki e dua na faile vakaiyadua ni vakavodoki ni malumalumu ena dua na qiqi a vakatakilai taumada o WordPress.

Na itoqa ni rawa-ka e vaqaqa Addons o Kaswai Modern NIFAI Dautara Tabana ni Lotu kei na, kevaka e vakayayamotaki, ena vakatara vei ira na dauvakacaca me ra vakavodoka na faili ca ni JavaScript ka taura sara mada ga e dua na mataveilawa ni mataisoqosoqo.

Vagalalataki ni Vatu iTaqomaki

Sa vakadeitaka rawa na raragi ni veitaqomaki o Entrust na kena ivakarau e loma ni IT ka sa vakasevi lesu tale ena June ni.

Na veivakabauti e dua na kabani ni veitaqomaki e vakanamata ki na veivakabauti ena initaneti kei na lewai matau ni ivakatakilakila, solia na veimataqali veiqaravi raraba, oka kina na veitaratara sega ni taucoko, sausaumi vakalivaliva taqomaki, kei na iwali ni kena soli na ID.

Era sa dau lakosoci ira na dautaqomaki ni 'so na faile' ni dauveitaqomaki nei Entrust: Sa mai vakadeitaki na curumi ni itukutuku ena vula sa oti ka sega ni vakadonui na curu ki na gacagaca e loma.

Entrust has reluctantly admitted the databreach, ka vakavuna na butakoci ni itukutuku bibi vakatui ni kabani. Na kabasu ena vakataotaka na DOJ, na YDE, kei na SDT, ena kedra maliwa na vesoqosoqo lelevu tale eso.

Me yacova sara na ika 26 ni Julai sa vakadeitaki kina na vakabesewa oqo e matanalevu ena nona a vakacurumi e matanalevu o koya e vakadidike tiko ena itataqomaki o Dope ena dua na sikirini ni dua na notisi ni tataqomaki ka vakau vei ira na kasitama ni Entrust.

Na veiqaravi vakailawalawa nuitaki oqo a vakararavi ki na veitaratara nuitaki ni veitaratara kei ira era volivolitaki ni veitaratara me rawa ni ra yacova rawa na vanua e Nuitaki ka muataki ki na kena vakasokumuni ka laurai e muri ena dua na ilawalawa ni ivoli.

Ke sa saumi oti na ivoli se sega tiko ni kilai ena gauna oqo.

A kunei na kabasu oqo ena june ni June 18 and the firm started notifying customers on July 6. The reasons for the delay on notifying customers was not given. Na lokuyara oqo ena rawa ni vakaleqai na nodra ivakarau na kasitama ka rawa ni okati me ra vakaweleweletaki.

Sa tukuni oti na veivakavukui “Keitou sa vakadeitaka ni a kau tani eso na faile mai na neitou ivakarau e loma. Ni keitou tomana tiko na vakadikevi ni veika a yaco, keimami na veitaratara vakadodonu vei kemuni kevaka keimami vulica na itukutuku keimami vakabauta ni na vakayaco-ka ki na taqomaki ni ivoli kei na veiqaravi keimami vakarautaka ki na nomuni isoqosoqo.” – Nuitaki.