Uncategorized

Ụdị faịlụ malware kachasị elu – HP Wolf Nche enyochala ụdị faịlụ malware kachasị elu na mpempe akwụkwọ na-apụta n'elu.

Akụkọ nyocha ọhụrụ na-ekpughe Spreadsheest dị ka ụdị faịlụ malware kachasị na 34% na 11% na-abawanye na iyi egwu ewepụtara na Archive.

Wolf Security na-enye nchebe njedebe na nkwụghachi zuru oke nke na-amalite na ọkwa ngwaike wee gbasaa n'ofe ngwanrọ na ọrụ..

Akụkọ ahụ na-enyocha ihe egwu ndị ama ama, usoro na usoro malware nke telemetry ndị ahịa HP Wolf Security chọpụtara na kalenda Q2 2022. Isi ihe gụnyere nyocha nke ihe egwu dị na CVE-2022-30190, adịghị ike nke ụbọchị efu na-emetụta Ngwá Ọrụ Nkwado Microsoft, gụnyere mkpọsa a na-ahụ n'ọhịa nke ndị na-awakpo na-erigbu ntụpọ a, na ịrị elu nke ụzọ mkpirisi (LNK) faịlụ dị ka ihe ọzọ na-enweghị nnukwu maka igbu malware.

 

A security incident at Cisco sheds light on how attacks of the future will unfold.

Here’s how it went down:

1. The hacker gained access to a Cisco employee’s personal Gmail account. That Gmail account had saved credentials for the Cisco VPN.

2. The VPN required MFA for authentication. To bypass this, the hacker used a combination of MFA push spamming (sending multiple MFA prompts to the user’s phone) and impersonating Cisco IT support and calling the user.

3. After connecting to the VPN, the hackers enrolled new devices for MFA. This removed the need to spam the user every time and allowed them to log into the network and begin moving laterally.

There isn’t a silver bullet in cyber security. As organizations roll out defenses like MFA, attackers will find a way to bypass. While this can be frustrating for organizations, it is the reality security professionals live in.

We can either get frustrated by the constant change or choose to adapt and stay alert. It helps to recognize that there is no finish line in cyber security – it is an endless game of survival.

Ike WordPress 37% nke weebụsaịtị niile dị na ịntanetị 2021. Nke ahụ bụ 10% karịa n'ime 2016 mgbe ha na-akwado naanị 25% nke weebụsaịtị. WordPress na-agwụ ike 13 ugboro ọnụọgụ weebụsaịtị CMS tụnyere Joomla, onye ọbịa CMS kacha ewu ewu nke abụọ.

Ime ule nchekwa webụsaịtị mgbe niile nke weebụsaịtị WordPress gị dị oke mkpa iji hụ na adịghị ike ma ọ bụ malware ọ bụla edoziri.

Otu ihe atụ nke a bụ na hackers kọrọ scanned fọrọ nke nta 1.6 nde webụsaịtị WordPressn n'ịgbalị irigbu faịlụ aka ike na-ebulite adịghị ike na ngwa mgbakwunye buggy WordPress ekpughere na mbụ..

Ebumnuche adịghị ike Kaswara Modern WPBakery Page Builder Addons na, ọ bụrụ na-erigbu, ọ ga-ekwe ka ndị omempụ bulite faịlụ Javascript ọjọọ na ọbụna weghara webụsaịtị ụlọ ọrụ kpamkpam.

Nyefee mbanye anataghị ikike nbibi nchekwa

Nnukwu nchekwa Entrust emechaala kwenye na sistemụ IT nke ime ya mebiri na June.

Nkwenye bụ ụlọ ọrụ nchekwa lekwasịrị anya na ntụkwasị obi n'ịntanetị na njikwa njirimara, na-enye ọtụtụ ọrụ dị iche iche, gụnyere ozi ezoro ezo, nkwụnye ego dijitalụ echekwara, na ngwọta nnyefe nke ID.

Ndị hackers zuru 'ụfọdụ faịlụ' onye na-ere nchekwa Entrust kwetara: Mmebi data n'ọnwa gara aga nwere ikike ịnweta sistemu ime ụlọ na-akwadoghị.

Ntụnye aka anabatala mmebi data ahụ n'egbughị oge, na-akpata izu ohi nke data ụlọ ọrụ dị mkpa. Mmebi ahụ na-emetụta DOJ, nke DOE, na USDT, n'etiti ndị ọzọ isi òtù.

Ọ bụ na July 26th ka akwadoro mmebi ahụ n'ihu ọha mgbe onye nyocha nchekwa Dominic Alvieri tweeted nseta ihuenyo nke ozi nchekwa ezigara ndị ahịa Entrust..

Ọrụ otu ahụ nwere ọrụ dabere na netwọk ntụkwasị obi nke ndị na-ere ohere netwọkụ iji nweta ohere izizi na gburugburu Entrust nke butere ikpughe nzuzo na mkpughe na-esote site na otu ransomware ama ama..

Amabeghị ma a kwụọla ihe mgbapụta ma ọ bụ na a kwụghị ya ugbu a.

Achọpụtara mmebi ahụ na June 18 na ụlọ ọrụ malitere ịkọrọ ndị ahịa na July 6. E nyeghị ihe kpatara igbu oge na ịgwa ndị ahịa. Oge igbu oge a nwere ike itinye usoro ndị ahịa n'ụzọ doro anya n'ihe egwu yana enwere ike iwere ya dị ka eleghara anya.

Ekwuru na ntinye aka “Anyị ekpebiela na ewepụtara ụfọdụ faịlụ na sistemu ime anyị. Ka anyị na-aga n'ihu na-enyocha okwu ahụ, anyị ga-akpọtụrụ gị ozugbo ma ọ bụrụ na anyị amụta ozi anyị kwenyere na ọ ga-emetụta nchekwa nke ngwaahịa na ọrụ anyị na-enye nzukọ gị.” – Nyefee.