I-PALO ALTO, Calif., USA, Disemba 30th, 2024 / CyberNewsWire/--SquareX, isisombululo sokuqala soMkhangeli weSikhangeli kunye neMpendulo (BDR), sikhokelela ekukhuselekeni kwesikhangeli. Malunga neveki ephelileyo, SquareX uhlaselo olukhulu olujolise kubaphuhlisi boLwandiso lweChrome olujolise ekuthatheni uLwandiso lweChrome kwiVenkile yeChrome. ingxelo Nge-25 kaDisemba, i-2024, inguqulelo engalunganga yolwandiso lwe-browser ye-Cyberhaven yapapashwa kwiVenkile ye-Chrome eyavumela umhlaseli ukuba aqweqwedise iiseshini eziqinisekisiweyo kwaye akhuphe ulwazi oluyimfihlo. I ibikhona ukuze ikhutshelwe ngaphezulu kweeyure ezingama-30 ngaphambi kokuba isuswe yiCyberhaven. Inkampani yokuthintela ilahleko yedatha yalile ukuphawula malunga nobungakanani bempembelelo xa isondela kumshicileli, kodwa ukongezwa kunabasebenzisi abangaphezu kwama-400,000 ngexesha lohlaselo. ulwandiso olulunya Ivenkile yeChrome Ngelishwa, uhlaselo lwenzeka njengoko abaphandi be-SquareX babenayo uhlaselo olufanayo nge ebonisa yonke indlela yohlaselo kwiveki nje ngaphambi kokwaphulwa kweCyberhaven. ichongiwe ividiyo Uhlaselo luqala nge-imeyile ekhohlisayo ezenza iSitolo seChrome esiqulathe ukwaphulwa kweqonga elithi "Isivumelwano soPhuhlisi", ibongoza umamkeli ukuba amkele imigaqo-nkqubo yokuthintela ukwandiswa kwayo ekususweni kwiVenkile yeChrome. Ekucofa iqhosha lepolisi, umsebenzisi uye acelwe ukuba aqhagamshele iakhawunti yakhe kaGoogle “kwiSandiso soMgaqo-nkqubo waBucala”, onika umhlaseli ufikelelo lokuhlela, ukuhlaziya nokupapasha izandiso kwiakhawunti yomphuhlisi. Isazobe 1. Phishing email ejolise abaphuhlisi abongezelelweyo Umzobo 2. Ukwandiswa koMgaqo-nkqubo waBucala obungeyonyani ucela ukufikelela “kuhlela, ukuhlaziya okanye ukupapasha” ukongezwa komphuhlisi. Izandiso ziye zaba yindlela eyandayo ethandwayo yokuba abahlaseli bafumane ukufikelela kokuqala. Oku kungenxa yokuba uninzi lwemibutho inomda wokujonga ukuba zeziphi izandiso zebrawuza ezisetyenziswa ngabasebenzi babo. Nawona maqela angqongqo okhuseleko awasoloko ebeka iliso kuhlaziyo olulandelayo emva kokuba ulwandiso lube kuluhlu olumhlophe. I-SquareX yenze uphando olubanzi kwaye yabonisa kwi indlela izandiso ezithobelayo ze-MV3 ezinokusetyenziswa ngayo ukubiwa kwevidiyo, ukongeza umdibanisi othuleyo we-GitHub, kwaye ubambe iikuki zeseshoni, phakathi kwabanye. IDEFCON 32, Abahlaseli banokwenza ulwandiso olubonakala lungenabungozi kwaye kamva baluguqule lube lunyanzelo lokufakela emva kokufakwa okanye, njengoko kubonisiwe kuhlaselo olungentla, baqhathe abaphuhlisi ngasemva kolwandiso oluthembekileyo ukuze bafikelele kweso sele sinamakhulu amawaka abasebenzisi. Kwimeko kaCyberhaven, abahlaseli bakwazile ukuntshontsha iziqinisekiso zenkampani kuzo zonke iiwebhusayithi ezininzi kunye neeapps zewebhu ngoguqulelo olungalunganga lolwandiso. Ngenxa yokuba ii-imeyile zomphuhlisi zidweliswe esidlangalaleni kwiVenkile yeChrome, kulula kubahlaseli ukujolisa amawaka abaphuhlisi abongezelelweyo ngaxeshanye. Ezi imeyile ziqhele ukusetyenziselwa ingxelo yebug. Ke, nee-imeyile zenkxaso ezidweliswe ukongezwa kwiinkampani ezinkulu zihlala zithunyelwa kubaphuhlisi abanokuthi bangabinalo inqanaba lolwazi lokhuseleko olufunekayo ukufumana ukurhanelwa kuhlaselo olunjalo. Njengokuvezwa kohlaselo lwe-SquareX kunye nolwaphulo lweCyberhaven olwenzeka ngaphakathi kwexesha elingaphantsi kweeveki ezimbini, inkampani inesizathu esinamandla sokukholelwa ukuba abanye ababoneleli bokwandiswa kwesikhangeli bahlaselwa ngendlela efanayo. I-SquareX ibongoza iinkampani kunye nabantu ngokufanayo ukuba bahlole ngononophelo ngaphambi kokufaka okanye ukuhlaziya naziphi na izandiso zebrawuza. Umzobo 3. Iinkcukacha zoqhagamshelwano zabaphuhlisi bolwandiso ziyafumaneka esidlangalaleni kwiSitolo seChrome Iqela le-SquareX liyaqonda ukuba akunakuba yinto encinci ukuvavanya kunye nokubeka iliso kwisandiso ngasinye sesiphequluli somsebenzi phakathi kwazo zonke izinto eziphambili ezikhuphisanayo zokhuseleko, ngakumbi xa kuziwa kuhlaselo lweentsuku zero. Njengoko kubonisiwe kwi , i-app yomgaqo-nkqubo wabucala womgunyathi obandakanyekayo ekwaphuleni umthetho kaCyberhaven ayizange ibonwe nangaziphi na izoyikiso ezithandwayo. ividiyo isusa obu bunzima kumaqela okhuseleko ngokuthi: Isisombululo se-SquareX's Browser Detection and Response (BDR). Ukuthintela unxibelelwano lwe-OAuth kwiiwebhusayithi ezingagunyaziswanga ukuthintela abasebenzi ukuba banganikezeli ngempazamo abahlaseli ukufikelela okungagunyaziswanga kwiakhawunti yakho yoGcino lukaChrome Ukuthintela kunye/okanye ukuphawula naluphi na uhlaziyo olukrokrisayo oluqulathe iimvume ezintsha, ezinobungozi Ukuthintela kunye/okanye ukuhlohla naziphi na izandiso ezikrokrisayo ngokunyuka kophononongo olubi Ukuthintela kunye/okanye ukufakela iflegi yezandiso ezifakwe ecaleni Ukulungelelanisa zonke izicelo zofakelo olwandisiweyo ngaphandle koluhlu olugunyazisiweyo ukuze uvunywe ngokukhawuleza ngokusekelwe kumgaqo-nkqubo wenkampani Ukubonakala okupheleleyo kuzo zonke izandiso ezifakwe kwaye zisetyenziswe ngabasebenzi kumbutho wonke Umseki we-SquareX iyalumkisa: “Uhlaselo lwesazisi olujolise ekwandisweni kwesikhangeli esifana nolu hlaselo lwe-OAuth luza kuxhaphaka ngakumbi njengoko abasebenzi bexhomekeke kwizixhobo ezisekwe kwisikhangeli ukuze babe nemveliso emsebenzini. Ukwahluka okufanayo kolu hlaselo kusetyenziswe kwixesha elidlulileyo ukuze kubiwe idatha yefu kwii-apps ezifana ne-Google Drive kunye ne-One Drive kwaye siza kubona kuphela abahlaseli befumana ubuchule obungakumbi ekusebenziseni izandiso zesiphequluli. Iinkampani kufuneka zihlale ziphaphile kwaye zinciphise umngcipheko wokubonelelwa ngaphandle kokuthintela imveliso yabasebenzi ngokubaxhobisa ngezixhobo ezizizo eziziibhrawuza ezifanelekileyo. ” Vivek Ramachandran Malunga neSquareX: inceda imibutho ukuba ibone, ithobe, kwaye izingele uhlaselo lwewebhu lwecala lomthengi olwenzeka ngokuchasene nabasebenzisi bayo ngexesha lokwenyani. IsikwereX Isisombululo sokuqala seSquareX soMkhangeli weSikhangeli kunye neMpendulo (BDR), sithatha indlela ejolise kuhlaselo kukhuseleko lwesikhangeli, siqinisekisa ukuba abasebenzisi beshishini bakhuselwe kwizisongelo eziphambili ezifana neeKhowudi ze-QR ezinobungozi, ibrowser-in-the-browser phishing, i-malware esekwe kwi-macro, kunye nolunye uhlaselo lwewebhu oluquka iifayile ezinobungozi, iiwebhusayithi, imibhalo, kunye nothungelwano olusengozini. Nge-SquareX, amashishini anokubonelela ngeekontraka kunye nabasebenzi abakude ngokufikelela ngokukhuselekileyo kwizicelo zangaphakathi, kunye ne-SaaS yeshishini, kunye nokuguqula izikhangeli kwi-BYOD / izixhobo ezingalawulwayo zibe ziiseshoni zokukhangela ezithembekileyo. Qhagamshelana Intloko yePR Junice Liew IsikwereX junice@sqrx.com Eli bali lisasazwe njengokukhutshwa yiCybernewswire phantsi kweNkqubo yokuBloga yeShishini yeHackerNoon. Funda ngakumbi malunga nenkqubo Apha
