Njengomphumela wokugebenga ingqalasizinda ye-Verkada, ehlinzeka ngamakhamera okuqapha ahlakaniphile ngokusekelwa ukuqashelwa kobuso, abahlaseli bathole ukufinyelela okugcwele kumakhamera angaphezu kwezinkulungwane eziyi-150 asetshenziswa ezinkampanini ezifana ne-Cloudflare, Tesla, OKTA, Equinox, kanye nasemabhange amaningi. , amajele, nezikole , iziteshi zamaphoyisa nezibhedlela.
Amalungu eqembu labaduni i-APT 69420 Arson Cats aveze ukuthi anokufinyelela okuyizimpande kumadivayisi akunethiwekhi yangaphakathi ye-CloudFlare, Tesla kanye ne-Okta, futhi akhombe njengobufakazi bokuqoshwa kwevidiyo yezithombe ezivela kumakhamera nezithombe-skrini ngemiphumela yokukhipha imiyalo ejwayelekile kugobolondo. . Abahlaseli bathi uma befuna, bangakwazi ukulawula ingxenye ye-Internet ngesonto.
I-Hack ye-Verkada yenziwa ngohlelo olungavikelekile lomunye wabathuthukisi, oluxhunywe ngqo kunethiwekhi yomhlaba wonke. Kule khompuyutha, kutholwe imingcele ye-akhawunti yomlawuli enamalungelo okufinyelela kuzo zonke izici zengqalasizinda yenethiwekhi. Amalungelo atholiwe ayenele ukuxhuma kumakhamera weklayenti futhi asebenzise imiyalo yegobolondo kuwo ngamalungelo ezimpande.
Abamele i-Cloudflare, egcina enye yamanethiwekhi amakhulu okulethwa kokuqukethwe, baqinisekisile ukuthi abahlaseli bakwazile ukufinyelela kumakhamera okuqapha e-Verkada asetshenziselwa ukuqapha amaphasishi neminyango yokungena kwamanye amahhovisi avaliwe isikhathi esingangonyaka. Ngokushesha ngemva kokuhlonza ukufinyelela okungagunyaziwe, i-Cloudflare inqamule wonke amakhamera anenkinga kumanethiwekhi ehhovisi futhi yenza ucwaningo olubonisa ukuthi idatha yekhasimende kanye nokuhamba komsebenzi akuzange kuthinteke ngesikhathi sokuhlasela. Ukuze uvikeleke, i-Cloudflare isebenzisa imodeli ye-Zero Trust, ehlanganisa ukuhlukanisa izingxenye kanye nokuqinisekisa ukuthi ukugetshengwa kwezinhlelo ngabanye nabahlinzeki ngeke kuholele ekwehleni kwayo yonke inkampani.
Source: opennet.ru