[PPT] - C o m m o n T h r e a t s 101110001010101001010 PowerPoint Presentation

SLIDE 1

C

m

m

n

T h r e a t s

IT'S TIME TO TAKE WEB SECURITY SERIOUSLY

G r a m m e n

s

S t e f a n

s

101110001010101001010 010101010100101010101

https://gr.linkedin.com/in/grammenos

SLIDE 2

Y E S S S S S I ' V E J U S T D I S C O V E R E D W

r

d P r e s s

101110001010101001010 010101010100101010101

MAKES MY LIFE EASIER SO BIG COMMUNITY TO COUNT ON I CAN FIND A PLUGIN AND JOB DONE JUST LIKE THAT! SO MANY FREE & PREMIUM THEMES, I LOVE THEM! GOOGLE IS MY FRIEND I CAN I CAN SEARCH AND FIND AND DOWNLOAD ANYTHING!

SLIDE 3

Y E S S S S S I ' V E J U S T D I S C O V E R E D W

r

d P r e s s

101110001010101001010 010101010100101010101

W

r

d P r e s s 4 . 4 h a s b e e n d

w

n l

a

d e d 3 9 , 8 5 , 1 4 7 t i m e s . . . . . .

{ h t t p s : / / w

r

d p r e s s .

r

g / d

w

n l

a

d / c

u

n t e r / }

W

r

d P r e s s c u r r e n t l y r u n s m

r

e t h a n 7 4 , 6 m i l l i

n

w e b s i t e s . . .

{ C N N , T e c h C r u n c h , F

r

b e s }

A l m

s

t 3 , p e

p

l e m a k e m

n

e y u s i n g W

r

d P r e s s e v e r y d a y . M

r

e t h a n 2 , W

r

d P r e s s p l u g i n s a r e a v a i l a b l e E s t i m a t e d N u m b e r

f

W

r

d P r e s s P l u g i n s D

w

n l

a

d s ? 3 , , t i m e s ! ! B y t h e t i m e t h a t i w r

t

e t h i s s l i d e r :

SLIDE 4

O h h w e g

t

a p r

b

l e m . . . .

101110001010101001010 010101010100101010101

To WordPress λόγω της απλότητας της χρήσης του, άλλα και την τεράστια δημοτικότητα που έχει αποκτήσει, αποτελεί αυτή τη στιγμή έναν απο τους μεγαλύτερους στόχους για την διάδοση των πιο κύριων μορφών εξαπάτησης και κυβερνοεγλημάτων

Το κύριο Πρόβλημα

Το ανησυχητικό κομμάτι της υπόθεσης είναι, ότι οι κακόβουλοι χρήστες εκμεταλλεύονται κυρίως την ανθρώπινη άγνοια. #StayUpdated

The Perfect Security Password COMBO UsrNm/Admin Passwd/Admin

SLIDE 5

W

r

d P r e s s C O R E . . . .

101110001010101001010 010101010100101010101

O

W A S P T

p

1 Vulnerabilities ====> π https://www.owasp.org

T h e W

r

d P r e s s c

r

e h a s t h r e e d i fg e r e n t t y p e s

f

u p d a t e s :

C
r

e d e v e l

p

m e n t u p d a t e s , k n

w

n a s t h e " b l e e d i n g e d g e "

M

i n

r

c

r

e u p d a t e s , s u c h a s m a i n t e n a n c e a n d s e c u r i t y r e l e a s e s

M

a j

r

c

r

e r e l e a s e u p d a t e s

T h e O p e n W e b A p p l i c a t i

n

S e c u r i t y P r

j

e c t ( O W A S P ) i s a 5 1 ( c ) ( 3 ) w

r

l d w i d e n

t
f
r
p

r

fj

fj t c h a r i t a b l e

r

g a n i z a t i

n

f

c

u s e d

n

i m p r

v

i n g t h e s e c u r i t y

f

s

f

t w a r e . O u r m i s s i

n

i s t

m

a k e s

f

t w a r e s e c u r i t y v i s i b l e , s

t

h a t i n d i v i d u a l s a n d

r

g a n i z a t i

n

s w

r

l d w i d e c a n m a k e i n f

r

m e d d e c i s i

n

s a b

u

t t r u e s

f

t w a r e s e c u r i t y r i s k s .

SLIDE 6

W

r

d P r e s s E n g i n e

101110001010101001010 010101010100101010101 PHP version 5.6 or greater MySQL version 5.6 or greater OR MariaDB version 10.0 or greater

WordPress Security? *

SLIDE 7

I n t r

d

u c i n g V I R U S

101110001010101001010 010101010100101010101

“Ένας ιός είναι ένα πρόγραμμα που αναπαράγει τον κώδικά του με την ένωση του με άλλα εκτελέσιμα αρχεία με τέτοιο τρόπο ώστε ο κώδικας του ιού να εκτελείται όταν εκτελείται το μολυσμένο εκτελέσιμο αρχείο.”

“A virus is a program that reproduces its own code by attaching itself to other executable files in such a way that the virus code is executed when the infected executable file is executed.”

T h e r e a r e a l a r g e n u m b e r

f

v i r u s t y p e s f

r

a l l M a c h i n e s .

S a s s e r B a g l e Z a f y M y D

m

A n d M a n y M a n y M

r

e . . .

L e t ' s t a k e a b i g b r e a t h a n d l e t ' s g

T
s

e e t h e p a t h

f

a v i r u s F

l

l

w

m e h t t p s : / / c y b e r m a p . k a s p e r s k y . c

m

/

SLIDE 8

O O O H H H H

101110001010101001010 010101010100101010101

A r e A l s

m

y F r i e n d s H e h e h e h . . . .

T

r

r e n t s

2 9 %

O f H a c k e d W

r

d P r e s s W e b s i t e s G e t t i n g H a c k e d b y C r a c k e d T h e m e s 2 2 % H a c k e d W

r

d P r e s s W e b s i t e s b y u n u p d a t e d

r

c r a c k e d P l u g i n s

I F Y O U D O N T W A N T T O P A Y 3 $ # D O _ N O T D O W N L O A D C R A C K E D T H E M E S ( A N D P L U G I N S ) T H E R E A R E T H O U S A N D S F R E E O F T H E M O U T T H E R E . . . h t t p s : / / w

r

d p r e s s .

r

g / t h e m e s /

M

r

e t h a n 7 %

f

W

r

d P r e s s i n s t a l l a t i

n

s a r e v u l n e r a b l e t

h

a c k e r a t t a c k s

SLIDE 9

S y s t e m S e c u r i t y

101110001010101001010 010101010100101010101

4 1 %

O f H a c k e d W

r

d P r e s s W e b s i t e s G e t t i n g H a c k e d b y U N U P D A T E D S E R V E R & U N P A T C H E D S E R V E R V U L N E R A B I L I T I E S T H A T H O S T I N G P R O V I D E R S D O E S N ' T E V E N E V E R K N E W T H A T E X I S T S . . .

r

t

@ m e : ~ $ T

p

P r i

r

i t y # F i n d a n e x p e r i e n c e d H

s

t i n g P r

v

i d e r W i t h K n

w
H
w

# G e t S e r i

u

s , S e r v e r i s y

u

r w e b s i t e ' s h

m

e 3 . h a c k e d w e b s i t e s p e r d a y O n e w e b s i t e h a c k e d e v e r y 5 m i n u t e s

SLIDE 10

S y s t e m S e c u r i t y

101110001010101001010 010101010100101010101

9 . . w e b s i t e s t h a t a r e c u r r e n t l y h a c k e d

r

i n f e c t e d .

SLIDE 11

M

b

i l e R e v

l

u t i

n

101110001010101001010 010101010100101010101

h t t p : / / b l

g

s . m c a f e e . c

m

SLIDE 12

W h a t D

i

H a v e T

D
.

.

101110001010101001010 010101010100101010101

G

e t a n e x p e r i e n c e d H

s

t i n g P r

v

i d e r

U

s e H y p e r t e x t T r a n s f e r P r

t
c
l

S e c u r e ( H t t p s ) h

t t p s : / / e l . w i k i p e d i a .

r

g / w i k i / H T T P S

B

a c k u p y

u

r W e b s i t e E v e r y D a y .

h t t p s : / / e l . w

r

d p r e s s .

r

g / p l u g i n s / t a g s / b a c k u p

M

u l t i

F

a c t

r

a n d T w

F

a c t

r

A u t h e n t i c a t i

n

.

h t t p s : / / e l . w

r

d p r e s s .

r

g / p l u g i n s / t a g s / t w

f

a c t

r
a

u t h e n t i c a t i

n
U

p d a t e W

r

d P r e s s

h t t p s : / / c

d

e x . w

r

d p r e s s .

r

g / U p d a t i n g _ W

r

d P r e s s

U

p d a t e A l l P l u g i n s

h t t p s : / / c

d

e x . w

r

d p r e s s .

r

g / M a n a g i n g _ P l u g i n s

B

a c k u p y

u

r W e b s i t e E v e r y D a y .

U

s e a C

m

p l e x P a s s w

r

d

D
w

n l

a

d T h e m e s & P l u g i n s

n

l y F r

m

W

r

d P r e s s R e p

s

i t

r

y .

U

s e T r u s t e d S e c u r i t y P l u g i n s , c h e c k t h e i r c

d

e .

P

r

t

e c t W

r

d P r e s s a n d W

r

d P r e s s fj l e s b y U s i n g . h t a c c e s s

h t t p s : / / c

d

e x . w

r

d p r e s s .

r

g / h t a c c e s s _ f

r

_ s u b d i r e c t

r

i e s

C

h a n g e A d m i n u s e r n a m e t

s
m

e t h i n g e l s e

C

h a n g e y

u

r D a t a b a s e t a b l e _ p r e fj x ( T

a

v

i

d e x p e r t i z e d S Q L I n j e c t i

n

s )

U

s e a W

r

d P r e s s B a s e d F i r e W a l l

h t t p s : / / w

r

d p r e s s .

r

g / p l u g i n s / w p

s

i m p l e

fj

r e w a l l /

T

h e a r e m a n y w a y s t

M
n

i t

r

y

u

r W

r

d P r e s s W e b s i t e .

K

e e p y

u

r S y s t e m s & Y

u

r N e t w

r

k s U p d a t e d ( P c

R
t

e r )

U

s e a s t r

n

g A n t i v i r u s i n y

u

r S y s t e m .

C

h e c k a n y fj l e w i t h A n t i v i r u s b e f

r

e u p l

a

d i t t

y
u

r W e b s i t e

C
n

n e c t

n

l y f r

m

S e c u r e W i r e l e s s N e t w

r

k s

U

P D A T E – U P D A T E – U P D A T E – U P D A T E E V E R Y T H I N K ! ! ! ! ! ! ! ! ! !

SLIDE 13

L i v e A t t a c k s

101110001010101001010 010101010100101010101

h t t p : / / m a p . n

r

s e c

r

p . c

m

/ h t t p : / / w w w . d i g i t a l a t t a c k m a p . c

m

/ h t t p : / / t h r e a t m a p . f

r

t i g u a r d . c

m

/ h t t p : / / w w w . t r e n d m i c r

.

c

m

/ u s / s e c u r i t y

i

n t e l l i g e n c e / c u r r e n t

t

h r e a t

a

c t i v i t y / g l

b

a l

b
t

n e t

m

a p / i n d e x . h t m l h t t p s : / / w w w . c h e c k p

i

n t . c

m

/ T h r e a t P

r

t a l / l i v e m a p . h t m l h t t p : / / h

m

e . m c a f e e . c

m

/ v i r u s i n f

/

g l

b

a l

v

i r u s

m

a p h t t p : / / w

r

l d m a p 3 . f

s

e c u r e . c

m

/ h t t p : / / m a p . h

n

e y n e t .

r

g / h t t p s : / / l a b s .

p

e n d n s . c

m

/ g l

b

a l

n

e t w

r

k / h t t p : / /

c

u l a r w a r f a r e . c

m

/ i p e w / ? a l l f x = 1 ( A r b

r

N e t w

r

k s ) h t t p s : / / l a b s .

p

e n d n s . c

m

/ s e c u r i t y

g

r a p h / h t t p s : / / w w w . a l i e n v a u l t . c

m

/

p

e n

t

h r e a t

e

x c h a n g e / d a s h b

a

r d # / t h r e a t s / t

p

( A L L i E N V a u l t ) h t t p : / / d d s . e c / p e w p e w / ( h t t p s : / / g i t h u b . c

m

/ h r b r m s t r / p e w p e w ) h t t p : / / w w w . s e c u r i t y w i z a r d r y . c

m

/ r a d a r . h t m h t t p : / / g l

b

a l s e c u r i t y m a p . c

m

/ A n d m a n y m

r

e . . .

SLIDE 14

W

r

d P r e s s S e c u r i t y I n t r

https://gr.linkedin.com/in/grammenos

Q u e s t i

n