Uncategorized

Ituaiga faila Malware pito i luga – HP Wolf Security ua su'esu'eina le pito i luga o ituaiga faila faila ma fa'asalalauga e sau i luga.

Ole lipoti ole su'esu'ega fou ua fa'aalia ai le Spreadsheest ole pito i luga ole faila faila ile 34% ma 11% fa'atuputeleina o fa'amata'u e tu'uina atu i le Archive.

Wolf Security e ofoina atu le puipuiga atoatoa ma le maufetuuna'i e amata i le tulaga o meafaigaluega ma fa'alautele atu i polokalame ma auaunaga.

O le lipoti o loʻo iloiloina ai faʻamataʻu mataʻutia, faiga leaga ma faiga ua faailoa mai e le telefoni a tagata faatau a le HP Wolf Security i le kalena Q2 2022. O mea taua e aofia ai se auʻiliʻiliga o le lamatiaga na mafua mai i le CVE-2022-30190, ole a'afiaga ole aso ole a'afia ole Microsoft Support Diagnostic Tool, e aofia ai faʻasalalauga o loʻo vaʻaia i le vao o tagata osofaʻi o loʻo faʻaogaina lenei faaletonu, ma le tula'i mai o le ala pupuu (LNK) faila e fai ma sui e leai se macro i le faʻaogaina o mea leaga.

 

A security incident at Cisco sheds light on how attacks of the future will unfold.

Here’s how it went down:

1. The hacker gained access to a Cisco employee’s personal Gmail account. That Gmail account had saved credentials for the Cisco VPN.

2. The VPN required MFA for authentication. To bypass this, the hacker used a combination of MFA push spamming (sending multiple MFA prompts to the user’s phone) and impersonating Cisco IT support and calling the user.

3. After connecting to the VPN, the hackers enrolled new devices for MFA. This removed the need to spam the user every time and allowed them to log into the network and begin moving laterally.

There isn’t a silver bullet in cyber security. As organizations roll out defenses like MFA, attackers will find a way to bypass. While this can be frustrating for organizations, it is the reality security professionals live in.

We can either get frustrated by the constant change or choose to adapt and stay alert. It helps to recognize that there is no finish line in cyber security – it is an endless game of survival.

WordPress powers 37% of all websites on the internet in 2021. That’s 10% more than in 2016 when they powered only 25% of websites. WordPress powers over 13 times the number of CMS websites compared to Joomla, the second most popular CMS host.

Undertaking a regular website security test of your WordPress website is critical to ensure any vulnerabilities or malware as fixed.

An example of this is hackers have reportedly scanned almost 1.6 million WordPressn websites in attempts to exploit an arbitrary file upload vulnerability in a previously disclosed buggy WordPress plugin.

The vulnerability targets Kaswara Modern WPBakery Page Builder Addons ma, if exploited, it would allow criminals to upload malicious JavaScript files and even completely take over an organization’s website.

Fa'atuatuaina Hack Puipuiga Puipuia

O le puipuiga tele o le Entrust ua iu ina faʻamaonia ana faiga IT i totonu na solia ia Iuni.

Entrust ose kamupani malupuipuia e taulaʻi ile faʻalagolago ile luga ole laiga ma pulega faʻamatalaga, ofoina atu le tele o auaunaga, e aofia ai fesoʻotaʻiga faʻailoga, fa'amautu tupe fa'akomepiuta, ma fofo o le tuuina atu o ID.

Na gaoia e tagata ta'avale 'nisi faila' le au fa'atau puipuiga a Entrust: Fa'amatalaga soli i le masina talu ai ma le fa'atagaina le fa'aogaina o faiga fa'alotoifale fa'amaonia.

Entrust has reluctantly admitted the databreach, e mafua ai le gaoi o fa'amaumauga taua a kamupani. O le soliga e a'afia ai le DOJ, le DOE, ma le USDT, faatasi ai ma isi faalapotopotoga tetele.

E leʻi oʻo ia Iulai 26th na faʻamaonia faalauaitele le soliga ina ua tweet e le tagata suʻesuʻe saogalemu Dominic Alvieri se faʻamalama o se faʻaaliga saogalemu na lafoina i tagata faʻatau a le Entrust..

O le fa'atinoga o vaega fa'atatau na fa'alagolago i luga o feso'ota'iga fa'atuatuaina a tagata fa'atau feso'ota'iga e maua ai le avanoa muamua i le siosiomaga o le Entrust lea na ta'ita'ia ai le fa'ailoga fa'ailoga ma le fa'aalia e ala i se ransomware lauiloa..

Pe ua uma ona totogi se togiola pe leai e le o iloa i le taimi nei.

Na maua le soliga ia Iuni 18 and the firm started notifying customers on July 6. The reasons for the delay on notifying customers was not given. O lenei fa'atuai e mafai ona tu'u manino ai faiga fa'atau i se tulaga lamatia ma e ono fa'apea o le fa'atamala.

Fai mai le faatuatuaina “Ua matou fa'amautu o nisi faila na aveese mai a matou faiga fa'alotoifale. A'o matou su'esu'eina pea le mataupu, matou te fa'afeso'ota'i sa'o atu ia te oe pe a matou a'oa'oina fa'amatalaga matou te talitonu o le a afaina ai le saogalemu o oloa ma auaunaga matou te tu'uina atu i lau fa'alapotopotoga.” – Fa'atonu.