Uncategorized

Nā ʻano faila Malware Kiʻekiʻe – HP Wolf Security ua kālailai i nā ʻano faila malware kiʻekiʻe a puka mai nā lau ma luna.

Hōʻike ka hōʻike noiʻi hou iā Spreadsheest ma ke ʻano o ka faila malware kiʻekiʻe ma 34% a 11% hoʻonui i nā mea hoʻoweliweli i hāʻawi ʻia ma Archive.

Hāʻawi ʻo Wolf Security i ka pale hope loa a me ka resiliency e hoʻomaka ana ma ka pae ʻenehana a hoʻonui i nā polokalamu a me nā lawelawe.

Hōʻike ka hōʻike i nā hoʻoweliweli kaulana, nā loina a me nā ʻenehana i ʻike ʻia e ka telemetry mea kūʻai aku o HP Wolf Security ma ka kalena Q2 2022. Loaʻa i nā mea koʻikoʻi kahi loiloi o ka pilikia i hoʻopuka ʻia e CVE-2022-30190, he pilikia ʻole lā e pili ana i ka Microsoft Support Diagnostic Tool, me nā hoʻolaha i ʻike ʻia ma ka nahele o ka poʻe hoʻouka kaua e hoʻohana nei i kēia hemahema, a me ka piʻi ʻana o ka pōkole (LNK) nā faila ma ke ʻano he koho macro-free no ka hoʻokō ʻana i nā polokalamu malware.

 

ʻO kahi hanana palekana ma Cisco e hoʻomālamalama i ke ʻano o ka hoʻouka ʻana o ka wā e hiki mai ana.

Eia ke ʻano i iho ai:

1. Ua loaʻa i ka mea hacker ke komo i ka moʻokāki Gmail pilikino o kahi limahana Cisco. Ua mālama kēlā moʻokāki Gmail i nā hōʻoia no ka Cisco VPN.

2. Pono ka VPN i ka MFA no ka hōʻoia. E kaalo i keia, Ua hoʻohana ka mea hacker i ka hui pū ʻana o ka MFA push spamming (ka hoʻouna ʻana i nā ʻōkuhi MFA he nui i ke kelepona o ka mea hoʻohana) a me ka hoʻopili ʻana i ke kākoʻo Cisco IT a kāhea aku i ka mea hoʻohana.

3. Ma hope o ka hoʻopili ʻana i ka VPN, ua kākau inoa nā mea hacker i nā mea hou no MFA. Ua wehe kēia i ka pono e spam i ka mea hoʻohana i kēlā me kēia manawa a ʻae iā lākou e komo i loko o ka pūnaewele a hoʻomaka e neʻe ma hope.

ʻAʻohe pōkā kālā i ka palekana cyber. Ke hoʻolaha nei nā hui i nā pale e like me MFA, e loaʻa i nā mea hoʻouka ke ala e kāʻalo ai. ʻOiai hiki ke hoʻonāukiuki kēia i nā hui, ʻo ia ka ʻoihana palekana maoli e noho nei.

Hiki iā mākou ke hōʻeha i ka loli mau a i ʻole ke koho e hoʻololi a noho makaʻala. Kōkua ia i ka hoʻomaopopo ʻana ʻaʻohe laina hoʻopau i ka palekana cyber – he pāʻani pau ʻole o ke ola.

WordPress powers 37% of all websites on the internet in 2021. That’s 10% more than in 2016 when they powered only 25% of websites. WordPress powers over 13 times the number of CMS websites compared to Joomla, the second most popular CMS host.

Undertaking a regular website security test of your WordPress website is critical to ensure any vulnerabilities or malware as fixed.

An example of this is hackers have reportedly scanned almost 1.6 million WordPressn websites in attempts to exploit an arbitrary file upload vulnerability in a previously disclosed buggy WordPress plugin.

The vulnerability targets Kaswara Modern WPBakery Page Builder Addons a, if exploited, it would allow criminals to upload malicious JavaScript files and even completely take over an organization’s website.

E hilinaʻi iā Hack Security Breach

Ua hōʻoia hope loa ʻo Entrust i kāna ʻōnaehana IT kūloko i ka mahina o Iune.

He ʻoihana palekana ʻo Entrust e pili ana i ka hilinaʻi pūnaewele a me ka hoʻokele ʻike, hāʻawi i kahi ākea o nā lawelawe, me nā kamaʻilio i hoʻopili ʻia, mālama i nā uku kikohoʻe, a me nā hāʻina hoʻopuka ID.

Ua ʻaihue nā mea hackers 'kekahi mau faila' mea kūʻai palekana ʻo Entrust: Ua hōʻoia ʻia ka uhaki ʻikepili i ka mahina i hala me ka ʻae ʻole ʻia o nā ʻōnaehana kūloko.

Entrust has reluctantly admitted the databreach, ka hopena o ka ʻaihue ʻana i nā ʻikepili koʻikoʻi o ka hui. Hoʻopilikia ka haʻihaʻi i ka DOJ, ka DOE, a me ka USDT, ma waena o nā hui nui.

ʻAʻole a hiki i Iulai 26th i hōʻoia ʻia ai ka haʻihaʻi i ka wā i hoʻopuka ai ka mea noiʻi palekana Dominic Alvieri i kahi kiʻi kiʻi o kahi leka palekana i hoʻouna ʻia i nā mea kūʻai aku o Entrust..

ʻO ka hana pūʻulu kuleana i hilinaʻi ʻia i ka ʻoihana hilinaʻi o nā mea kūʻai aku i ka ʻoihana pūnaewele e loaʻa ai ke komo mua i ke kaiapuni Entrust i alakaʻi ai i ka hoʻopili a me ka exfiltration hōʻike ma o kahi hui ransomware i ʻike ʻia..

ʻAʻole ʻike ʻia i kēia manawa inā ua uku ʻia kahi pānaʻi.

Ua ʻike ʻia ka haki ma Iune 18 and the firm started notifying customers on July 6. The reasons for the delay on notifying customers was not given. Hiki i kēia lohi ke hoʻopilikia i nā ʻōnaehana mea kūʻai aku a hiki ke manaʻo ʻia he haʻahaʻa.

Ua ʻōlelo ʻia ʻo Entrust “Ua hoʻoholo mākou ua lawe ʻia kekahi mau faila mai kā mākou ʻōnaehana kūloko. Ke hoʻomau nei mākou i ka noiʻi ʻana i ka pilikia, E hoʻokaʻaʻike pololei mākou iā ʻoe inā mākou e aʻo i ka ʻike a mākou e manaʻoʻiʻo nei e pili ana i ka palekana o nā huahana a me nā lawelawe a mākou e hāʻawi ai i kāu hui.” – Hāʻawi.