Umhloli Wokuphepha wewebhusayithi

Izinhlobo Zefayela Ezingalungile Eziphezulu – I-HP Wolf Security zihlaziye izinhlobo eziphezulu zamafayela ohlelo olungayilungele ikhompuyutha futhi amaspredishithi aphuma phambili.

Umbiko omusha wenhlolovo wembula i-Spreadsheest njengohlobo lwefayela oluyi-malware ephezulu 34% futhi 11% ukwanda kwezinsongo ezilethwa kungobo yomlando.

I-Wolf Security inikezela ngokuvikeleka okuphelele kokuphela kanye nokuqina okuqala ezingeni lehadiwe futhi kunwetshwe kuyo yonke isoftware nezinsizakalo..

Umbiko ubuyekeza izinsongo eziphawulekayo, izitayela namasu ohlelo olungayilungele ikhompyutha ahlonzwe i-telemetry yekhasimende le-HP Wolf Security kukhalenda Q2 2022. Okugqamile kufaka phakathi ukuhlaziya ubungozi obulethwa yi-CVE-2022-30190, ubungozi bosuku oluyiziro obuthinta Ithuluzi Lokuxilonga I-Microsoft Support, okuhlanganisa nemikhankaso ebonakala endle yabahlaseli abaxhaphaza leli phutha, kanye nokukhuphuka kwesinqamuleli (I-LNK) amafayela njengenye indlela yamahhala yokusebenzisa uhlelo olungayilungele ikhompuyutha.

 

Isigameko sezokuphepha eCisco sicacisa ukuthi ukuhlasela kwekusasa kuzokwenzeka kanjani.

Nakhu ukuthi kwehle kanjani:

1. Isigebengu sithole ukufinyelela ku-akhawunti yomuntu siqu ye-Gmail yesisebenzi saseCisco. Leyo akhawunti ye-Gmail yayigcine izifakazelo ze-Cisco VPN.

2. I-VPN idinga i-MFA ukuze kuqinisekiswe. Ukudlula lokhu, isigebengu sisebenzise inhlanganisela ye-MFA push spamming (ukuthumela imiyalo eminingi ye-MFA kufoni yomsebenzisi) nokuzenza usekelo lwe-Cisco IT nokubiza umsebenzisi.

3. Ngemva kokuxhuma ku-VPN, izigebengu zibhalisele amadivaysi amasha e-MFA. Lokhu kususe isidingo sokufaka ugaxekile kumsebenzisi ngaso sonke isikhathi futhi kwabavumela ukuthi bangene kunethiwekhi futhi baqale ukuhamba eceleni.

Ayikho inhlamvu yesiliva ekuvikelekeni kwe-cyber. Njengoba izinhlangano zikhipha izivikelo njenge-MFA, abahlaseli bazothola indlela yokudlula. Nakuba lokhu kungase kukhungathekise izinhlangano, iyiqiniso ochwepheshe bezokuphepha abahlala kulo.

Singase sikhungatheke ngenxa yoshintsho oluqhubekayo noma sikhethe ukuzivumelanisa nezimo futhi sihlale siphapheme. Kuyasiza ukubona ukuthi awukho umugqa wokugcina ekuvikelekeni kwe-cyber – kuwumdlalo ongapheli wokusinda.

Amandla e-WordPress 37% kuwo wonke amawebhusayithi aku-inthanethi 2021. Yilokho 10% ngaphezu kokuphakathi 2016 ngenkathi besebenzisa amandla kuphela 25% yamawebhusayithi. I-WordPress inamandla phezu 13 izikhathi inani lamawebhusayithi e-CMS uma kuqhathaniswa ne-Joomla, umsingathi wesibili odume kakhulu we-CMS.

Ukwenza ukuhlolwa okujwayelekile kokuphepha kwewebhusayithi yewebhusayithi yakho ye-WordPress kubalulekile ukuze uqinisekise noma yikuphi ubungozi noma uhlelo olungayilungele ikhompuyutha njengoba lulungisiwe..

Isibonelo salokhu abaduni kubikwa ukuthi baskena cishe 1.6 izigidi zamawebhusayithi e-WordPresn emizamweni yokusebenzisa ubungozi bokulayishwa kwefayela ngokunganaki ku-plugin ye-WordPress edalulwe ngaphambilini..

Ubungozi buqondiswe I-Kaswara Modern WPBakery Page Builder Addons futhi, uma exhashazwa, kungavumela izigebengu ukuthi zilayishe amafayela e-JavaScript anonya futhi zithathe ngokuphelele iwebhusayithi yenhlangano.

Nikeza Hack Security Breach

Isikhondlakhondla sezokuphepha i-Entrust sesiqinisekise ukuthi izinhlelo zayo zangaphakathi ze-IT zaphulwa emuva ngoJuni.

I-Entrust yinkampani yezokuphepha egxile ekuthembekeni ku-inthanethi nokuphathwa kobunikazi, enikeza inhlobonhlobo yezinsizakalo, okuhlanganisa ukuxhumana okubethelwe, izinkokhelo zedijithali ezivikelekile, kanye nezixazululo zokukhishwa kwe-ID.

Abaduni bantshontshe 'amanye amafayela' umthengisi wezokuphepha u-Entrust uyavuma: Ukuphulwa kwedatha ngenyanga edlule nokufinyelela kwamasistimu angagunyaziwe okungagunyaziwe kuqinisekisiwe.

I-Etrust ivume ngokunqikaza ukwephulwa kwedatha, okuholela ekwebiweni kwedatha ebalulekile yebhizinisi. Ukwephulwa komthetho kunomthelela ku-DOJ, i-DOE, kanye ne-USDT, phakathi kwezinye izinhlangano ezinkulu.

Kwaze kwaba umhla zingama-26 kuJulayi lapho ukwephulwa komthetho kwaqinisekiswa esidlangalaleni lapho umcwaningi wezokuphepha u-Dominic Alvieri ebhala ku-Twitter isithombe-skrini sesaziso sokuphepha esithunyelwe kumakhasimende akwa-Entrust..

Ukusebenza kweqembu elinomthwalo wemfanelo kuncike kunethiwekhi ethembekile yabathengisi bokufinyelela kwenethiwekhi ukuze bathole ukufinyelela kokuqala endaweni ye-Entrust okuholele ekubhalweni kwemfihlo nokuchayeka kokuhlunga ngeqembu elaziwayo le-ransomware..

Ukuthi isihlengo sesikhokhiwe noma cha akwaziwa okwamanje.

Ukwephulwa kwemithetho kutholwe ngoJuni 18 futhi inkampani iqale ukwazisa amakhasimende ngoJulayi 6. Izizathu zokubambezeleka kokwazisa amakhasimende azizange zinikezwe. Lokhu kubambezeleka kungabeka ngokucacile izinhlelo zamakhasimende engozini futhi kungase kubhekwe njengokunganaki.

I-trust ithe “Sithole ukuthi amanye amafayela athathwe kumasistimu ethu angaphakathi. Njengoba sisaqhubeka nokuphenya udaba, sizokuthinta ngokuqondile uma sifunda ulwazi esikholelwa ukuthi lungathinta ukuphepha kwemikhiqizo namasevisi esiwanikeza inhlangano yakho.” – Thembisa.