The Guard's Weak Spot
Attackers are exploiting a flaw in the SiteGuard web application firewall to run commands with root or SYSTEM privileges on affected machines.
Key terms
AP Cybersecurity alignment
- 4.3.C.1When vulnerabilities in operating systems and software are found, the vendor or organization that maintains the operating system software will fix it and send an update. A small update is called a patch.Learning objective: Explain why keeping a device’s operating system and software updated makes it more secure.
- 4.4.A.1System processes and settings, login attempts, file download attempts, and user actions are logged by computing systems. These logs can be used to reconstruct circumstances leading up to and during a cyber incident.Learning objective: Explain how to detect attacks against devices.
- 5.1.A.2Computers have standard users and administrative users. Administrative users have access to control system settings and can typically access any files or applications on a system. If regular users are given administrative…Learning objective: Explain how adversaries can exploit application and file vulnerabilities to cause loss, damage, disruption, or destruction.
AP Networking alignment
- 4.1.A.2Violations of the CIA triad often occur together, resulting in greater impact. Understanding the full scope of an incident requires investigating what happened, who was affected, and how data or services were impacted.…Learning objective: Identify evidence of compromised confidentiality, integrity, or availability.
- 4.6.B.4Applying and documenting software updates and patches reduces the risk of failure and reduces recovery time if an outage occurs.Learning objective: Identify ways to improve the reliability and availability of networked systems.