Vulnerability ɲininiw bɛ tobi

dɔgɔtɔrɔso ɲinini bɛ tobi

sibɛri lakanani diɲɛ kɔnɔ , bɔnɛ ɲinini kɛra sanu ye kabini tuma jan lafasali waleyali la . Modeli in tilennen don : hakɛri finmanw ni lakanatɔn minnu y’u yɛrɛ di, olu bɛ porogaramuw sɛgɛsɛgɛ k’a sɔrɔ u ma sɛgɛn, k’a sɔrɔ u ma sɛgɛn, o filiw bɛ sɛbɛn ni u ka baara ye kunnafonidilanbaw kɔnɔ i n’a fɔ CVE lisi, ani patɔrɔnw bɛ bɔ walasa k’an ka kogow nizɛriw barika bonya. O ye sigida ye min jɔlen bɛ rigor ni reaction kan. Nka ni nin wale jusigilan in, a ka ŋaniya ɲumanw bɛɛ n’a ta, tiɲɛna a jɔyɔrɔba la do? Ni, boli la walasa ka fili bɛɛ sɔrɔ, an ye ja belebeleba in bɔ an ɲɛ na do? Fɛnɲɛnɛmako ɲɛnabɔli fɛɛrɛ bɛɛ bɛ se ka kɛ dɔrɔn... tobilen ye.

CVEw ka sanjiba min bɛ ka caya

Dɔgɔtɔrɔso sɔrɔlenw hakɛ cayalenba sera kariyɔrɔ ma. Common Vulnerabilities and Exposures (CVE) kura ba caman bɛ bɔ san o san, o bɛ baara kɛ min tɛ se ka ɲɛnabɔ IT ni lakana jɛkuluw bolo. Gɛlɛya tɛ hakɛ dɔrɔn ye; o ye contexte ye. Nafa "kɔrɔlen" min bɛ gafemarayɔrɔ la min tɛ jɛya, min tɛ baara kɛ ni baarakɛminɛn ye, o bɛ furakɛ ni kɔrɔtɔko ye min bɛ mɔgɔ jalaki, i n’a fɔ fili juguba min bɛ i ka dondaw la min ɲɛsinnen bɛ foroba ma. O mankan in bɛ ekipuw wajibiya ka lɛrɛ nafamaw kɛ ka ko dɔw sɛgɛsɛgɛ ani k’u sɛgɛsɛgɛ, minnu bɛ se ka kɛ faratiba ye u ka jagokɛcogo kɛrɛnkɛrɛnnenw na, ka nafolo bɔ lakana fɛɛrɛw la minnu ka bon kosɛbɛ.

Kɔnɔnafiliko : CVSS jatebɔ kɔfɛ

Common Vulnerability Scoring System (CVSS) laɲini ye ka juguya jateminɛ kuntilenna di, nka a ka c’a la, a tɛ se ka jago farati lakika minɛ. Nafamafɛn dɔ bɛ se ka 9,8 (Critical) sɔrɔ fɛɛrɛko siratigɛ la, nka ni o yɔrɔ nɔgɔlen tɛ ɛntɛrinɛti ɲɛfɛ, ni a tɛ kunnafoni nafamaw ɲɛnabɔ, walima ni a lakananen don lakana kɔlɔsili wɛrɛw fɛ, a ka jago nɔ lakika tɛ jate. Sisan sigida in bɛ fɛɛrɛko gɛlɛya bila jɔyɔrɔ fɔlɔ la jago siratigɛ la, o bɛ na ni "patch everything now" hakilina ye min bɛ mɔgɔ sɛgɛn ani min tɛ baara kɛ. Lakanali lakika tɛ ka patɔrɔn bɛɛ kɛ fiyentɔya la; a bɛ tali kɛ faratiw ɲɛnabɔli hakili la .

"An bɛ ka jigin kunnafoniw na, k'a sɔrɔ kɔngɔ bɛ hakilitigiya la. Diɲɛ bɛna ɲɛminɛ kabini sisan sintezikɛlaw fɛ, mɔgɔw bɛ se ka kunnafoni ɲumanw fara ɲɔgɔn kan waati bɛnnen na, ka miiri kosɛbɛ u la, ka sugandili nafamaw kɛ ni hakilitigiya ye."(blockquote>" - E.O. Wilson

Fɛɛrɛ modulari dɔ ka ɲɛsin faratiw ɲɛnabɔli hakilitigi ma

O yɔrɔ de la paradigme ka kan ka wuli ka bɔ jaabi ɲagaminen na ka taa ɲɛnabɔli sigilen na, min bɛ kɛ ni sigida ye. Jagokɛlaw mago bɛ sigida kelen na min b’a to u bɛ se k’u ka baarakɛcogo kɛrɛnkɛrɛnnen faamuya ani ka nɔgɔya kunnafoniw filɛ o ɲɛkisɛ fɛ. nin ye fɛɛrɛ hakilitigi dɔ koloma ye :

• Nafolo hakilitigiya : fɔlɔ , i ka fɛn dɔn . Nafolo jatebɔsɛbɛn min bɛ fɛn bɛɛ lajɛlen kɛ, min bɛ wuli tuma bɛɛ, o tɛ se ka fɔ.
• Koɲɛnabɔli fɔlɔ : Ka dɛsɛw filɛ ka da u jirali yɛrɛ kan . Yala nafolo in ɲɛsinnen bɛ ɛntɛrinɛti ma wa? Yala a bɛ PII baara wa? Kɔlɔsili wɛrɛ jumɛnw bɛ sen na ?
• Baarakɛcogo jɛlenw : ka ɲɛnabɔli baara di jɛkulu ɲumanw ma cogo la min tɛ gɛlɛya ye, ni fɔlɔfɔlɔ ni waati dantigɛli jɛlenw ye , ka i yɛrɛ tanga tikiti ɲagami ma .
• Labɛnni min bɛ taa ɲɛ : Karti otomatiki la patɔrɔnw ni nɔgɔyali cɛsiriw la ka kɛɲɛ ni sariyaw ye i n’a fɔ SOC 2 , ISO 27001 , walima HIPAA .

Nin hakilina bɛɛjɛfanga in bɛ bɔnɛko kunnafoniw raw, minnu bɛ siran bila mɔgɔ la, olu sɛmɛntiya ka kɛ faratiw ɲɛnabɔcogo jɛlen ye ani min bɛ se ka waleya. A bɛ baara kɛ ni hakilitigiya ye, a tɛ kɛ ka gɛlɛya.

ka bɔ ɲagami na ka taa jɛya la ni Mewayz ye

Bi jagokɛlaw ka tekinoloji kuluw karilen cogoya — ni SaaS porogaramu tan ni caman ye, baarakɛminɛnw labɛncogo, ani kumaɲɔgɔnya siraw — o bɛ gɛlɛya kunbɛnni gɛlɛya juguya. Kɔlɔsili kɔrɔlenw bɛ tunun Slack kanw kɔnɔ, jatebɔsɛbɛnw bɛ kɔrɔya o yɔrɔnin bɛɛ, ani hakililata minnu bɛ se ka waleya, olu bɛ jigin imɛri inbox kɔnɔ. Jagokɛlaw ka OS modulari i n’a fɔ Mewayz bɛ o ɲɛnabɔ ni nin kunnafonidilan suguya danfaralenw bilali ye cɛmancɛ la. Ni Mewayz ye sɛgɛsɛgɛlikɛlaw, nafolo marabagaw, ani baarakɛcogo lajɛ baarakɛminɛnw fara ɲɔgɔn kan ka kɛ baarakɛminɛn kelen ye, min bɛ se ka ladilan, Mewayz bɛ sinsinnan E.O. Wilson y’o ɲɛfɔ. A b’a to lakana ɲɛmɔgɔw bɛ se ka fɛɛrɛko kunnafoniw datugu ni jago siratigɛ ye, ka fɔlɔfɔlɔko kɛ otomatiki ye ani k’a lajɛ ko jɛkulu bɛɛ sinsinnen bɛ faratiw kan minnu nafa ka bon tiɲɛ na. Sɛgɛsɛgɛli minnu bɛ kɛ ni bɔnɛ ye, olu bɛ fɛnw di, nka ni fɛɛrɛ tɛ yen walasa k’u fara ɲɔgɔn kan ka ɲɛ ani k’u tobi, i bɛ to ni ɲagami ye min tɛ se ka ɲɛnabɔ. a waati sera ka dumunikɛyɔrɔ labɛn , i kana pɛrɛn dɔrɔn fɛn kura bɛɛ la min bɛ se da la .

Ɲininkali minnu bɛ kɛ tuma caman na

dɔgɔtɔrɔso ɲinini bɛ tobi

sibɛri lakanani diɲɛ kɔnɔ , bɔnɛ ɲinini kɛra sanu ye kabini tuma jan lafasali waleyali la . Modeli in tilennen don : hakɛri finmanw ni lakanatɔn minnu y’u yɛrɛ di, olu bɛ porogaramuw sɛgɛsɛgɛ k’a sɔrɔ u ma sɛgɛn, k’a sɔrɔ u ma sɛgɛn, o filiw bɛ sɛbɛn ni u ka baara ye kunnafonidilanbaw kɔnɔ i n’a fɔ CVE lisi, ani patɔrɔnw bɛ bɔ walasa k’an ka kogow nizɛriw barika bonya. O ye sigida ye min jɔlen bɛ rigor ni reaction kan. Nka ni nin wale jusigilan in, a ka ŋaniya ɲumanw bɛɛ n’a ta, tiɲɛna a jɔyɔrɔba la do? Ni, boli la walasa ka fili bɛɛ sɔrɔ, an ye ja belebeleba in bɔ an ɲɛ na do? Fɛnɲɛnɛmako ɲɛnabɔli fɛɛrɛ bɛɛ bɛ se ka kɛ dɔrɔn... tobilen ye.

CVEw ka sanjiba min bɛ ka caya

Dɔgɔtɔrɔso sɔrɔlenw hakɛ cayalenba sera kariyɔrɔ ma. Common Vulnerabilities and Exposures (CVE) kura ba caman bɛ bɔ san o san, o bɛ baara kɛ min tɛ se ka ɲɛnabɔ IT ni lakana jɛkuluw bolo. Gɛlɛya tɛ hakɛ dɔrɔn ye; o ye contexte ye. Nafa "kɔrɔlen" min bɛ gafemarayɔrɔ la min tɛ jɛya, min tɛ baara kɛ ni baarakɛminɛn ye, o bɛ furakɛ ni kɔrɔtɔko ye min bɛ mɔgɔ jalaki, i n’a fɔ fili juguba min bɛ i ka dondaw la min ɲɛsinnen bɛ foroba ma. O mankan in bɛ ekipuw wajibiya ka lɛrɛ nafamaw kɛ ka ko dɔw sɛgɛsɛgɛ ani k’u sɛgɛsɛgɛ, minnu bɛ se ka kɛ faratiba ye u ka jagokɛcogo kɛrɛnkɛrɛnnenw na, ka nafolo bɔ lakana fɛɛrɛw la minnu ka bon kosɛbɛ.

Kɔnɔnafiliko : CVSS jatebɔ kɔfɛ

Common Vulnerability Scoring System (CVSS) laɲini ye ka juguya jateminɛ kuntilenna di, nka a ka c’a la, a tɛ se ka jago farati lakika minɛ. Nafamafɛn dɔ bɛ se ka 9,8 (Critical) sɔrɔ fɛɛrɛko siratigɛ la, nka ni o yɔrɔ nɔgɔlen tɛ ɛntɛrinɛti ɲɛfɛ, ni a tɛ kunnafoni nafamaw ɲɛnabɔ, walima ni a lakananen don lakana kɔlɔsili wɛrɛw fɛ, a ka jago nɔ lakika tɛ jate. Sisan sigida in bɛ fɛɛrɛko gɛlɛya bila jɔyɔrɔ fɔlɔ la jago siratigɛ la, o bɛ na ni "patch everything now" hakilina ye min bɛ mɔgɔ sɛgɛn ani min tɛ baara kɛ. Lakanali lakika tɛ ka patɔrɔn bɛɛ kɛ fiyentɔya la; a bɛ tali kɛ faratiw ɲɛnabɔli hakili la .

Fɛɛrɛ modulari dɔ ka ɲɛsin faratiw ɲɛnabɔli hakilitigi ma

O yɔrɔ de la paradigme ka kan ka wuli ka bɔ jaabi ɲagaminen na ka taa ɲɛnabɔli sigilen na, min bɛ kɛ ni sigida ye. Jagokɛlaw mago bɛ sigida kelen na min b’a to u bɛ se k’u ka baarakɛcogo kɛrɛnkɛrɛnnen faamuya ani ka nɔgɔya kunnafoniw filɛ o ɲɛkisɛ fɛ. nin ye fɛɛrɛ hakilitigi dɔ koloma ye :

Ka bɔ ɲagami na ka taa jɛya la ni Mewayz ye

Bi jagokɛlaw ka tekinoloji kuluw karilen cogoya — ni SaaS porogaramu tan ni caman ye, baarakɛminɛnw labɛncogo, ani kumaɲɔgɔnya siraw — o bɛ gɛlɛya kunbɛnni gɛlɛya juguya. Kɔlɔsili kɔrɔlenw bɛ tunun Slack kanw kɔnɔ, jatebɔsɛbɛnw bɛ kɔrɔya o yɔrɔnin bɛɛ, ani hakililata minnu bɛ se ka waleya, olu bɛ jigin imɛri inbox kɔnɔ. Jagokɛlaw ka OS modulari i n’a fɔ Mewayz bɛ o ɲɛnabɔ ni nin kunnafonidilan suguya danfaralenw bilali ye cɛmancɛ la. Ni Mewayz ye sɛgɛsɛgɛlikɛlaw, nafolo marabagaw, ani baarakɛcogo lajɛ baarakɛminɛnw fara ɲɔgɔn kan ka kɛ baarakɛminɛn kelen ye, min bɛ se ka ladilan, Mewayz bɛ sinsinnan E.O. Wilson y’o ɲɛfɔ. A b’a to lakana ɲɛmɔgɔw bɛ se ka fɛɛrɛko kunnafoniw datugu ni jago siratigɛ ye, ka fɔlɔfɔlɔko kɛ otomatiki ye ani k’a lajɛ ko jɛkulu bɛɛ sinsinnen bɛ faratiw kan minnu nafa ka bon tiɲɛ na. Sɛgɛsɛgɛli minnu bɛ kɛ ni bɔnɛ ye, olu bɛ fɛnw di, nka ni fɛɛrɛ tɛ yen walasa k’u fara ɲɔgɔn kan ka ɲɛ ani k’u tobi, i bɛ to ni ɲagami ye min tɛ se ka ɲɛnabɔ. a waati sera ka dumunikɛyɔrɔ labɛn , i kana pɛrɛn dɔrɔn fɛn kura bɛɛ la min bɛ se da la .