Uncategorized

Ụdị faịlụ malware kachasị elu – HP Wolf Nche enyochala ụdị faịlụ malware kachasị elu na mpempe akwụkwọ na-apụta n'elu.

Akụkọ nyocha ọhụrụ na-ekpughe Spreadsheest dị ka ụdị faịlụ malware kachasị na 34% na 11% na-abawanye na iyi egwu ewepụtara na Archive.

Wolf Security na-enye nchebe njedebe na nkwụghachi zuru oke nke na-amalite na ọkwa ngwaike wee gbasaa n'ofe ngwanrọ na ọrụ..

Akụkọ ahụ na-enyocha ihe egwu ndị ama ama, usoro na usoro malware nke telemetry ndị ahịa HP Wolf Security chọpụtara na kalenda Q2 2022. Isi ihe gụnyere nyocha nke ihe egwu dị na CVE-2022-30190, adịghị ike nke ụbọchị efu na-emetụta Ngwá Ọrụ Nkwado Microsoft, gụnyere mkpọsa a na-ahụ n'ọhịa nke ndị na-awakpo na-erigbu ntụpọ a, na ịrị elu nke ụzọ mkpirisi (LNK) faịlụ dị ka ihe ọzọ na-enweghị nnukwu maka igbu malware.

 

A security incident at Cisco sheds light on how attacks of the future will unfold.

Here’s how it went down:

1. The hacker gained access to a Cisco employee’s personal Gmail account. That Gmail account had saved credentials for the Cisco VPN.

2. The VPN required MFA for authentication. To bypass this, the hacker used a combination of MFA push spamming (sending multiple MFA prompts to the user’s phone) and impersonating Cisco IT support and calling the user.

3. After connecting to the VPN, the hackers enrolled new devices for MFA. This removed the need to spam the user every time and allowed them to log into the network and begin moving laterally.

There isn’t a silver bullet in cyber security. As organizations roll out defenses like MFA, attackers will find a way to bypass. While this can be frustrating for organizations, it is the reality security professionals live in.

We can either get frustrated by the constant change or choose to adapt and stay alert. It helps to recognize that there is no finish line in cyber security – it is an endless game of survival.

Ike WordPress 37% nke weebụsaịtị niile dị na ịntanetị 2021. Nke ahụ bụ 10% karịa n'ime 2016 mgbe ha na-akwado naanị 25% nke weebụsaịtị. WordPress na-agwụ ike 13 ugboro ọnụọgụ weebụsaịtị CMS tụnyere Joomla, onye ọbịa CMS kacha ewu ewu nke abụọ.

Ime ule nchekwa webụsaịtị mgbe niile nke weebụsaịtị WordPress gị dị oke mkpa iji hụ na adịghị ike ma ọ bụ malware ọ bụla edoziri.

Otu ihe atụ nke a bụ na hackers kọrọ scanned fọrọ nke nta 1.6 nde webụsaịtị WordPressn n'ịgbalị irigbu faịlụ aka ike na-ebulite adịghị ike na ngwa mgbakwunye buggy WordPress ekpughere na mbụ..

Ebumnuche adịghị ike Kaswara Modern WPBakery Page Builder Addons na, ọ bụrụ na-erigbu, ọ ga-ekwe ka ndị omempụ bulite faịlụ Javascript ọjọọ na ọbụna weghara webụsaịtị ụlọ ọrụ kpamkpam.