Mhux kategorizzat

Afda Hack Ksur tas-Sigurtà

Il-ġgant tas-sigurtà Entrust fl-aħħar ikkonferma li s-sistemi interni tal-IT tagħha nkisru lura f'Ġunju.

Entrust hija ditta tas-sigurtà ffukata fuq il-fiduċja online u l-ġestjoni tal-identità, joffri firxa wiesgħa ta’ servizzi, inklużi komunikazzjonijiet encrypted, pagamenti diġitali siguri, u soluzzjonijiet ta' ħruġ ta' ID.

Il-hackers serqu ‘xi fajls’ jammetti l-bejjiegħ tas-sigurtà Entrust: Ksur tad-dejta x-xahar li għadda b'aċċess għal sistemi interni mhux awtorizzat ikkonfermat.

Entrust has reluctantly admitted the databreach, li jirriżulta fis-serq ta’ data korporattiva essenzjali. Il-ksur ikollu impatt fuq id-DOJ, id-DOE, u l-USDT, fost l-oħrajn organizzazzjonijiet ewlenin.

Kien biss fis-26 ta’ Lulju li l-ksur kien ikkonfermat pubblikament meta r-riċerkatur tas-sigurtà Dominic Alvieri għamel tweet ta’ screenshot ta’ avviż ta’ sigurtà mibgħut lill-klijenti ta’ Entrust..

L-operazzjoni tal-grupp responsabbli bbażat ruħha fuq in-netwerk fdat tal-bejjiegħa tal-aċċess għan-netwerk biex jikseb aċċess inizjali għall-ambjent Entrust li wassal għall-espożizzjoni sussegwenti tal-kriptaġġ u l-esfiltrazzjoni permezz ta’ grupp ta’ ransomware magħruf..

Bħalissa mhux magħruf jekk tħallasx fidwa jew le.

Il-ksur ġie skopert f'Ġunju 18 and the firm started notifying customers on July 6. The reasons for the delay on notifying customers was not given. Dan id-dewmien jista' b'mod ċar ipoġġi s-sistemi tal-klijenti f'riskju u jista' jitqies bħala negliġenti.

Entrust iddikjarat “Iddeterminajna li xi fajls ittieħdu mis-sistemi interni tagħna. Hekk kif inkomplu ninvestigaw il-kwistjoni, aħna se nikkuntattjawk direttament jekk nitgħallmu informazzjoni li nemmnu li taffettwa s-sigurtà tal-prodotti u s-servizzi li nipprovdu lill-organizzazzjoni tiegħek.” – Afda.

 

 

 

 

It-tagħmir tiegħek huwa nieqes żball importanti ta' sigurtà u kwalità

Hawn huma ftit metodi li jistgħu jkunu ta 'għajnuna u kwalunkwe wieħed minnhom jista' jkun is-soluzzjoni tiegħek.

1. Uża l-għodda għas-soluzzjoni tal-problemi tas-Settings tal-Windows

Iftaħ Settings tal-Windows u agħżel Aġġorna & Sigurtà. Issa mur fil-pannell tax-xellug u agħżel Issolvi l-problemi. Ladarba jinfetaħ il-Windows Update troubleshooter, ikklikkja "Run the troubleshooter" u stenna li l-proċess jitlesta. Wara li s-sistema terġa 'tibda, ipprova aġġorna l-kompjuter tiegħek mill-ġdid.

3. Tiswija fajls korrotta

L-ewwel, mexxi Kmand Prompt: Fil-kaxxa tat-tfittxija tal-Windows, tip cmd, ikklikkja bil-lemin fuq ir-riżultat mixtieq u agħżel "Mexxi bħala amministratur".

Li jmiss, fit-tieqa tal-Prompt tal-Kmand, daħħal DISM.exe / Online / Tindif-immaġni / Irrestawra s-saħħa, agħfas Enter u stenna ftit minuti biex il-proċess jitlesta. Issa ittajpja sfc / scannow u agħfas Enter. Wara li l-proċess ikun lest, agħlaq il-Prompt tal-Kmand u ċċekkja jekk Windows Update hux qed jaħdem.

5. Rollback OS updates

Open Computer Settings and open Update & Security and in the right section, click “View update history”. Li jmiss, select Uninstall Updates and in the list that appears, click the latest update for Microsoft Windows. Now uninstall it and go back to Windows Update to check for updates. Kemm aġġornamenti ġodda kif ukoll qodma għandhom jiġu installati kif maħsub. Tista' wkoll tmur fil-websajt uffiċjali tal-Katalgu ta' Microsoft Update u tfittex l-aġġornamenti li inti interessat fihom; niżżelhom u installahom manwalment.

OKTA Security Breach 2022

Many large corporate customers were horrified to learn of the recent Okta security breach.

Okta says 366 corporate customers, or about 2.5% of its customer base, were impacted by a security breach that allowed hackers to access the company’s internal network.

The authentication giant admitted the compromise after the Lapsus$ hacking and extortion group posted screenshots of Okta’s apps and systems on Monday, some two months after the hackers first gained access to its network.

The breach was initially blamed on an unnamed subprocessor that provides customer support services to Okta. In an updated statement on Wednesday, Okta’s chief security officer David Bradbury confirmed the subprocessor is a company called Sykes, which last year was acquired by Miami-based contact center giant Sitel.

Okta has admitted it “made a mistake” by not telling customers sooner about a security breach in January, in which hackers were able to access the laptop of a third-party customer support engineer.

The Lapsus$ hacking group published screenshots of Okta’s systems on March 22, taken from the laptop of a Sitel customer support engineer, which the hackers had remote access to on January 20.

“We want to acknowledge that we made a mistake. Sitel is our service provider for which we are ultimately responsible. In January, we did not know the extent of the Sitel issue – only that we detected and prevented an account takeover attempt and that Sitel had retained a third party forensic firm to investigate. At that time, we didn’t recognize that there was a risk to Okta and our customers

 

This is a sample intro paragraph and can be used to introduce readers to your article.

This is an example of a WordPress post, you could edit this to put information about yourself so readers know where you are coming from. You can create as many posts as you like in order to share with them what is on your mind.

Continue Reading