Isimo Esiqhubekayo Sezimo Eziphuthumayo: Lapho "Sibucayi" Siba Umsindo Omhlophe
Uma inhlangano yakho isasebenzisa ama-Citrix NetScaler ADC noma ama-Gateways ekwindla edlule, ubungazifaki engozini nje; ubuzimema ngenkuthalo inhlekelele. Isexwayiso esiphuthumayo se-CISA sosuku olubucayi oluyiziro, i-CVE-2023-4966, eyaziwa kabanzi ngokuthi "i-Citrix Bleed," kwakungesona isifundo sethiyori ekulawuleni ubungozi [1, 2]. Bekuyisixwayiso esiqinile, isiqinisekiso esiqondile sokuthi abahlaseli babesengaphakathi kumanethiwekhi alabo ababambezele ukuchibiyela. Umnqamulajuqu wangomhla zingama-27 kuMfumfu wezi-2023, wokuthi izinhlangano zikahulumeni zichibiyele, ogunyazwe yi-CISA Emergency Directive 23-02, usufikile wadlula [3]. Uma izinhlangano zikahulumeni, nezinsiza zazo ezinkulu kanye namaqembu okuvikela azinikele, zibhekane nezinselele ezihlangabezana nalezi zinhloso, kugqamisa ingcindezi enkulu kuwo wonke umuntu.
Lokhu akusona nje isiphazamisi esisodwa, esibi. Lokhu kumayelana nokwehluleka kwesistimu ukubamba amandla adonsela phansi "ingqalasizinda ebalulekile" enkathini yedijithali. Imishini ye-NetScaler ilingana nedijithali yentuba yokungena ebhilidini lakho, indawo yokuhlola ezokuvikela, kanye nesistimu ye-HVAC konke kuhlanganiswe kwaba koyedwa. Bahlala ku-perimeter, baphathe ukufakazela ubuqiniso, ukulinganisa ukulayisha, nokuphathwa kwethrafikhi. I-RCE (Ukwenziwa Kwekhodi Ekude) kudivayisi enjalo akukhona nje ukwephula; kuwukuthatha isistimu egcwele, ukhiye oyinhloko onikezwa isitha ngokuqondile. Sikhuluma ngohlobo lokufinyelela oluvumela abahlaseli ukuthi bangene kalula kumanethiwekhi angaphakathi, bakhiphe idatha ebucayi, noma bakhiphe i-ransomware ngokunemba kokuhlinzwa. Iqiniso lokuthi i-CVE-2023-4966 yaxhashazwa, manje efakwe kukhathalogi ye-CISA's KEV, kusho iwindi lokuzivikela okusebenzayo livalwe ngokushesha [1]. Izinhlangano zazingasakuvimbi ukuhlasela; bebenciphisa isigameko esiqhubekayo.
Isiphequluli Njengomjikelezo Omusha: Umjikelezo Wokungcupheni Okungapheli we-Chrome
Futhi ngenkathi ucabanga ukuthi i-perimeter yenethiwekhi yakho ukuphela kwento evinjezelwe, i-Google ivame ukumemezela enye ibhomu: ixhashazwe ngezinsuku eziyiziro ku-Chrome. Isibonelo, i-CVE-2024-4947, iphutha elibucayi lokudideka lohlobo lwe-V8, bekungenye yezingozi ezimbalwa ezixhashazwe ngenkuthalo kulo nyaka [4]. Lokhu akukona ukuphapha; kuyiphethini engaguquki. Isiqephu esisha ngasinye, esivame ukuhambisana nesicelo esiphuthumayo sokuthi "ubuyekeze ngokushesha," sigqamisa i-vector ehlukile, kodwa ecashile ngokulinganayo, yokuyekethisa. Ngenkathi i-NetScaler igada amasango, i-Chrome iyindawo yokungena etholakala yonke indawo ephaketheni ngalinye labasebenzi, kuzo zonke izindawo zokusebenza, nakuyo yonke ideskithophu ebonakalayo esekwe emafini.
Iminyaka eminingi, sigcizelele ukuphepha kwe-endpoint, kodwa isivinini esikhulu se-Chrome zero-days sikwenza kubonakale sengathi sihlala sizabalaza ukuhambisana. Ngayinye yalezi zingozi imelela ukuhlaselwa okungaba khona, iwebhusayithi eyingozi, noma inethiwekhi yesikhangiso esengozini ekwazi ukusebenzisa ikhodi engafanele emshinini womsebenzisi. Ukusuka lapho, kuwukugeleza okufushane okuya ekwebiweni kwemininingwane, ukunyakaza okuhlangene, noma ukuthunyelwa kohlelo olungayilungele ikhompuyutha oluyinkimbinkimbi. "Isiphequluli sewebhu esidume kakhulu emhlabeni" futhi, ngokwengeza, indawo yokuhlasela edume kakhulu emhlabeni.
Inkohliso Yokulawula: Kungani Silokhu Sihlehla
Ngakho-ke, iyiphi intambo evamile lapha? Akukhona nje ukuthi lezi "ziyingozi" ezibucayi. Kuwukubikezelwa, okucishe kufane nesiko lokutholwa nokuxhashazwa kwabo. Sibambeke esimweni esiphuthumayo esingapheli, lapho "ukuchibiyela okuphuthumayo" sekuyimodi yokusebenza ezenzakalelayo, kunokuba kube okuhlukile.
Kungani?
- Isikweletu Esiyinkimbinkimbi: Kokubili i-NetScaler ne-Chrome izingcezu zesofthiwe eziyinkimbinkimbi ngendlela emangalisayo. I-NetScaler, enezici zayo eziningi kanye nokuhlanganiswa, iveza indawo enkulu yokuhlasela. I-Chrome, enenjini yayo ye-JavaScript (V8), injini enikezelayo, nezici ezingeziwe eziqhubekayo, iyimpokophelo ehamba phambili yabacwaningi bezokuphepha nabahlaseli ngokufanayo. Ubunzima buzala izimbungulu, futhi izimbungulu, nakanjani, ziholela ekubeni sengozini.
- Inzuzo Yomhlaseli: Izifundazwe kanye namaqembu obugebengu ayinkimbinkimbi awalinde ukudalulwa komphakathi. Bazingela ngenkuthalo lawa maphutha, ngokuvamile ngezinsiza ezibalulekile. Uma isitholakele, i-zero-day iyithikithi legolide, isetshenziswa buthule kuze kube yilapho isiqeshana siphoqa isandla sabo. Iqiniso lokuthi lezi zisetshenziswa ngokuqhubekayo kusho ukuthi izitha sezivele zingaphambi kwejika.
- Ukubhaca Ukukhubazeka: Kwingqalasizinda ebucayi njenge-NetScaler, ukuchibiyela ngokuvamile kusho isikhathi sokuphumula, ukuhlela ngokucophelela, nokuxhumana emaqenjini amaningi. Emabhizinisini amakhulu, lokhu kungaba yiphupho elibi le-bureaucratic. Ku-Chrome, ilula, kodwa isancike ekuthobeleni umsebenzisi noma ekuphatheni okumaphakathi okuqinile. Indlela yokucabanga "yokuyibeka futhi uyikhohlwe", noma okubi nakakhulu, indlela "sizofika kuyo ngekota elandelayo", iyindlela yokwehliswa. Umnqamulajuqu we-CISA we-NetScaler, manje usudlulile, uyisikhumbuzo esiqinile salokhu kungenzi lutho.
- Ukuvikeleka Njengokucabanga Kamuva: Naphezu kwazo zonke izisho, ukuvikeleka kusabonakala kaningi njengesikhungo sezindleko, isithiyo emasuni amasha, noma inkinga okufanele ixazululwe ngemuva kokwephulwa komthetho. Ukutshalwa kwezimali ekuzingeleni usongo oluqhubekayo, ukuphathwa kobungozi okuqinile, kanye nemfundo yokuphepha eqhubekayo kuvame ukuba mincane uma kuqhathaniswa nesigameko esisebenzayo sangemva kwesigameko.
Ngale Kwesiqeshana: Ikholi Lokushintshwa Kwamasu
Ukumane utshele inhlangano ukuthi "ichibiyele ngokushesha" kufana nokutshela umuntu odonsa kanzima emanzini ajulile ukuthi "abhukude kakhulu." Kuyadingeka, kodwa akuxazululi inkinga ewumsuka. Sidinga ushintsho olubalulekile endleleni esibhekana ngayo nezokuphepha.
- Cabanga Ukuvumelana: Imodeli endala yokuvikela i-perimeter ifile. Cabanga ukuthi i-NetScaler yephuliwe. Cabanga ukuthi iziphequluli ze-Chrome zabasebenzisi bakho zizosetshenziswa. Sebenzisa ukuhlukaniswa kwenethiwekhi okuqinile, ukufinyelela okuyilungelo elincane, nokuqapha okuqhubekayo komsebenzi ongaqondakali. Ukuzingela usongo akuyona into ewubukhazikhazi; kuyisidingo. Bheka izimpawu ezicashile: uxhumo olungajwayelekile oluphumayo oluvela ku-NetScaler yakho, ama-akhawunti omsebenzisi amasha, ukwenziwa kwenqubo okungalindelekile.
- Yenza Ngokuzenzakalelayo Konke Okungenzeka: Ukuphathwa kwepeshi kwamaphoyinti okugcina afana ne-Chrome kufanele kwenziwe ngokuzenzakalelayo ngokugcwele futhi kusetshenziswe. Ngengqalasizinda ebucayi njenge-NetScaler, nakuba iyinkimbinkimbi kakhulu, inqubo idinga ukwenziwa lula, ihlolwe, futhi iphinde ifundwe. Isikhathi sokuphumula sezibuyekezo zokuphepha kufanele sihlelwe futhi samukelwe njengezindleko zokwenza ibhizinisi, kungagwenywa ngazo zonke izindleko.
- Tshala Ukuqina, Hhayi Kuphela Ukuvimbela: Izinhlelo zokuphendula isigameko zidinga ukuhlolwa. Ungakwazi ukubona ukuphulwa ngokushesha? Ungakwazi ukukuqukatha? Ungakwazi yini ukululama ngaphandle kokukhokha isihlengo? Lena imibuzo ebalulekile lapho ukuvimbela kwehluleka nakanjani.
- Funa Okungcono Kubathengisi: Ngenkathi i-Google isachibiyela, umthamo wezinsuku eziyiziro ku-Chrome uphakamisa isidingo sokubuyekezwa okujulile kwezakhiwo futhi mhlawumbe nohlelo olunolaka kakhulu lwenzuzo yangaphakathi yeziphazamisi. Kubathengisi bengqalasizinda ababalulekile abanjengoCitrix, okulindelekile kufanele kube phezulu kakhulu. Imikhiqizo yabo empeleni ingumgogodla wemisebenzi yebhizinisi.
Iqiniso liwukuthi, lezi akuzona izehlakalo zodwa. Ziyizimpawu ze-digital ecosystem ngaphansi kokuhlaselwa okuqhubekayo, okuyinkimbinkimbi. Izexwayiso "ezibucayi" zizoqhubeka ziza. Umbuzo awukona ukuthi ingabe inhlangano yakho izoqondiswa yini, kodwa nini, nokuthi ingabe usudlulele ngale kwengxabano esebenzayo ukuze wakhe ukuzivikela okuqina ngempela. Uma umnqamulajuqu we-CISA ophasisiwe we-NetScaler ungazange ukhuthaze isu lakho lokuvikela, yisikhathi sokuhlola kabusha okubucayi.
Imithombo
[1] Ikhathalogi Eyaziwayo Ye-CISA Exhashazwa Ngasengozini — https://www.cisa.gov/known-exploited-vulnerabilities-catalog [2] Abalingisi Abasabisayo Abasebenzisa I-Citrix NetScaler ADC kanye ne-Citrix NetScaler Gateway Vulnerability (CVE-2023-4966) — https://www.cisa.gov/news-events/alerts/2023/10/05/threat-actors-exploiting-citrix-netscaler-adc-and-citrix-netscaler-gateway-vulnerability [3] Emergency Directive 23-02: Mitigate Citrix NetScaler ADC and Gateway Vulnerability — https://www.cisa.gov/news-events/directives/emergency-directive-23-02-mitigate-citrix-netscaler-adc-and-gateway-vulnerability [4] Isibuyekezo Sesiteshi Esizinzile Sedeskithophu (CVE-2024-4947) — https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html [5] I-Citrix NetScaler ADC kanye ne-Citrix NetScaler Gateway Security Bulletin ye-CVE-2023-4966 kanye ne-CVE-2023-4967 — https://support.citrix.com/article/CTX579459/citrix-netscaler-adc-and-citrix-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967