16 Jul Kufotokozera kwa Maphukusi Oyipa: Kodi Zochitikazo Ndi Ziti?
Onani mndandanda wathu watsopano wa mabulogu olembedwa ndi CTO Luis Rodriguez pa ma phukusi oipa otseguka ndipo phunzirani kuteteza bungwe lanu ku ziwopsezo za unyolo wogulitsa. ...
Onani mndandanda wathu watsopano wa mabulogu olembedwa ndi CTO Luis Rodriguez pa ma phukusi oipa otseguka ndipo phunzirani kuteteza bungwe lanu ku ziwopsezo za unyolo wogulitsa. ...
Onani za ziwopsezo zodziwika bwino kwambiri za pulogalamu yaumbanda m'mbiri komanso momwe zimakhudzira chitetezo cha pa intaneti. Phunzirani momwe mungadzitetezere ku ziwopsezo izi ...
Dziwani nkhani yochititsa chidwi yokhudza kusefukira kwa madzi ku NPM yotchedwa "Down the Rabbit Hole looking for a Tiyi" yolembedwa ndi José Antonio Garcel Díaz, yomwe ikuvumbulutsa zolakwika zobisika komanso chidziwitso chachitetezo. Werengani nkhani yonse tsopano! ...
Dziwani momwe mungazindikire ndikuteteza ku mitundu yonse ya ziwopsezo zodalira mapulogalamu....
Mvetsetsani kusiyana pakati pa ma typosquatting ndi ma copycat package, njira zonse ziwiri zomwe zimagwiritsidwa ntchito kunyenga ogwiritsa ntchito kuti atsitse mapulogalamu oyipa....
Dziwani dziko lobisika la ma code oyipa: kuyambira kuseri kwa nyumba mpaka ku ransomware. Phunzirani momwe mungatetezere chuma chanu cha digito pogwiritsa ntchito njira zapamwamba zotetezera pa intaneti. Yafotokozedwa mu 'Software Supply Chain Security 'Dzimirani Mozama,' tikufotokozeranso chitetezo cha pa intaneti ndi njira zatsopano komanso chitetezo cha nthawi yeniyeni. ...
Fufuzani mu Ledger Attack, nkhani ya SSC yokhudza phishing yomwe idafufuzidwa ndi katswiri wa Xygeni Luis Manuel Rodriguez Berzosa, yomwe ikuwonetsa maphunziro okhudza chitetezo, kuwunika momwe zinthu zilili, komanso momwe zinthu zilili pa ngozi. ...
Pezani ma phukusi oipa a NPM ndikulimbitsa unyolo wanu wa mapulogalamu ndi Xygeni's Early Warning Service. Ma phukusi 10 oipa a NPM apezeka ndipo vector yatsopano yowopsa, djs13-fetcher, yadziwika. Phunzirani momwe mungatetezere bizinesi yanu ku ziwopsezo izi. ...
Dziwani zoopsa za kuukira kwa ma telecom, tetezani deta, ndikuvomereza Software Bill of Materials (SBOM) pa chitetezo cha unyolo wogulira zinthu....
Chiyambi Orca Security posachedwapa yapeza cholakwika cha kapangidwe ka ntchito ya Google Cloud Build, yotchedwa "Bad.Build." Vutoli limabweretsa chiopsezo chachikulu chachitetezo chifukwa limalola owukira kuchita Privilege Escalation, zomwe zimawapatsa mwayi wolowa mosaloledwa m'malo osungira ma code a Google's Artifact Registry. Zotsatira za kufooka kumeneku zimawonjezeka...
Kusanthula kwa Mapulogalamu Othandizira Kuukira kwa Mapulogalamu 3CX ndi kampani yodziwika bwino yomwe imapereka zinthu za VoIP ndi Unified Communications. Amati ali ndi makina opitilira 600,000 ndi ogwiritsa ntchito 12 miliyoni tsiku lililonse. Mosakayikira ndi chandamale chokopa kwa ochita zoyipa. Pofika kumapeto kwa Marichi, 3CX idakumana ndi 3CX Supply Chain Attack...
Kusokoneza ma code kumatanthauza kusintha kapena kusintha ma source code osaloledwa panthawi yopanga mapulogalamu, kuyesa, kapena kugwiritsa ntchito. Ntchito yoyipa iyi ikhoza kukhala ndi zotsatirapo zoyipa, kuyambira kuyambitsa zovuta zachitetezo mpaka kusintha momwe pulogalamuyo imagwirira ntchito, zomwe zimapangitsa kuti ilephereke mwanjira zosayembekezereka. Kusokoneza ma code...