Kwakuyini Ukuhlasela KweBarracuda?
Ngo-2023, i-Barracuda Attack yadalula ubuthakathaka obukhulu obungenaso usuku ku-Barracuda Email Security Gateway (ESG). Lokhu buthakathaka obukhulu kwadlula kakhulu izinsongo ezivamile ze-imeyili; kwakuyi-RCE exploit egcwele (ukwenziwa komyalo okude) okwavumela abahlaseli ukuthi bantshontshe lezi zinsimbi zokuphepha. I-Barracuda Attack yaba yinkinga enkulu ngokushesha kochwepheshe bezokuphepha emhlabeni wonke. Ngenkathi lokhu kwephulwa kwemithetho kuhlose ingqalasizinda ye-imeyili, iphethini yokusetshenziswa kabi kokwethenjwa isebenza ngqo ezinkethweni zokuhlinzekwa kwesofthiwe ku CI/CD.
Ukugeleza Kokuhlasela:
- Ama-imeyili obugebengu bokweba imininingwane ebucayi asetshenziswa njengendawo yokuqala yokungena, eletha izinamathiselo ezinonya eziqondiswe ku-Barracuda Email Security Gateway
- Abahlaseli basebenzise i-RCE exploit ukufaka nokusebenzisa imiyalo ekude ngaphakathi kwamadivayisi e-Barracuda Email Security Gateway asengozini
- Ngemva kokuxhashazwa kokuqala, abahlaseli basebenzise imithwalo ye-malware ukuze baqinisekise ukuqhubeka kwezinhlelo ezithintekile.
- I-malware ivumele ukufinyelela okuqhubekayo izinyanga eziningana, idatha eyebiwe ikhishwa njalo ezinhlelweni eziphuliwe
- Ukuhlaziywa kwezokuphepha kuhlobanise ukuhlaselwa kweBarracuda nabadlali abangochwepheshe abathuthuke kakhulu (i-APT), okubonisa ubuchwepheshe ezingeni lesizwe.
Uhlu lwezikhathi olubonakalayo lwezigaba zokuhlasela lungasiza ekuqondeni ukuthi isinyathelo ngasinye, kusukela ekugebeni ulwazi oluyimfihlo kuya ekwebiweni kwedatha, siqhubeka kanjani ngokuhamba kwesikhathi. Kodwa okubaluleke kakhulu, iphethini efanayo yokuhlasela ingavela kuwe. CI/CD imisebenzi. Chofoza esithombeni esingezansi ukuze ubone kangcono ⬇️!
Izifundo Eziyinhloko ze CI/CD Security
Ukuvezwa Kwe-Supply Chain Ngamathuluzi Athembekile
Ukuhlasela kweBarracuda kufundisa isifundo esinzima: ngisho nemishini yokuphepha ethembekile ingaba yizikhombisi zokuhlasela. Njengoba nje abathuthukisi bethemba CI/CD Amathuluzi kanye nokuncika, amaklayenti eBarracuda ayethembe i-Barracuda Email Security Gateway yawo. Lokho kuthembana kwasetshenziswa kabi.
Ezindaweni zokuthuthukiswa, izendlalelo zokuphepha ezisengozini zingavumela ukuthi i-malware ifakwe ngqo kuyo pipelines. Nansi indlela:
- Izinhlelo zokungenisa ama-imeyili ezizenzakalelayo ezixhuma kuma-trigger okwakha noma okusebenzisa.
- Pipelines kungenisa ngokuzenzakalelayo izikripthi noma izimpahla ezingahlanzekile.
- Iziqalisi ze-Webhook kuxhunywe kumasango e-imeyili angase acubungule amafayela anegciwane.
Isibonelo: Cabanga ngokwakhiwa kwakho pipeline Icubungula iskripthi esivela ku-imeyili yokusekela. Uma leyo Barracuda Email Security Gateway isengozini, iskripthi singase sibuyiselwe emuva. Uma sisengozini, ifayela elibuyiselwe emuva lingafaka ubuthi enqubweni yakho yokwakha futhi leak secretbuthule. Kusukela lapho, kuyisinyathelo esisodwa nje ukuthi izakhiwo zakho zibe nobuthi.
Ukufinyelela Okungatholakali Isikhathi Eside
Ku-Barracuda Attack, ama-APT agcina ukufinyelela izinyanga ngaphambi kokutholwa. Le ngozi yokuphikelela ibonakala ku- CI/CD izindawo:
- Abahlaseli bayashelela ukuncika okunonya esakhiweni sakho.
- Ama-plugin asengozini ku- CI/CD amanxusa asebenza njengeminyango ethule.
- Uma sebengaphakathi, bangakwazi leak secrets, ukufaka ikhodi enonya, noma ukushintsha ukwakheka ngaphandle kokutholwa.
Kwabathuthukisi, lokhu akuyona into engaqondakali: ukufakwa kwakho okulandelayo kokukhiqiza kungathumela buthule ikhodi elawulwa uhlaseli uma uchungechunge lwakho lokuhlinzeka lungaqiniswanga.
Real CI/CD Izibonelo Zezinsongo
- Ukudideka kokuthembela ukuhlaselwa kufaka amaphakheji aqinile anamagama afana namalayibrari angaphakathi.
- Izindawo zokugcina izinto zobuciko ezisengozini ubuthi obubangela ukwakheka komfula.
- Ama-plugin noma ama-ejenti okwakha anonya kutshalwe e pipeline imisebenzi yokusebenza, okuvumela ukufinyelela okuqhubekayo ngemuva.
Uma i-Barracuda Email Security Gateway ingase ibekwe engcupheni ngokusebenzisa i-RCE exploit elula, CI/CD pipeline isengozini ngokulinganayo ngaphandle kokulawulwa okuqinile.
Izincomo Zokuphepha Ezisebenzayo Ezifundwe Ku-Barracuda Attack
Ukuhlasela kweBarracuda akuyona nje indaba yokuxwayisa; kuyisimemo sokwenza okuthile kumaqembu e-DevSecOps. Nansi indlela yokuvikela i-akhawunti yakho. pipelines:
- Yamukela izimiso ze-Zero Trust ngaphakathi kwakho CI/CDAke sithi noma iyiphi ingxenye noma inqubo ingase ibe sengozini.
- Qinisekisa ukuhlolwa okuqinile kobuqotho bezinto zokwenziwa:
- Qinisekisa yonke into yobuciko usebenzisa ama-checksum kanye nama-signature edijithali.
- Qinisekisa ukuthi imitapo yolwazi yangaphandle kanye nempahla zihambisana neminwe elindelekile ngaphambi kokungenisa.
- Sebenzisa SBOMs (Umthethosivivinywa Wezinto Zesofthiwe):
- Gcina futhi uhlole uhlu oluningiliziwe lwazo zonke izingxenye ezakhiweni zakho.
- Sebenzisa SBOMs ukulandelela nokuhlukanisa amamojula angase abe nesifo ngokushesha.
- Gwema izisusa ezisekelwe ku-imeyili ngqo:
- Ungalokothi uthembele CI/CD iziqalisi ezivela ezinhlelweni ze-imeyili ngaphandle kwemithetho eqinile ukuhlanzeka.
- Qalisa i-sandboxing ukucubungula noma iyiphi idatha engenayo noma okunamathiselwe.
- Ukuqapha okuqhubekayo:
- Gada pipelines yeziphambeko, ukuziphatha okungajwayelekile kokwakha, izingcingo zenethiwekhi ezingalindelekile, noma izinguquko zekhodi.
- Zungezisa iziqinisekiso futhi uhlole ukuhlanganiswa kwezinkampani zangaphandle njalo.
- Cabanga ngokuphikelela:
- Uma sekwephulwe umthetho, umhlaseli cishe uzoqhubeka nokubamba indawo. Qinisekisa kabusha isinyathelo ngasinye ngemva kokuvumelana.
Kungani Ukuhlasela kweBarracuda Kuyisixwayiso Kwabaningi Pipeline Security
Ukuhlasela kweBarracuda kwafakazela ukuthi imingcele yezokuphepha kumele ichazwe kabusha nokuthi kwakungeyona nje isigameko esidlule; kuyisibonakaliso sokuthi imingcele yokwethembana ibuthakathaka kangakanani kwesimanje. pipelines. Ukuthembela kunoma yiluphi uhlelo lwangaphandle, ngisho nolubizwa ngokuthi “ingqalasizinda yezokuphepha,” kungaba yingozi. Isango lakho le-Barracuda Email Security Gateway lingaba yisixhumanisi sakho esibuthakathaka kakhulu uma lingahlukaniswa futhi liqashwe kahle.
Kwabathuthukisi namaqembu e-DevSecOps:
- Hlola kabusha pipeline imingcele yokwethembana.
- Phatha yonke ingxenye yangaphandle noma ukuhlanganiswa njengengozi engaba khona.
- Yakha CI/CD imisebenzi ethatha ukuyekethisa, iqapha ngokungaphezi, futhi iqinisekise konke okufakwayo.
Ukungazinaki lezi zinyathelo kungashintsha ukuthunyelwa kwakho okulandelayo kube umcimbi wokusabalalisa i-malware.
Indlela i-Xygeni Evikela Ngayo I-Yakho CI/CD Pipeline Ngokumelene Nokuxhashazwa kwe-RCE
I-Xygeni Inikeza amaqembu e-DevSecOps amathuluzi okuthola nokuvimba izinsongo ngaphambi kokuba zifinyelele ekukhiqizweni, njengoba nje i-RCE isebenzise i-Barracuda Email Security Gateway. Esikhundleni sokuthemba ukuthi pipeline kuphephile, i-Xygeni iyakusiza qinisekisa konke.
Nansi indlela i-Xygeni eqinisa ngayo i-akhawunti yakho CI/CD ukuma kokuphepha:
- Ukubonakala Okujulile Engozini Yochungechunge Lokunikezela
Landelela konke ukuncika, umtapo wolwazi, i-plugin, kanye nokuhlanganiswa komuntu wesithathu ngaphakathi kwakho pipelines. Yazi kahle ukuthi yini esetshenziswayo, ukuthi ivelaphi, nokuthi ingabe ingasetshenziswa yini. - Ukutholwa Okudidayo Kwesikhathi Sangempela
Thola izinguquko ezingagunyaziwe, umsebenzi wokwakha ongajwayelekile, noma ukuphazamiseka kwemisebenzi ngaphambi kokuba noma yini isetshenziswe. Uma iskripthi esinobugovu singena, uzokwazi. - Ukuqiniswa Kobuqotho Okuqhubekayo
I-Xygeni isebenzisa ubufakazi obungaphakathi kwento, ukulandelela imvelaphi, kanye nokuhlolwa kwenqubomgomo okuzenzakalelayo ukuqinisekisa yonke into yobuciko kanye nokumisa ukwakhiwa okungaqinisekisiwe. - CI/CD-Ukutholwa Kwengozi Yendabuko
Kusukela emisebenzini engalungile kuya ku-malware ezitsheni zakho, isivikelo se-Xygeni esinezingqimba eziningi sihlanganisa ikhodi, izilungiselelo, izimfihlo, kanye nengqalasizinda.
Izenzo ze-RCE ezifana nalezo ezisemshinini we-Barracuda ESG zibonakalise ukuthi ngisho namathuluzi okuphepha angaba yizigebengu zokuhlasela. pipeline akuyona into ehlukile. I-Xygeni ikusiza ukuthi uphathe konke okufakwayo njengokungathenjiwe, uqaphe yonke into, futhi uvimbele izinsongo ngaphambi kokuba ukukhishwa kwakho okulandelayo kube yi-vector yokuhlasela.
Funda kuhlelo. Qinisa izakhiwo zakho. Thumela ngokuphephile.
