Uncategorized

Sab saum toj Malware Cov Ntaub Ntawv – HP Wolf Security tau txheeb xyuas cov ntaub ntawv malware saum toj kawg nkaus thiab cov ntawv nthuav tawm tuaj rau saum.

Daim ntawv ntsuam xyuas tshiab nthuav tawm Spreadsheest raws li cov ntaub ntawv malware sab saum toj ntawm 34% thiab 11% nce hauv kev hem thawj xa hauv Archive.

Wolf Security muaj kev tiv thaiv qhov kawg thiab kev ua haujlwm zoo uas pib ntawm qib kho vajtse thiab txuas mus thoob plaws software thiab cov kev pabcuam.

Daim ntawv tshaj tawm tshuaj xyuas cov kev hem thawj tseem ceeb, malware tiam sis thiab cov txheej txheem txheeb xyuas los ntawm HP Wolf Security cov neeg siv khoom telemetry hauv daim ntawv qhia hnub Q2 2022. Cov ntsiab lus tseem ceeb suav nrog kev txheeb xyuas qhov pheej hmoo tshwm sim los ntawm CVE-2022-30190, xoom-hnub vulnerability cuam tshuam rau Microsoft Support Diagnostic Tool, suav nrog cov phiaj xwm pom hauv cov tsiaj qus ntawm cov neeg tawm tsam siv qhov tsis zoo no, thiab sawv ntawm shortcut (LNK) cov ntaub ntawv raws li ib tug macro-dawb lwm txoj rau executing malware.

 

Qhov xwm txheej kev nyab xeeb ntawm Cisco ua rau pom qhov kev tawm tsam ntawm yav tom ntej yuav nthuav tawm li cas.

Nov yog li cas nws tau poob:

1. Lub hacker tau nkag mus rau Cisco tus neeg ua haujlwm tus kheej Gmail account. Tus account Gmail ntawd tau khaws cov ntawv pov thawj rau Cisco VPN.

2. VPN xav tau MFA rau kev lees paub. Txhawm rau hla qhov no, lub hacker siv ib tug ua ke ntawm MFA thawb spamming (xa ntau MFA cov lus qhia rau tus neeg siv lub xov tooj) thiab impersonating Cisco IT kev txhawb nqa thiab hu rau tus neeg siv.

3. Tom qab txuas rau VPN, cov hackers tau tso npe rau cov cuab yeej tshiab rau MFA. Qhov no tshem tawm qhov xav tau spam tus neeg siv txhua lub sijhawm thiab tso cai rau lawv nkag mus rau hauv lub network thiab pib txav mus tom qab.

Tsis muaj cov mos txwv nyiaj hauv cyber security. Raws li cov koom haum nthuav tawm kev tiv thaiv zoo li MFA, attackers yuav nrhiav tau ib txoj kev bypass. Thaum qhov no tuaj yeem ntxhov siab rau cov koom haum, nws yog cov kws tshaj lij kev ruaj ntseg tiag tiag nyob hauv.

Peb tuaj yeem ntxhov siab los ntawm qhov hloov tsis tu ncua lossis xaiv hloov kho thiab ceev faj. Nws pab kom paub tseeb tias tsis muaj kab tiav hauv kev ruaj ntseg cyber – nws yog ib qho kev ua si tsis muaj sia nyob.

WordPress powers 37% of all websites on the internet in 2021. That’s 10% more than in 2016 when they powered only 25% of websites. WordPress powers over 13 times the number of CMS websites compared to Joomla, the second most popular CMS host.

Undertaking a regular website security test of your WordPress website is critical to ensure any vulnerabilities or malware as fixed.

An example of this is hackers have reportedly scanned almost 1.6 million WordPressn websites in attempts to exploit an arbitrary file upload vulnerability in a previously disclosed buggy WordPress plugin.

The vulnerability targets Kaswara Modern WPBakery Page Builder Addons thiab, if exploited, it would allow criminals to upload malicious JavaScript files and even completely take over an organization’s website.