- Izibuyekezo zakamuva zeCisco zilungisa ubuthakathaka obubalulekile ku-ISE, SD-WAN, Nexus, ACI, kanye nama-firewall avumela i-RCE, ukukhushulwa kwamalungelo, kanye ne-DoS.
- Amaphutha amaningana ane-CVSS 10.0 athinta izinhlelo zokuphatha ezihlanganisiwe (i-ISE, i-FMC, i-SD-WAN Manager), ngakho-ke okubalulekile ukusebenzisa ama-patches asemthethweni ngaphandle kokuthembela ezindleleni zokubhekana nalezi zinkinga.
- I-Cisco incoma ukuqinisa ukuhlukaniswa, ukulawulwa kwembobo, ukubuyekezwa kwelogi, kanye nokuqina kwama-API nezinsizakalo zokuphatha njengezinto ezibalulekile ezihambisana nokulungiswa kwefayela.
- Ukuphathwa okuqhubekayo kwezibuyekezo, kanye nokuqapha okuthuthukisiwe kanye nezinqubo zokuphepha ezivuthiwe, kubalulekile ekunciphiseni ubungozi kumanethiwekhi ebhizinisi asekelwe ku-Cisco.
Izibuyekezo ezibalulekile zeCisco sezibe yingxenye ebalulekile yesu lokuphepha kwe-cyber kunoma iyiphi inkampani ethembele kwingqalasizinda yayo yenethiwekhi ekusebenzeni kwansuku zonke. Ezinyangeni zakamuva, uchungechunge lwezeluleko zokuphepha lukhishwe oluthinta izixazululo ezibucayi njengezinhlelo zokuphatha ubunikazi, amapulatifomu e-SD-WAN, ama-core switch, kanye nama-perimeter firewalls, okuphoqa amaqembu obuchwepheshe ukuthi aqaphe eduze ama-patches atholakalayo.
Uma kuvela ubuthakathaka obunama -CVSS score angu-10.0 noma ngaphezulu , sikhuluma ngamaphutha anganikeza ukufinyelela okukude okungaqinisekisiwe, ukusebenzisa ikhodi enamalungelo ezimpande, noma ukususa izinsizakalo zenethiwekhi ezibalulekile ngephakethe elilodwa elinonya. Engeza kulokhu iqiniso lokuthi ezinye zalezi zinkinga sezivele zisetshenziswa ngenkuthalo, futhi isiphetho sicacile: noma ubani onemishini ye-Cisco ekukhiqizweni udinga ukuthatha isinyathelo ngokushesha, ahlele kahle amafasitela okulungisa, futhi aqinise izilawuli ezizungeze lezi zinkundla.
Ubuthakathaka obubalulekile ku-Cisco Identity Services Engine (ISE) kanye nokuphathwa kobunikazi
I-Cisco ikhiphe ama-patches amathathu okungagunyaziwe kokusetshenziswa kwekhodi ekude ku-Identity Services Engine (ISE) kanye ne-ISE Passive Identity Connector (ISE-PIC). Womathathu anamaphuzu e-CVSS angu-10.0, izinga eliphakeme kakhulu lobunzima, njengoba evumela umhlaseli okude ukuthi athole amalungelo ezimpande ezinhlelweni ezibalulekile ekulawuleni ukuthi ubani ongena nokuthi yini angayenza ngaphakathi kwenethiwekhi yenkampani.
Ubuthakathaka obumenyezelwe buhambisana ne -CVE-2025-20281, i-CVE-2025-20282, kanye ne-CVE-2025-20337 , konke okuhlobene nokuqinisekiswa okunganele kokufakwayo okucutshungulwa ama-API athile angaphakathi. Empeleni, isigebengu se-cyber singathumela izicelo ezilawulwayo zokulayisha amafayela anonya ezindleleni ezinelungelo noma siphoqelele ukwenziwa kwemiyalo engafanele ngamalungelo aphezulu kakhulu ohlelo atholakalayo.
Ngokuphathelene nobubanzi, izinguqulo ze-ISE kanye ne-ISE-PIC 3.3 (kuze kufike ku-Patch 6) kanye no-3.4 (kuze kufike ku-Patch 1) ziyathinteka . Ngokuthakazelisayo, amagatsha angu-3.2 nangaphambilini awathinteki yilezi zimo ezibucayi ezithile, ngakho-ke ingozi igxile ekusetshenzisweni kwakamuva, okuvame ukuba yilezo ezikhiqizwa ezindaweni ezidinga kakhulu.
Inkinga ngalezi zinhlobo zobuthakathaka ukuthi azikho izixazululo zesikhashana ezisebenzayo : akukho ukucushwa okuyisimangaliso noma indlela ezinzile yokulungisa isikhathi. I-Cisco ngokwayo ikwenza kucace ukuthi okuwukuphela kwendlela yokunciphisa engokoqobo ukufaka ama-patches asemthethweni, okudinga isheduli yokuvuselela okusheshayo yawo wonke ama-node e-ISE athintekile.
Ukulungiswa kuyatholakala ku -ISE/ISE-PIC 3.4 Patch 2 kanye ne-ISE/ISE-PIC 3.3 Patch 7. Ngisho noma ukulungiswa okuthile kusetshenziswe kwezinye izindawo (njengamaphakheji afana ne-ise-apply-CSCwo99449_3.3.0.430_patch4-SPA.tar.gz), i-Cisco isancoma ukuthuthukiswa kulawa ma-patch asemthethweni, njengoba ukulungiswa kwangaphambilini okungahleliwe kungambozi i-CVE-2025-20337 noma kuqinisekisa ukulungiswa okuphelele kwesethi yobuthakathaka.
Ngaphezu kokulungisa, kubalulekile ukuqinisa ukuvezwa kwezixhumi zokuphatha ze-ISE nama-API . Ukunciphisa ukufinyelela kumanethiwekhi okuphatha athembekile, ukuvikela ngama-ACL nama-firewall ohlelo lokusebenza, ukubuyekeza amalogi okuqinisekisa kanye nezenzo zokuphatha, kanye nokusebenzisa izinhlelo zokuqapha ukuziphatha kusiza ekutholeni imizamo yokuxhaphaza ngaphambi kokuba umhlaseli aqhubeke nokuhlasela.
Ubuthakathaka obune obubalulekile kumapulatifomu okuphathwa kobunikazi be-Cisco
Ngokuphathelene nale ndawo efanayo yobuwena nokufinyelela, i-Cisco ithole ezinye izinkinga ezine ezibaluleke kakhulu ezingxenyeni ezibalulekile ze-Cisco Identity Services Engine (ISE) kanye ne-Cisco Secure Access Cloud. Lezi zixazululo zakha isisekelo sokuqinisekiswa nokugunyazwa kumanethiwekhi amaningi ebhizinisi, ngakho-ke noma yikuphi ukwehluleka lapha kunomthelela oqondile ebuqothweni, ubumfihlo, kanye nokutholakala kwengqalasizinda.
Phakathi kobuthakathaka obutholakele kukhona amathuba ahlukahlukene okusebenzisa ikhodi ekude kanye namaphutha ekuqinisekisweni kokufaka okuvumela umhlaseli ongenamalungelo ukwandisa izimvume, ashintshe izinqubo zangaphakathi, noma abeke engcupheni ngokuphelele izinhlelo ezithintekile. Uma ukuhlasela kuphumelele, umphumela ungasukela ekufinyeleleni okungagunyaziwe kuya kolwazi olubucayi kuya ekuphazamisekeni kwezinsizakalo zokuqinisekisa, ukuvimba ukufinyelela okusemthethweni komsebenzisi.
Ngokombono wobuchwepheshe, uhlobo olulodwa lokuba sengozini luncike emaphutheni ekuqinisekiseni idatha etholwe ama-API noma izinsizakalo zangaphakathi . Ngezicelo eziklanywe ngokucophelela, kungenzeka ukwenza imiyalo engahleliwe, ukudlula izindlela zokuqinisekisa, noma ukubhalela izindawo zesistimu okufanele zivikeleke, okungabangela imiphumela emibi ezindaweni zokukhiqiza.
Umthelela ekutholakaleni nawo ubalulekile: njengoba le mikhiqizo ihlanganisa ukuphathwa kokufinyelela , noma yikuphi ukuwohloka noma isikhathi sokungasebenzi esibangelwa ukuhlaselwa kungaholela ekunqatshweni kwensizakalo okubanzi kwama-VPN, i-Wi-Fi yenkampani , ukufinyelela okuxhunywe ngentambo nge-802-1X, noma ukuhlanganiswa nezinhlu zabasebenzisi.
Ukuze kuxazululwe lobu buthakathaka, i-Cisco ikhiphe izibuyekezo zesofthiwe ezithile zezinguqulo ezithintekile ze-ISE kanye ne-Secure Access Cloud . Amaqembu ezokuphepha ayalulekwa ukuthi abeke phambili lezi zibuyekezo ngaphakathi kohlelo lwawo lokulungisa, ikakhulukazi ezindaweni ezithembele kakhulu ekuqinisekisweni okuphakathi kanye nezinsizakalo zokufinyelela ezinemibandela.
Ngenkathi umjikelezo wokulungisa uqhubeka, kuyalulekwa ukuqinisa ukuqapha amalogi, izexwayiso zokuhlobana, kanye nezinhlelo zokuthola ukungena ngaphakathi kulezi zinkundla. Ukubukeza amaphethini okuqinisekisa angajwayelekile, ukwanda kwamaphutha e-API, kanye nokuziphatha okungajwayelekile kuma-node e-ISE kungasiza ekuboneni imizamo yokuxhaphaza ngisho nangaphambi kokuba umhlaseli afinyelele ukuvumelana okugcwele.
Ukwehluleka okubucayi ku-Cisco Catalyst SD-WAN, Nexus kanye ne-ACI
Ngaphandle kokuphepha kobunikazi, i-Cisco ishicilele uhlu oluphelele lwezeluleko zokuphepha ezithinta izindawo ze-Cisco Catalyst SD-WAN kanye nemindeni eminingana ye-Cisco Nexus kanye ne-ACI switch . Umbiko wobuchwepheshe uchaza izinkinga ngokuqinisekiswa, ukwanda kwamalungelo, ukudalulwa kolwazi, kanye nezimo eziningi zokwenqatshwa kwesevisi ngokufinyelela okukude noma eduze.
Phakathi kwamacala abucayi kakhulu yi -CVE-2026-20127 kanye ne-CVE-2026-20129 , zombili ezihlobene nokuqinisekiswa ku-Cisco Catalyst SD-WAN Controller kanye ne-Cisco Catalyst SD-WAN Manager. Eyokuqala, enesilinganiso se-CVSS esingu-10.0, ivumela umhlaseli okude ongagunyaziwe ukuthi adlule inqubo yokubukela futhi athole amalungelo okuphatha ngqo ohlelweni oluthintekile, okubanika ukulawula okuphelele kokucushwa kwe-SD-WAN.
Endabeni ye- CVE-2026-20129 , ubuthakathaka buthinta ukuqinisekiswa komsebenzisi ku-Cisco Catalyst SD-WAN Manager API, futhi nge-vector ekude engaqinisekisiwe kanye nesilinganiso se-CVSS esingu-9.8. Esebenzisa isicelo esenziwe ngokukhethekile, umhlaseli angathola ukufinyelela ngamalungelo e-netadmin futhi enze imiyalo ngaleli zinga lezimvume. I-Cisco ikhombisa ukuthi izinguqulo ze-SD-WAN Manager ezingu-20.18 nezakamuva azithinteki yileli phutha elithile.
Ubuthakathaka bendawo obukhulayo njenge -CVE-2026-20126 kanye ne-CVE-2026-20128 nabo bubhaliwe . Lokhu kuvumela umsebenzisi onezimvume ezilinganiselwe ku-SD-WAN Manager ukuthi athole amalungelo ezimpande noma e-DCA. Kuzo zombili izimo, ukuxhashazwa kuncike ekusetshenzisweni kabi kwama-API angaphakathi (ama-REST API noma imisebenzi ye-Data Collection Agent) futhi kudinga iziqinisekiso ezivumelekile, kodwa umthelela ongaba khona uhlanganisa ukuthathwa kwesistimu okuphelele noma ukufinyelela kwamanye ama-node ngaphakathi kwendawo ye-SD-WAN.
Lo mbiko uhlanganisa izinkomba zamaphutha angaphambilini ku-Cisco SD-WAN CLI ( CVE-2022-20775 kanye ne-CVE-2022-20818 ), asevele esetshenziswa ngokoqobo futhi avumela imiyalo engahleliwe ukuthi isetshenziswe njengempande evela ekufinyeleleni kwendawo okuqinisekisiwe. Nakuba lobu buthakathaka bunesilinganiso se-CVSS esiphansi kancane (7.8), buhlala buyingozi kakhulu ezindaweni lapho opharetha abaningi babelana khona ngokufinyelela komugqa womyalo.
Ngasohlangothini lokushintsha isikhungo sedatha, izeluleko zikhomba izinkinga ezifana ne- CVE-2026-20048 , ubuthakathaka ekuphathweni kwe-SNMP kuma-switches e-Cisco Nexus 9000 Series kumodi ye-ACI. Umhlaseli okude oqinisekisiwe, onokufinyelela kuchungechunge lomphakathi lokufunda kuphela ku-SNMPv1/v2c noma iziqinisekiso ze-SNMPv3 ezivumelekile, angabangela ukwenqatshwa kwesevisi ngokubangela iphutha le-kernel eliphoqa ukuthi idivayisi iqalise kabusha.
Ezinye izinkinga, njenge -CVE-2026-20033, i-CVE-2026-20051, kanye ne-CVE-2026-20010 , zithinta i-Layer 2 kanye nezinsizakalo ezifana ne-LLDP kumapulatifomu ahlukahlukene e-Nexus (3600, 9500-R, 9000 kumodi ye-ACI, kanye ne-NX-OS). Kuzo zonke izimo, lezi izinkinga ezingase zisetshenziswe kusukela kunethiwekhi eseduze, ngaphandle kokuqinisekiswa, okungabangela ukuqala kabusha okungalindelekile, izihibe zethrafikhi ze-Layer 2, noma ukugcwala kwe-bandwidth ephelele, okuholela ekuphazamisekeni okukhulu kwesevisi.
Isifinyezo sezindaba senza kucace ukuthi azikho izindlela ezijwayelekile zokuxazulula lezi zingqinamba; ukunciphisa kuhilela ukubuyekeza izinguqulo zesofthiwe ezilungisiwe ku-SD-WAN, Nexus, kanye ne-ACI. Kwezinye izimo, kuphakanyiswa izindlela zokunciphisa ubuso, njengokuhlukanisa ithrafikhi yokuphatha, ukuhlunga ukufinyelela kumachweba athintekile (isibonelo, ukukhawulela ukufinyelela kumachweba 22 no-830 ekusetshenzisweni kwe-SD-WAN), kanye nokuqapha ngokucophelela amalogi ethrafikhi nokulawula.
Izibuyekezo ezinkulu ze-Cisco Secure Firewall, ASA, kanye ne-FMC
Kanye nobuthakathaka bobunikazi kanye nenethiwekhi, i-Cisco ikhiphe isibuyekezo esikhulu sokuphepha se-ecosystem yayo ye-firewall , ehlanganisa ubuthakathaka obungu-48 obutholakale ku-Cisco Secure Firewall ASA, i-Secure Firewall Management Center (FMC), kanye ne-Secure Firewall Threat Defense (FTD) . Amaphutha amabili athola amaphuzu e-CVSS angu-10.0, okuwabeka ezingeni eliphezulu kakhulu lobunzima.
Ubuthakathaka obubaluleke kakhulu butholakala eCisco Secure Firewall Management Center , ingxenye ehlanganisa ukuphathwa kwezinqubomgomo, ukucushwa, ukuthunyelwa, kanye nokuqapha ama-firewall ezinkampani zeCisco. Ngokukhethekile, amaphutha amabili avelele: i-CVE-2026-20079, ehlobene ne-authentication bypass, kanye ne-CVE-2026-20131, egxile ekusebenziseni ikhodi ekude.
Zombili lezi zingqinamba zivumela umhlaseli okude ukuthi afinyelele i-FMC ngaphandle kweziqinisekiso ezivumelekile futhi asebenzise ikhodi enamalungelo ezimpande ohlelweni oluphatha yonke ingqalasizinda yomlilo. Ukuvumelana okunjalo kusho ukuthi umhlaseli angashintsha imithetho, akhubaze ukuhlolwa, aqondise kabusha ithrafikhi, noma asuse ngisho nobufakazi bomsebenzi ononya, okuphakamisa ingozi iye ezingeni eliphezulu kakhulu ngaphakathi kwendawo ezungezile.
Leli phephandaba liphinde lihlanganise nobuthakathaka obuningi bokwenqatshwa kwesevisi obuthinta imisebenzi ye-Remote Access SSL VPN kanye neseva yewebhu ye-VPN ku-ASA kanye ne-FTD. Ezinye zalezi zinamaphuzu e-CVSS angu-8.6, ahlukaniswe njengobunzima obukhulu, njengoba zingasusa izinsizakalo zokufinyelela kude ezivame ukuba zibalulekile ekusebenzeni ngocingo kanye nokuxhumana nabantu besithathu.
Sekukonke, i-Cisco ichaza izeluleko zokuphepha ezingu-25 ezihlanganisa ubuthakathaka obungu-48 , kanye nezibuyekezo ezitholakalayo zamagatsha ahlukahlukene asekelwayo e-ASA, i-FMC, kanye ne-FTD. Nakuba i-Cisco PSIRT ikhombisa ukuthi, ngesikhathi sokushicilelwa, bekungekho bufakazi bokusetshenziswa kabi kobuthakathaka obubili obubalulekile be-FMC, isimo sabo esikude, esingaqinisekisiwe kanye nomthelela wabo ohlelweni lokuphatha oluhlanganisiwe kwenza ukulungiswa kube okuphuthumayo kakhulu.
Isincomo esiyinhloko ukuthi kuqalwe kubuyekezwe konke ukusetshenziswa kusetshenziswa i-FMC njengekhonsoli yabo yokuphatha , kuhlelwe amafasitela okulungisa ahleliwe ukuze kugwenywe ukushiya inethiwekhi ingavikelekile. Ngemuva kwalokho, kuyalulekwa futhi ukufaka ama-patches ku-ASA naku-FTD, ikakhulukazi emishinini evezwe ngqo kwi-inthanethi noma ekhonza abasebenzisi abakude.
Izincwadi zezindaba zangaphambilini: i-Cisco Enterprise NFV, i-Prime, i-Nexus Insights, kanye ne-ISE
Ngaphezu kwegagasi lakamuva lama-patches, kubalulekile ukukhumbula ukuthi i-Cisco ibilokhu iqoqa izeluleko zokuphepha zezinye izingxenye ezibalulekile zemvelo yayo , eziningi zazo ezisekhona kumanethiwekhi okukhiqiza. Isibonelo esisodwa yi-bulletin ebala ubuthakathaka obuthile obufanele obubonwe amaqembu okuphepha kwe-cyber njenge-Netglobalis.
Iseluleko sibala ubuthakathaka obufana ne- CVE-2021-34746 , ubuthakathaka bokudlula kokuqinisekiswa kusofthiwe yengqalasizinda ye-Cisco Enterprise NFV, engavumela umhlaseli ukuthi agweme izilawuli zokufinyelela ezibalulekile ezindaweni ze-virtualization zemisebenzi yenethiwekhi.
Okunye okuphawulekayo yi- CVE-2021-34733 , ubuthakathaka bokudalulwa kolwazi ku-Cisco Prime Infrastructure kanye ne-Cisco Evolved Programmable Network Manager. Kulesi simo, ukuxhashazwa kungadalula idatha yokucushwa noma ulwazi lwenethiwekhi olubucayi, oluwusizo kakhulu ekulungiseleleni ukuhlaselwa okulandelayo, okuqondiswe kakhulu.
Endaweni yokuphathwa kokubambisana, i-CVE-2021-34732 ibhekisela ekungcoleni kwe-cross-site scripting (XSS) enqubweni yokuhlinzeka ngokubambisana kwe-Cisco Prime, kuyilapho i-CVE-2021-34759 ithinta i-Cisco Identity Services Engine ngenye i-XSS engavumela ukwenziwa kwekhodi kusiphequluli somlawuli ngokuqukethwe okunonya.
Okokugcina, kukhulunywa nge -CVE-2021-34765 , ubuthakathaka bokudalulwa kolwazi obuqinisekisiwe ku-Cisco Nexus Insights, obungasiza ekufinyeleleni okungagunyaziwe kwedatha yangaphakathi mayelana nokusebenza kwenethiwekhi kanye nempilo. Futhi, lolu ulwazi olubaluleke kakhulu kumhlaseli ofuna ukuhlasela noma ukwenza ukubhujiswa okuqondiwe.
Isiqondiso kulezi zimo sicacile: faka izibuyekezo ezinconywe umenzi ngeziteshi zakhe ezisemthethweni , ngemuva kokuhlola umthelela ezinsizeni ezibalulekile, bese uhlela ukuthunyelwa nabasebenzi bezobuchwepheshe abanomthwalo wemfanelo . Ngaphambi kokuthunyelwa ekukhiqizweni, kungcono ukuhlola ama-patches ezindaweni zangaphambi kokukhiqiza noma zelebhu, ubuyekeze amanothi okukhishwa, futhi uqinisekise ukuhambisana nokuhlanganiswa okukhona.
Amasu okunciphisa nokuqinisa ezindaweni zaseCisco
Njengoba kunenombolo nobunzima bobuthakathaka bamuva nje, ukufaka nje ama-patches bese ukhohlwa ngakho akwanele. Kubalulekile ukusebenzisa indlela yokuzivikela ejulile kanye nokuqinisa kuzo zonke izingqimba zengqalasizinda ye-Cisco, kusukela ekuphathweni kobunikazi kuya endizeni yokulawula inethiwekhi kanye nezingodo zomlilo ezizungezile.
Ku-Cisco Catalyst SD-WAN deployments, isibonelo, i-Cisco itusa ukukhawulela ithrafikhi kumachweba okuphatha abucayi (njenge-22 ne-830) kuphela kumakheli e-IP abalawuli aziwayo, ukukhubaza ukufinyelela kwe-HTTP ku-portal yokuphatha, kanye nokuphoqelela ukusetshenziswa kwe-HTTPs ngezitifiketi ezibuyekeziwe. Ukushintsha amaphasiwedi omlawuli abe yizinguqulo eziqinile, ezihlukile kakhulu nokuvumela ukuqinisekiswa kwezinto eziningi lapho kungenzeka khona kungenye isendlalelo esibalulekile sokuvikela.
Iphuzu elibalulekile ukubuyekezwa okuqhubekayo kwamalogi omsebenzi namalogi okubhanqa amadivayisi . Ukuhlonza ukuxhumana kokuhlola okungagunyaziwe, imizamo yokuqinisekisa ehlulekile evela emithonjeni esolisayo, noma ukwanda kwethrafikhi kuma-API okuphatha kunganikeza izinkomba zokuqala zokuthi othile uzama ukuxhaphaza enye yezinkinga ezaziwayo.
Ezindaweni ze-Nexus ne-ACI, ngaphezu kokufaka izinguqulo ezilungisiwe ze-NX-OS ne-firmware, kunconywa ukuhlukanisa ngokucophelela ama-VLAN , ukukhawulela ukufinyelela ku-SNMP kanye ne-LLDP kusuka ezigabeni zokuphatha ezilawulwa kahle, nokusebenzisa uhlu lokulawula ukufinyelela ezingqimbeni 2 no-3 ukuze kukhawulelwe ububanzi bokuhlaselwa okuseduze.
Izinhlangano ezithembele kakhulu ku-Cisco ISE nakwamanye amapulatifomu e-IAM kufanele zibukeze ukuvezwa kwezixhumi zokuphatha ngama-VPN, amanethiwekhi e-Wi-Fi ezivakashi, noma ukufinyelela okukude komuntu wesithathu . Ukwethula ama-bastion host, ukuhlukanisa inethiwekhi yokuphatha, kanye nokuqapha eduze izingcingo ze-API kanye nezinguquko zokucushwa kunciphisa kakhulu amathuba okuvumelana buthule.
Ngaphezu kwakho konke, kuyalulekwa ukuthi kusungulwe izinqubo zokuhlolwa okwenziwa njalo, ukuskena kobungozi, kanye nokubuyekezwa kokucushwa okusekelwe eziqondisweni ezisemthethweni ezifana ne-Cisco Catalyst SD-WAN Hardening Guide noma imikhuba emihle yokuphepha ye-Cisco yezindawo zomlilo kanye nokushintsha. Ukugcwalisa lokhu kubuyekezwa ngokuqeqeshwa okuqhubekayo kwabasebenzi bezobuchwepheshe kanye nokusetshenziswa kwezixazululo zokuqapha ezisebenzisa i-AI kusiza ukuthola amaphethini angavamile ngaphambi kokuba isigameko sikhule sibe ukwephulwa okukhulu.
Ukubaluleka komjikelezo wokuvuselela okuqhubekayo kanye nombono wokuphepha womhlaba wonke
Lo mbono wonke wezixwayiso nama-patches kwenza kucace ukuthi amanethiwekhi ebhizinisi asesimweni sokushintsha njalo nokuthi indawo yokuhlasela iyakhula lapho isici ngasinye esisha sivuliwe. I-Cisco, njengomunye wabadlali abakhulu kulo mkhakha, iphendula ngamaphakheji wokuvuselela aphelele, futhi kungumthwalo wemfanelo wezinhlangano ukuwahlanganisa kumephu yazo yokulungisa ngaphandle kokuphazamisa ukusebenza kwebhizinisi.
Ubuthakathaka emishinini yenethiwekhi akuyona nje inkinga yobuchwepheshe; buphinde buthinte ukwethenjwa kwamakhasimende, ozakwethu, kanye nabalawuli . Iphutha elibalulekile elingalungiswanga ku-perimeter firewall, isilawuli se-SD-WAN, noma uhlelo lokuphatha ubunikazi kungaholela ekwebiweni kwedatha, ukuphazamiseka kwesevisi, noma izehlakalo eziholela ezijezisweni zomthetho kanye nomonakalo wedumela okunzima ukulilinganisa.
Ngakho-ke, izinkampani eziningi zikhetha ukusebenza nabahlinzeki abangochwepheshe ekuthuthukisweni kwezixazululo ezenziwe ngokwezifiso ngokuphepha kwe-cyber okwakhelwe ngaphakathi ngomklamo . Le ndlela ibavumela ukuthi bahlanganise izinsizakalo zamafu njenge-AWS noma i-Azure ngaphandle kokulahlekelwa umbono wezimfuneko zokuphepha, okuhambisana nokufuduka kanye nokuhlelwa kabusha kwezinqubomgomo zokufinyelela, ukuqapha, kanye nokuphendula ezigamekweni.
Ekugcineni, indlela engokoqobo kakhulu yokuvikela ingqalasizinda yenethiwekhi ihilela ukuhlanganisa izibuyekezo ezisheshayo, ukuqina kokucushwa, ukuhlukaniswa okuhlakaniphile, ukuqapha okuthuthukisiwe, kanye nokuqeqeshwa kweqembu okuqhubekayo. Izibuyekezo ezibalulekile ze-Cisco zisebenza njengesikhumbuzo sokuthi noma iyiphi ingxenye yenethiwekhi—kungakhathaliseki ukuthi ingase ibonakale iqine kangakanani—ingaba yindawo yokuqala yesigameko esingathi sína uma ingagcinwa ivuselelwe futhi ihlanganiswe nesu lokuphepha eliphelele.
