Uncategorized

Mataqali Faile Vakayagataki Vakaiyaqaqa e Cake – iTaqomaki nei NEI Wolf Security era sa dau vakayagataka na mataqali faile kei na spreadsheet e cake.

Na ripote vou ni vakadidike ena vakatakila na Spreadsheest me isevu ni faile ni veiteitei ena 34% kei na 11% vakalevutaki ni veivakarerei e vakarerei ena Akaivi.

E vakarautaka na Wolf Security na veitaqomaki e rabailevu ni icavacava kei na yalodei ka tekivu mai na gacagaca ni gacagaca ka raba ni parokaramu kei na veiqaravi.

E railesuva na ripote na veivakarerei bibi eso, na veiveisau kei na iwalewale era kunea na dauveivoli nei NEI Wolf Security ena ivolanivula Q2 2022. Na veika me saravi e oka kina na dikevi ni veika ririkotaki e cakava na CVE-2022-30190, e dua na nuiqawaqawa sega ni rawa ni yaco me tara na Microsoft Support Tool, oka kina na veiroini e laurai vei ira na dauvakasaqaso ka ra vakatakila na cala oqo, kei na cabe ni sala leleka (NK) faile me isosomi sega ni saumi vakalawa me vakasaqaqataki kina na veivakarautaki lesu.

 

A security incident at Cisco sheds light on how attacks of the future will unfold.

Here’s how it went down:

1. The hacker gained access to a Cisco employee’s personal Gmail account. That Gmail account had saved credentials for the Cisco VPN.

2. The VPN required MFA for authentication. To bypass this, the hacker used a combination of MFA push spamming (sending multiple MFA prompts to the user’s phone) and impersonating Cisco IT support and calling the user.

3. After connecting to the VPN, the hackers enrolled new devices for MFA. This removed the need to spam the user every time and allowed them to log into the network and begin moving laterally.

There isn’t a silver bullet in cyber security. As organizations roll out defenses like MFA, attackers will find a way to bypass. While this can be frustrating for organizations, it is the reality security professionals live in.

We can either get frustrated by the constant change or choose to adapt and stay alert. It helps to recognize that there is no finish line in cyber security – it is an endless game of survival.

Kaukauwa ni WordPress 37% ni mataveilawa taucoko ena initaneti ena 2021. Oqori 10% levu cake mai na 2016 ni ra qaqa walega 25% ni mataveilawa. Kaukauwa ni WordPress 13 gauna e vakatauvatani kina na levu ni mataveilawa ni CMS ki na, na ikarua ni kaiwaqa ni CMS kilai levu duadua.

Sa ka bibi sara na kena vakayacori e dua na vakatovotovo ni itataqomaki ni mataveilawa ni WordPress me vakadeitaki kina na malumalumu se na veimataqali vakayagataki vakamatailalai.

E dua na ivakaraitaki ni dautaqaya oqo e tukuni ni ra a vakadikevi voleka sara ga 1.6 milioni na mataveilawa ni WordPressn ena kena sagai me vakayagataki e dua na faile vakaiyadua ni vakavodoki ni malumalumu ena dua na qiqi a vakatakilai taumada o WordPress.

Na itoqa ni rawa-ka e vaqaqa Addons o Kaswai Modern NIFAI Dautara Tabana ni Lotu kei na, kevaka e vakayayamotaki, ena vakatara vei ira na dauvakacaca me ra vakavodoka na faili ca ni JavaScript ka taura sara mada ga e dua na mataveilawa ni mataisoqosoqo.