Log4Shell ndeimwe yekuonekwa mukutyorwa kwedata mumakore gumi anotevera
Vhiki rino rinomirira yekutanga yegore rekuwanikwa kwekusagadzikana kweLog4j/Log4Shell iyo inokanganisa raibhurari yekutema matanda yeJava. Uye ndezvekuti kunyangwe gore rapfuura kubva pachiitiko ichi, huwandu hwekurodha kweshanduro dzakadzivirirwa dzeLog4j dzichiri dzakakwira, sezvo dzakaverengerwa kutenderera 30-40% yezvese kurodha ndeyeiyo yakafumurwa vhezheni.
Sezvambotaurwa, masangano mazhinji anoramba ari panjodzi kunyangwe shanduro dzezvigamba dzakakurumidza kuwanikwa.
Kune avo vasingazive nezvekusagadzikana, vanofanirwa kuziva izvozvo inozivikanwa nekuti kurwiswa kunogona kuitwa paJava application iyo rekodhi kukosha yakatorwa kubva kunze kwekunze, semuenzaniso, nekuratidza zvinonetsa maitiro mumhosho meseji.
Kusagadzikana kweLog4j kwaive kumuka kwemasangano ese uye nechinguva vazhinji vezvekuchengetedza vangada kukanganwa. Nekudaro, nekushandiswa kwakapararira kweLog4j uye netiweki inokura yemukati uye yechitatu-bato maseva ekupeta, kusazvibata kunonzwika kwenguva yakareba.
Zvinocherechedzwa kuti anenge ese mapurojekiti anoshandisa masisitimu akaita seApache Struts, Apache Solr, Apache Druid kana Apache Flink anokanganisa anosanganisira Steam, Apple iCloud, Minecraft vatengi nemaseva.
Sonatype yakagadzira resource centre kuratidza mamiriro azvino ekusagadzikana, pamwe nechishandiso chekubatsira makambani kuongorora kodhi yavo yakavhurika sosi kuti vaone kana yakanganiswa.
Iyo dashibhodhi inoratidza iyo muzana yeLog4j yekurodha ichiri panjodzi (ikozvino yakatenderedza 34% kubva muna Zvita wapfuura). Inoratidzawo nzvimbo dzepasirese dzakaona chikamu chepamusoro chekurodha pasi.
Brian Fox, CTO weSonatype, anoti:
Log4j chaive chiyeuchidzo chakasimba chekukosha kwakakosha kuchengetedza software yekugovera cheni. Yakashandiswa mune angangoita ese emazuva ano mashandisirwo uye yakakanganisa masevhisi emasangano pasi rese. Rimwe gore mushure mechiitiko cheLog4Shell, mamiriro acho anoramba asina kujeka. Zvinoenderana nedata redu, 30-40% yezvese Log4j yekurodha ndeyeiyo vhezheni isina njodzi, kunyangwe chigamba chakaburitswa mukati memaawa makumi maviri nemana ekuburitswa pachena kwekusagadzikana.
Mukuwedzera kune izvi, anowedzera kuti:
Zvakakosha kuti masangano aone kuti njodzi zhinji dzakavhurika dziri muvatengi, avo vanofanirwa kutora maitiro epamusoro pane kupa mhosva kodhi isina kunaka. Log4j hachisi chiitiko chega: 96% yekudhawunirodha yezvakavhurika yakavhurika sosi zvikamu zvaive neyakavharwa vhezheni.
Masangano anoda kuonekwa zviri nani chese chikamu chinoshandiswa mumaketani avo ekupa software. Ichi ndicho chikonzero chemhando yesoftware yekuumbwa kwekuongorora mhinduro dzakakosha nhasi sezvo nyika inofunga nezvekushandisa kweSBOM mune ramangwana.
UK neEuropean software mutemo unofanirwa kuda kuti vatengi vevatengesi vemahara software vakwanise kuita zvakaenzana nekurangarira chaiko, sezvinotarisirwa nevagadziri vezvinhu zvenyama senge indasitiri yemotokari. Kuonekwa kwese kunopa mamwe mabhenefiti kumasangano, sekugona kuita sarudzo pazviri.
Sezvatinoenda zvakava pachena kuti hackers vaizoenderera mberi nekushandisa kusagadzikana. Muna Kukadzi, matsotsi anotsigirwa nehurumende yeIran akashandisa chikanganiso kupinda muhurumende yeUnited States network, kuchera zvisiri pamutemo cryptocurrency, kuba zvitupa uye shandura mapassword. Zvino, muna Gumiguru, boka rakabatana nehurumende yeChina rakashandisa kusazvibata kutanga kurwisa kwakasiyana siyana, kusanganisira nyika yekuMiddle East uye inogadzira zvemagetsi.
Kusagadzikana kweLog4j kuri kuramba kuchikanganisa mabhizinesi nhasi. Iyo inogara iri yekutanga kana yechipiri mukutyisidzira mishumo kubva kwakasiyana cybersecurity consultancies, inobata 41% yemasangano pasi rose kubva muna Gumiguru 2022.