Website Security Tester

Sab saum toj Malware Cov Ntaub Ntawv – HP Wolf Security tau txheeb xyuas cov ntaub ntawv malware saum toj kawg nkaus thiab cov ntawv nthuav tawm tuaj rau saum.

Daim ntawv ntsuam xyuas tshiab nthuav tawm Spreadsheest raws li cov ntaub ntawv malware sab saum toj ntawm 34% thiab 11% nce hauv kev hem thawj xa hauv Archive.

Wolf Security muaj kev tiv thaiv qhov kawg thiab kev ua haujlwm zoo uas pib ntawm qib kho vajtse thiab txuas mus thoob plaws software thiab cov kev pabcuam.

Daim ntawv tshaj tawm tshuaj xyuas cov kev hem thawj tseem ceeb, malware tiam sis thiab cov txheej txheem txheeb xyuas los ntawm HP Wolf Security cov neeg siv khoom telemetry hauv daim ntawv qhia hnub Q2 2022. Cov ntsiab lus tseem ceeb suav nrog kev txheeb xyuas qhov pheej hmoo tshwm sim los ntawm CVE-2022-30190, xoom-hnub vulnerability cuam tshuam rau Microsoft Support Diagnostic Tool, suav nrog cov phiaj xwm pom hauv cov tsiaj qus ntawm cov neeg tawm tsam siv qhov tsis zoo no, thiab sawv ntawm shortcut (LNK) cov ntaub ntawv raws li ib tug macro-dawb lwm txoj rau executing malware.

 

Qhov xwm txheej kev nyab xeeb ntawm Cisco ua rau pom qhov kev tawm tsam ntawm yav tom ntej yuav nthuav tawm li cas.

Nov yog li cas nws tau poob:

1. Lub hacker tau nkag mus rau Cisco tus neeg ua haujlwm tus kheej Gmail account. Tus account Gmail ntawd tau khaws cov ntawv pov thawj rau Cisco VPN.

2. VPN xav tau MFA rau kev lees paub. Txhawm rau hla qhov no, lub hacker siv ib tug ua ke ntawm MFA thawb spamming (xa ntau MFA cov lus qhia rau tus neeg siv lub xov tooj) thiab impersonating Cisco IT kev txhawb nqa thiab hu rau tus neeg siv.

3. Tom qab txuas rau VPN, cov hackers tau tso npe rau cov cuab yeej tshiab rau MFA. Qhov no tshem tawm qhov xav tau spam tus neeg siv txhua lub sijhawm thiab tso cai rau lawv nkag mus rau hauv lub network thiab pib txav mus tom qab.

Tsis muaj cov mos txwv nyiaj hauv cyber security. Raws li cov koom haum nthuav tawm kev tiv thaiv zoo li MFA, attackers yuav nrhiav tau ib txoj kev bypass. Thaum qhov no tuaj yeem ntxhov siab rau cov koom haum, nws yog cov kws tshaj lij kev ruaj ntseg tiag tiag nyob hauv.

Peb tuaj yeem ntxhov siab los ntawm qhov hloov tsis tu ncua lossis xaiv hloov kho thiab ceev faj. Nws pab kom paub tseeb tias tsis muaj kab tiav hauv kev ruaj ntseg cyber – nws yog ib qho kev ua si tsis muaj sia nyob.

WordPress powers 37% of all websites on the internet in 2021. That’s 10% more than in 2016 when they powered only 25% of websites. WordPress powers over 13 times the number of CMS websites compared to Joomla, the second most popular CMS host.

Undertaking a regular website security test of your WordPress website is critical to ensure any vulnerabilities or malware as fixed.

An example of this is hackers have reportedly scanned almost 1.6 million WordPressn websites in attempts to exploit an arbitrary file upload vulnerability in a previously disclosed buggy WordPress plugin.

The vulnerability targets Kaswara Modern WPBakery Page Builder Addons thiab, if exploited, it would allow criminals to upload malicious JavaScript files and even completely take over an organization’s website.

Tso cai Hack Security Ua txhaum cai

Kev ruaj ntseg loj heev Entrust thaum kawg tau lees tias nws cov txheej txheem IT sab hauv tau ua txhaum cai rov qab rau lub Rau Hli.

Entrust yog lub tuam txhab kev ruaj ntseg tsom rau kev ntseeg hauv online thiab kev tswj tus kheej, muab ntau yam kev pabcuam, suav nrog kev sib txuas lus encrypted, ruaj ntseg kev them nyiaj digital, thiab ID kev daws teeb meem.

Hackers nyiag 'qee cov ntaub ntawv' tus neeg muag khoom ruaj ntseg Entrust lees paub: Cov ntaub ntawv ua txhaum cai lub hli tas los nrog kev tso cai sab hauv kev nkag mus tau lees paub.

Entrust tau tsis kam lees qhov databreach, ua rau tub sab nyiag ntawm cov ntaub ntawv tseem ceeb ntawm tuam txhab. Qhov kev ua txhaum cai cuam tshuam rau DOJ, lub DOE, thiab USDT, ntawm lwm lub koom haum loj.

Nws tsis yog txog rau thaum Lub Xya Hli 26th tias qhov ua txhaum cai tau lees paub rau pej xeem thaum tus kws tshawb fawb txog kev nyab xeeb Dominic Alvieri tweeted ib qho screenshot ntawm daim ntawv ceeb toom kev nyab xeeb xa mus rau Entrust cov neeg siv khoom.

Lub luag haujlwm pab pawg ua haujlwm tau tso siab rau kev ntseeg siab ntawm cov neeg siv khoom siv network kom tau txais kev nkag mus rau thawj zaug rau Entrust ib puag ncig uas coj mus rau tom ntej encryption thiab exfiltration raug los ntawm pab pawg paub ransomware..

Txawm hais tias tus nqe txhiv tau them los tsis tau tam sim no tsis paub.

Qhov kev ua txhaum cai tau pom nyob rau lub Rau Hli 18 thiab lub tuam txhab tau pib ceeb toom rau cov neeg siv khoom thaum Lub Xya Hli 6. Cov laj thawj rau qhov ncua sij hawm ceeb toom rau cov neeg siv khoom tsis tau muab. Qhov kev ncua no tuaj yeem ua rau cov neeg siv khoom muaj kev pheej hmoo thiab tuaj yeem suav tias yog tsis saib xyuas.

Kev ntseeg tau hais “Peb tau txiav txim siab tias qee cov ntaub ntawv raug coj los ntawm peb lub tshuab sab hauv. Raws li peb txuas ntxiv tshawb xyuas qhov teeb meem, peb yuav tiv tauj koj ncaj qha yog tias peb kawm cov ntaub ntawv uas peb ntseeg tias yuav cuam tshuam rau kev ruaj ntseg ntawm cov khoom thiab cov kev pabcuam uas peb muab rau koj lub koom haum.” – Tso siab rau.