Lithulusi lekugebenga nge-AI lenta imizamo yekungena lengu-2,900 ngemzuzu: Kufakazela ngetintfo letimbili kuvuliwe yini kuma-akhawunti enkampani yakho?

I-ARTEX, lithulusi lekugebenga lelenta kuhlasela kwalo ngema-ejenti e-AI, nyalo litfolakala kunobe ngumuphi umhlaseli: nga-5 Novemba 2026 i-Censys ibale emaseva langetulu kwa-1,465 lavulekile ku-inthanethi lalisebentisako, futsi licembu lelihlobene ne-China selilisebentisile emkhankasweni wekucagela emaphasiwedi lofinyelele etulu kuya emizamweni yekungena lengu-2,900 ngemzuzu. Kuvikeleka lokushibhile nalokushesha kakhulu kufakazela ngetintfo letimbili: lucwaningo lwe-Microsoft lutfole kutsi kunciphisa ingoti yekugetjengwa kwe-akhawunti ngema-99.22%. Yenta tintfo letintsatfu leliviki: yenta kufakazela ngetintfo letimbili kube yimfuneko kuwo onkhe ema-akhawunti e-imeyili nebaphatsi, vala ema-protocol e-imeyili lamadala, futsi ucele umbiko walabo labangakabhalisi. Nangabe inkampani yakho ixhumanisa ema-app langaphandle ne-Microsoft 365, fundza futsi sihloko setfu mayelana nekugetjengwa kwe-ConnectWise, ngobe leso sikhala asivalwa kufakazela ngetintfo letimbili kuphela.

Iyini i-ARTEX futsi kungani kufanele ikukhatsate?

I-ARTEX luhlaka lwemtfombo lovulekile lwekuhlola kungena ngekutentekela, lolushicilelwe ngumakhi walo ku-GitHub nga-26 Julayi 2026. Ngekusho kwembiko we-Censys loshicilelwe nga-5 Novemba 2026, i-ejenti yinye ye-AI ihlela kuhlasela futsi ikwehlukanise ngemisebenti, lamanye ema-ejenti asebentisa emathulusi ekuskena futsi abike imiphumela, futsi lomjikelezo uyaphindvwa kuze kufinyelelwe umgomo. I-Microsoft iyichaza njengelithulusi leliphatsa kuhlasela kusukela ekuhloleni kuze kube sekwebeni idatha ngaphandle kwekungenela lokukhulu kwebantfu.

Ngemuva kwekutsi kusetjentiswa kwalo ekuhlaseleni kwangempela kwatiwe, umakhi walo wamemetela kutsi litawuvalwa umtfombo wasusa i-repository, kodvwa emakhophi lagciniwe netinguculo letitjintjwe emagama tisasabalele. I-Censys ibale cishe kufakwa lokutimele kwa-815 ngemuva kwekususa emaseva lanemalungiselelo lafanako, kufaka ekhatsi emaseva langu-726 e-United States, langu-387 e-Hong Kong nalangu-177 e-China. Ngekwentiwa, lokwakudzinga licembu lebahlaseli nyalo kudzinga umuntfu munye nelithulusi lelimahhala.

Bahlaseli benteni ngempela ngalo?

Embikweni wayo loshicilelwe nga-21 Okthoba 2026, i-Microsoft ibhale umkhankaso welicembu leliwulandzela ngekutsi yi-Storm-0940, lelasebentisa i-ARTEX kucagela emaphasiwedi ngekutentekela emkhatsini wa-10 na-14 Okthoba:

• Ema-akhawunti langu-327 etinhlanganweni letingu-8 ahlaselwe ngekufafatwa kwemaphasiwedi, lokusho kutsi kuhlolwa emaphasiwedi lajwayelekile kuma-akhawunti lamanyenti.
• Kungena lokuhlulekile lokungetulu kwa-151,000, lokungetulu kwa-111,000 kwako kwaba ngelilanga linye, kwafinyelela etulu kuya emizamweni lengu-2,900 ngemzuzu nga-11 Okthoba.
• Ema-akhawunti langu-48 ngalinye lamukele imizamo lehlulekile lengetulu kwa-1,000.
• Kulokunye kuhlasela kwalelo licembu, kwendlula ngaphasi kwema-awa la-3 emkhatsini wekuhlosa kwekucala nekungena lokunemalungelo lamakhulu engcalasisekelweni ye-cloud.

I-Microsoft itsi ayikabonanga kungena lokuphumelele kulowo mkhankaso, ngobe kukhiywa kwema-akhawunti kumunce lokunyenti kwawo. Kodvwa i-TechCrunch ifingce nga-6 Novemba kutsi lokunyenti kwalokuhlasela kusebentise butsakatsaka lobulula: emaphasiwedi labutsakatsaka nobe latiwako, nekungabi khona kwekufakazela ngetintfo letinyenti.

Kungani liphasiwedi lodvwa alisaneli

Alisaneli. Umshini awudzinwa futsi awulali, futsi noma nguyiphi i-akhawunti lenaliphasiwedi leliphindvwako nobe lelake lavuta itawuhlolwa ngekushesha nobe ngekuhamba kwesikhatsi. Kufakazela ngetintfo letimbili kungeta intfo yesibili umhlaseli langenayo: ikhodi ku-app esocingweni semsebenti, sikhiya sekuphepha nobe i-passkey. Bacwaningi be-Microsoft bahlatiye ema-akhawunti angempela lakhombisa umsebenti lowusolisako, futsi batfole elucwaningweni lwabo loshicilelwe kutsi kufakazela ngetintfo letimbili kunciphisa ingoti yekugetjengwa ngema-99.22%, nangema-98.56% ngisho naliphasiwedi selivutile. Batfole nekutsi ema-app ekufakazela ancono kunemakhodi e-SMS, nanoma kokubili kuncono kakhulu kunekungabi nalutfo.

Secwayiso lesibalulekile emibhalweni ye-Microsoft: ema-protocol e-imeyili lamadala njenge-IMAP, POP3 ne-SMTP awakusekeli kufakazela ngetintfo letimbili, ngako umhlaseli angangena ngawo futsi edlule kuvikeleka konkhe. Kuvula akukaphelele kuze kube ema-protocol lawa avaliwe.

Tilawuli Tesikhungo Savelonkhe Sekuphepha kwe-Inthanethi titsini?

Tilawuli Letisisekelo Tekuphepha kwe-Inthanethi ECC-2:2024 letikhishwe Sikhungo Savelonkhe Sekuphepha kwe-Inthanethi sase-Saudi Arabia (NCA) tifuna kufakazela ngetintfo letinyenti etindzaweni letintsatfu lokungenani:

• Silawuli 2-2-3-2: ekungeneni lokukhashane nakuma-akhawunti lanemalungelo lamakhulu.
• Silawuli 2-4-3-2: ekungeneni lokukhashane nangelwebmail ku-imeyili.
• Silawuli 2-15-3-5: ekungeneni kwebasebentisi kuma-application e-web langaphandle.

Letilawuli tibopha tikhungo tahulumende, tinkampani letihlobene nato netinhlangano letizimele letinengcalasisekelo yavelonkhe lebalulekile, letiyiphatsako nobe letiyibambako, futsi Sikhungo sikhutsata kakhulu tonkhe letinye tinhlangano eMbusweni kutisebentisa. Nawuhlinzeka ngetinsita kusikhungo sahulumende, lindzela kutsi utawubutwa ngato ekuhlolweni kwebahlinzeki.

Tinyatselo tekukuvula leliviki

• Microsoft 365: esikhungweni sekuphatsa se-Microsoft Entra vula i-Entra ID, bese kuba yi-Overview, bese kuba yi-Properties, bese kuba yi-Manage security defaults, bese uyativula. Tilungiselelo tekuphepha letisetulu timahhala, atidzingi ilayisensi lengetiwe, tiphoca kufakazela ngetintfo letimbili kubaphatsi futsi tivimbe ema-protocol emadala. I-Microsoft incoma ema-akhawunti lamabili ebaphatsi ebuhlungwini langakaboshelwa kumsebenti munye, kute ungativaleli ngaphandle.
• Google Workspace: ku-Menu, bese kuba yi-Security, bese kuba yi-Authentication, bese kuba yi-2-step verification, vumela kucala basebenti kutsi babhalise, bese ukwenta kube yimfuneko kusukela elusukwini lolubekiwe. I-Google ivumela sikhatsi sekubhalisa kwebasebentisi labasha kusukela elangeni lelingu-1 kuya etinyangeni letingu-6, futsi ungafuna tikhiya tekuphepha nobe ema-passkey kubaphatsi nakwemali.
• Lokuhamba embili: cala ngema-akhawunti ebaphatsi, emali ne-imeyili, bese kuba ngulabanye basebenti, bese kuba ngulamanye emasistimu njengesistimu yekubalwa kwemali, sitolo se-inthanethi nemaphaneli ekusingatsa.
• Kulandzelela: cela umbiko weliviki ngaloliviki walabo labangakabhalisi, futsi unganiki kukhululwa ngaphandle kwalokwesikhashana lokunesizatfu lesibhaliwe.

Umbono wa-Origami

Lokutjintjile akusiluhlobo lwekuhlasela, ngobe kucagela emaphasiwedi kwakudzala, kodvwa yindleko yako: nyalo kuyatentekela, kushibhile futsi kutfolakala kunobe ngubani. Libhizinisi lelinema-imeyili nesistimu yekubalwa kwemali lokusavulwa ngaliphasiwedi lodvwa libheja kutsi umhlaseli angeke afike, futsi lelibheja liyahlulwa ngekuhamba kwesikhatsi.

Kungako onkhe emasistimu lalethwa ngu-Origami akhiwa ngendlela yekutsi kungena kudlule etintfweni letimbili lokungenani, kuxhunywe nekungena kwekusayina kanye nangabe libhizinisi seline-akhawunti ye-Microsoft nobe ye-Google, njengobe sachaza esihlokweni setfu mayelana nekufakazela lokuphephile ne-SSO. Nawufuna kutsi indlela licembu lakho lelingena ngayo kumasistimu akho ihlolwe, nobe ixhunywe ku-akhawunti yinye levikelekile, txintsana natsi.

Sigcino

Lithulusi lekuhlasela le-AI lelimahhala nyalo lihlola tinkhulungwane temaphasiwedi ngemzuzu ngaphandle kwekudzinwa. Kufakazela ngetintfo letimbili kanye nekuvala ema-protocol emadala kuvala lokunyenti kwalomnyango, futsi kungavulwa ku-Microsoft 365 nase-Google emalangeni lambalwa ngaphandle kwetindleko letengetiwe. Cala namuhla ngebaphatsi nangemali, futsi ungalindzi kutsi i-akhawunti yakho ivele eluhlwini lwetisulu embikweni lolandzelako.

Imitfombo

• Microsoft Security Blog: Storm-0940 uses ARTEX in ConnectWise supply chain compromise, 21 Okthoba 2026
• Censys: umbiko nge-ARTEX nemaseva lavulekile, 5 Novemba 2026
• Sikhungo Savelonkhe Sekuphepha kwe-Inthanethi (NCA): Essential Cybersecurity Controls ECC-2:2024
• Microsoft Research: How effective is multifactor authentication at deterring cyberattacks?
• Microsoft Learn: Configure security defaults for Microsoft Entra ID
• Google Workspace: Deploy 2-Step Verification
• TechCrunch: Hundreds of ARTEX AI hacking tools found publicly exposed to the web, 6 Novemba 2026