Osagawika

Mitundu Yapamwamba ya Malware Fayilo – HP Wolf Security tasanthula mitundu yapamwamba yamafayilo a pulogalamu yaumbanda ndipo masamba atuluka pamwamba.

Lipoti latsopano la kafukufuku likuwonetsa Spreadsheest ngati mtundu wapamwamba kwambiri wa fayilo yaumbanda 34% ndi 11% kuwonjezeka kwa ziwopsezo zomwe zimaperekedwa mu Archive.

Wolf Security imapereka chitetezo chokwanira komanso kulimba mtima komwe kumayambira pamlingo wa hardware ndikupitilira mapulogalamu ndi ntchito..

Lipotilo likuwunikiranso zowopsa, machitidwe a pulogalamu yaumbanda ndi njira zomwe zazindikirika ndi kasitomala wamakasitomala a HP Wolf Security mu kalendala Q2 2022. Zowunikira zikuphatikiza kuwunika kwa chiwopsezo cha CVE-2022-30190, Chiwopsezo cha tsiku la zero chomwe chikukhudza Microsoft Support Diagnostic Tool, kuphatikiza ma kampeni omwe akuwoneka m'malo owukira omwe akugwiritsa ntchito cholakwika ichi, ndi kuchuluka kwa njira yachidule (LNK) mafayilo ngati njira ina yopanda macro popanga pulogalamu yaumbanda.

 

Chochitika chachitetezo ku Cisco chikuwonetsa momwe ziwonetsero zamtsogolo zidzachitikira.

Umu ndi momwe zidatsikira:

1. Wobera adapeza mwayi wopeza akaunti ya Gmail ya wogwira ntchito ku Cisco. Akaunti ya Gmail imeneyo idasunga zidziwitso za Cisco VPN.

2. VPN imafunikira MFA kuti itsimikizidwe. Kulambalala izi, wowonongayo adagwiritsa ntchito kuphatikiza kwa MFA kukankha sipamu (kutumiza mauthenga angapo a MFA ku foni ya wosuta) ndikutengera chithandizo cha Cisco IT ndikuyimbira wosuta.

3. Pambuyo polumikizana ndi VPN, owononga adalembetsa zida zatsopano za MFA. Izi zidachotsa kufunikira kwa sipamu nthawi zonse ndikuwalola kuti alowe mu netiweki ndikuyamba kusuntha motsatana.

Palibe chipolopolo chasiliva pachitetezo cha cyber. Monga mabungwe amatulutsa chitetezo ngati MFA, owukira apeza njira yolambalala. Ngakhale izi zitha kukhala zokhumudwitsa kwa mabungwe, ndi zomwe akatswiri achitetezo amakhalamo.

Titha kukhumudwa ndi kusintha kosalekeza kapena kusankha kuzolowera ndikukhala tcheru. Zimathandizira kuzindikira kuti palibe mzere womaliza muchitetezo cha cyber – ndi masewera osatha a kupulumuka.

Mphamvu za WordPress 37% mwa mawebusayiti onse pa intaneti 2021. Ndiye 10% kuposa 2016 akamagwira okha 25% mawebusayiti. Mphamvu zonena za WordPress 13 Nthawi zowerengetsa masamba a CM atayerekeza ndi Joomla, Wotchuka wachiwiri wotchuka kwambiri.

Kukhazikitsa mayeso okhazikika a Webusayiti ya Webusayiti ya Webusayiti ndikofunikira kuti mutsimikizire chilichonse kapena umbanda uliwonse.

Chitsanzo cha izi ndi obisala adalemba mwachidule pafupifupi 1.6 Mawebusayiti On Wordpuss.

Mitengo Yachitetezo Kaswara Makono Wamakono Omanga Addoons ndi, Ngati mwalandidwa, Zimalola kuti zigawenga zigwetse mafayilo oyipa a Javascript ndipo ngakhale amatenga webusayiti ya bungwe.

Perekani kuthyolako Security Kuphwanya

Security Giant Entrust yatsimikizira kuti machitidwe ake amkati a IT adaphwanyidwa mu June.

Entrust ndi kampani yachitetezo yomwe imayang'ana kwambiri pakudalira pa intaneti komanso kasamalidwe ka zidziwitso, kupereka mautumiki osiyanasiyana, kuphatikizapo mauthenga obisika, malipiro a digito otetezedwa, ndi mayankho opereka ID.

Obera adaba 'mafayilo ena' ogulitsa chitetezo a Entrust amavomereza: Kuphwanya deta mwezi watha ndi mwayi wosaloleka wa machitidwe amkati otsimikiziridwa.

Entrust has reluctantly admitted the databreach, kuchititsa kubedwa kwa deta zofunika zamakampani. Kuphwanyaku kumakhudza DOJ, ndi DOE, ndi USDT, pakati pa mabungwe akuluakulu.

Sizinafike pa Julayi 26 pomwe kuphwanyaku kudatsimikiziridwa poyera pomwe wofufuza zachitetezo Dominic Alvieri adalemba chithunzi chachitetezo chotumizidwa kwa makasitomala a Entrust..

Gulu loyang'anira ntchito lidadalira maukonde odalirika a ogulitsa ma netiweki kuti apeze mwayi woyambira ku Entrust chilengedwe chomwe chidapangitsa kuti kubisala komanso kuwonekera kudzera pagulu lodziwika bwino la ransomware..

Sitikudziŵika ngati dipo lapelekedwa kapena ayi.

Zosokoneza zidadziwika pa June 18 and the firm started notifying customers on July 6. The reasons for the delay on notifying customers was not given. Kuchedwa kumeneku kukhoza kuika machitidwe a makasitomala pachiwopsezo ndipo akhoza kuonedwa kuti ndi osasamala.

Adanenedwa “Tazindikira kuti mafayilo ena adatengedwa kumakina athu amkati. Pamene tikupitiriza kufufuza nkhaniyi, tidzakulumikizani mwachindunji tikadziwa zambiri zomwe tikukhulupirira kuti zingakhudze chitetezo chazinthu ndi ntchito zomwe timapereka ku bungwe lanu.” – Khulupirirani.