Mhla ti-16 Inyoni 2026 i-Cisco ishicilele secwayiso sekuvikela mayelana ne-CVE-2026-76460, letsintsa i-Identity Services Engine ne-ISE Passive Identity Connector. Linani lesisekelo le-CVSS ngu-10.0, lelisetulu kakhulu lelinikwa lesikali. Imbangela kungabi khona kwetilawuli letenele tekucinisekisa ku-API endpoint yinye, futsi umphumela kutsi umhlaseli lokhashane longakacinisekiswa angafinyelela ku-interface yekuphatsa ngekutfumela sicelo lesentiwe ngebucili. I-Cisco itsi ngalokucacile i-PSIRT yayo iyati kutsi liphutsa liyasetjentiswa ngemphela, nekutsi ayikho indlela yekulizungeza letfolakalako.

Libito lelibuchwepheshe alisho lokukhulu kumnikati webhizinisi. Incazelo yekusebenta isho konkhe: lomshini lotsintsekile akusiyo i-server yemafayela noma iphrinta yenethiwekhi. Ngulelisetjentiswa lelibutwa yinethiwekhi yonkhe ngebunguye balowo nalowo lozama kuhlanganisa. Linguleliyo lelincuma kutsi lelikhomphutha lephatsekako ngelesisebenti lesigunyatiwe, kutsi lelifoni ngelesivakashi lesifanele inethiwekhi yetivakashi, nekutsi lomhlinzeki ufinyelela sistimu yinye kuphela. Uma ligunya lelenta leso sincumo liwa, awulahlekelwa lusito lunye. Ulahlekelwa sisekelo lekuma kuso sonkhe lusito.

Lesikwatiko ngempela

Lamaciniso avela esecwayisweni se-Cisco ngekwaso kanye nasohlwini lwe-Known Exploited Vulnerabilities (buntsatsakali lobatiwako kutsi busetjentisiwe) lwe-CISA, hhayi etindzabeni temaphephandzaba:

  • Imikhicito letsintsekile: i-Cisco Identity Services Engine ne-ISE Passive Identity Connector, tinguculo kusuka ku-3.1 kuya ku-3.5.
  • Tinguculo letilungisiwe: 3.1 Patch 12, 3.2 Patch 11, 3.3 Patch 12, 3.4 Patch 7 kanye ne-3.5 Patch 4.
  • Lokudzingekako kute kusetjentiswe liphutsa: kute. Umhlaseli lokhashane longakacinisekiswa, sicelo sinye lesentiwe ngebucili ku-API endpoint, ngaphandle kwe-akhawunti futsi ngaphandle kwephasiwedi.
  • Simo: liyasetjentiswa ngemphela ngekusho kwe-Cisco PSIRT, futsi lengetwe ohlwini lwe-Known Exploited Vulnerabilities mhla ti-16 Inyoni 2026, lilanga lekugcina lekulungisa kube ngu-19 Inyoni 2026 etikhungweni tahulumende wemubuso wase-United States.
  • Indlela yekulizungeza: kute. Kuphela lokwehlisa bungoti lokushiwo yi-Cisco kukhawulela kungena kulomshini ngeluhlu lwekulawula kungena kwengcalasizinda kuze kube i-patch seyifakiwe.

Emagama lamatsatfu kuloluhlu afanele kutsi sime kancane kuwo: lokhashane, lokungakacinisekiswa, kanye nekungabi khona kwendlela yekulizungeza. Nobe ngubuphi buntsatsakali lobungenayo yinye yato bukunika sikhala sekuphefumula. Lobu abukuniki lutfo ngaphandle kwekufaka i-patch noma kuhlukanisa.

Kungani emasetjentiswa ebunguye ambi kakhulu kunanobe ngayiphi lenye i-server loyisebentisako

Kunethiwekhi yebhizinisi, tinhlelo atilingani emiphumeleni yekungenelelwa kwato. Uma kungenelelwa i-server yemibiko, ulahlekelwa yimibiko. Uma kungenelelwa umshini lolawula bunguye nekungena, awulahlekelwanga ngumshini munye. Ulahlekelwe yincazelo yeligama lelitsi imvume kulo lonkhe inethiwekhi.

Nobe ngubani lotfola kulawula kwekuphatsa loluhlelo lolunjalo, ngemtsetfo angashintja tinchubomgomo ngekwato — akhe bunguye lobugunyatiwe esikhundleni sekuzama kwehlula silawuli. Lowo ngumehluko lobalulekile. Kuhlasela kuyekela kuba kungena ngenkhani lokubukeka kungajwayelekile emarekhodini, kube kungena lokubukeka kusemtsetfweni ngalokuphelele, ngobe kufike ngalo lisango lelifanako lowetsemba lona. Leli licala lelilukhuni kakhulu kulitfola, ngobe kucapha kwakhelwe kulokucabanga kutsi konkhe lokuvunywa luhlelo lwebunguye kuvunyiwe ngekwencazelo.

Engeta kuloko nendzawo lakuma khona lamasetjentiswa. Ahlala emkhatsini wenethiwekhi futsi axhumene nasinye nasinye sigaba, ngobe umsebenti wawo uyakudzinga loko. Ngako-ke kutfola indzawo yekunyatsela kulelisetjentiswa kutfola indzawo yekunyatsela emgwaceni lovulekile loya kuko konkhe lokungemuva kwalo. Kungako tinhlelo tebunguye, tekungena netekucinisekisa kufanele tibe phetulu kakhulu eluhlwini lwetimphahla letibalulekile, hhayi eluhlwini lolujwayelekile lwemishini yenethiwekhi. Sakhuluma ngalomcondvo lofanako ngelinye lihlangotsi esihlokweni setfu mayelana nendzawo yinye yekwehluleka lekute loyidvwebako.

Sifundvo asisiso se-Cisco

Kulula kufundza loku njengetindzaba ngemkhicito munye wemkhiciti munye. Lokufundza lokunjalo kunetsetfo kodvwa akusiti lutfo. I-Cisco ikhiphe lokulungisa futsi yasho ngalokucacile simo sekusetjentiswa kweliphutsa, lokungiko lokufanele kwentiwe ngumkhiciti lovutsiwe. Emasetjentiswa ekuvikela awo onkhe emakhiciti anebuntsatsakali, ngobe ayi-software, futsi tecwayiso letifanako titawulandzela.

Umbuto lokufanele uhambe nawo akusiko kutsi uyayisebentisa yini i-Cisco. Kutsi uyati yini kutsi ngumiphi imishini netinhlelo leticinisekisa bunguye bebasebentisi benethiwekhi yakho, tikuyiphi tinguculo, ngubani lonemsebenti wekutifaka ema-patch, nekutsi loko kutsatsa sikhatsi lesingakanani ngempela. Inhlangano lengaphendvula lemibuto lemine ngelihhafu lelihora iphatsa lesecwayiso njengemsebenti wantsambama. Inhlangano lengati kutsi ngubani lophatsa lelisetjentiswa idzinga liviki kute ifike nje emugceni wekucala, futsi lelo liviki lonkhe sikhatsi sekuba sengotini.

Loku kunguko ncamashi lokucelwa ngu-Essential Cybersecurity Controls lokukhishwe Siphatsimandla Savelonkhe Sekuvikeleka kwe-Cyber (NCA) esigabeni sako sekuphatsa buntsatsakali: kuhlola nekutfola buntsatsakali ngetikhatsi letitsite, kuhlukanisa ngebungoti, kulungisa ngekuya ngaloko kuhlukaniswa kanye nebungoti lobuhambisana nako, kubhalisela imitfombo lesetsembekile yetindzaba ngebuntsatsakali lobusha, kanye nekuphatsa ema-patch lokuhlola kuphelela nemphumela wetibuyeketo endzaweni lengasiyo yekukhicita ngaphambi kwekutifaka. Silawuli lesivame kwehluleka akusiko kufaka ema-patch ngekwako. Ngumtfombo lowetsembekile: inhlangano lengakaze iyitfole secwayiso semkhiciti ivele iva ngaso esihlokweni setindzaba emva kwemalanga, noma ingaze ive.

Umbono we-Origami

Sakha tinhlelo temabhizinisi esikhundleni sekutsengisa tinsita tenethiwekhi, kodvwa siyayibona imiphumela yaloku kuyo yonkhe iphrojekthi yekuhlanganisa. Ngaso sonkhe sikhatsi lesixhuma ngaso luhlelo lolusha kunethiwekhi yelikhasimende, kuvela umbuto lofanako: ngubani lonikeka timvume lapha, futsi leso sincumo sibhalwa kuphi. Lokuphawulwa lokuphindzaphindzekako kutsi incenye lebutsakatsaka ayivamisi kuba luhlelo lolusha noma kucinisa kwalo. Ngulesendlalelo luhlelo lolucabanga kutsi silungile futsi kute lositfolako, ngobe sesidzala futsi besolo sisebenta ngekuthula iminyaka.

Ngako-ke siphatsa nobe nguyiphi incenye lesendleleni yebunguye njengencenye yekuvikeleka kwaloluhlelo, hhayi njengentfo leseceleni kwalo. Ibhalwa eluhlwini lwetimphahla kanye nelibito layo, inguculo yayo nemnikati wayo. Iniketwa sikhatsi sekulungisa lesivunyelwene ngaso kusenesikhatsi, esikhundleni saleso lesihlelwa ngekushesha ngelilanga lefika ngalo secwayiso. Futsi i-interface yayo yekuphatsa ikhawulelwe kunethiwekhi yekuphatsa lehlukene esikhundleni sekutsi ifinyeleleke kusuka kunethiwekhi lejwayelekile. Leti tindlela letintsatfu letingadzingi sabelomali lesisha, futsi tingumehluko emkhatsini webhizinisi lelifundza secwayiso se-Cisco futsi lati kutsi lentani, kanye nalelisifundzako bese licala ngekubuta kutsi ngubani lonephasiwedi yalelisetjentiswa. Kuyincenye yendlela lesisebenta ngayo kuto tinsita tetfu.

Imibuto lesihlanu yekuyiphendvula kuleliviki

Loku akusilo luhlelo lwekuvikela lolupheleleko. Timphendvulo letisihlanu letiveta kutsi ulungele kangakanani secwayiso lesilandzelako, ngobe sitawuba khona secwayiso lesilandzelako.

  • Uma usebentisa i-Cisco ISE noma i-ISE-PIC: ukuyiphi inguculo, futsi ingaba emkhatsini kwe-3.1 ne-3.5 yini? Uma kunjalo, tinguculo letilungisiwe tibalwe ngenhla, futsi lona ngumsebenti lophutfumako, hhayi lohleliwe. Kuze kube i-patch seyifakiwe, khawulela kungena kulomshini ngeluhlu lwekulawula kungena njengobe kuchazwe esecwayisweni.
  • Luhlu lwetimphahla: unaluhlu lolubhaliwe lwetinhlelo tekucinisekisa netekungena lotisebentisako, kanye netinguculo tato? Uma imphendvulo isekhanda lemuntfu munye, akusilo luhlu.
  • Umtfombo wetecwayiso: ngubani enhlanganweni yakho lobhalisele tecwayiso tekuvikela taso sonkhe sikhiciti losisebentisako? Lokubhalisa mahhala futsi kutsatsa imizuzu, futsi kungabi khona kwako kuvame kuba sizatfu sekulibala, hhayi kushoda kwemathulusi.
  • Sikhatsi kuze kufakwe i-patch: mangaki emahora noma emalanga lendlula emkhatsini kwesecwayiso lesibalulekile lesigcine kusitfola nekufakwa kwe-patch? Bhala phansi lenombolo. Leso silinganiso sakho sangempela, futsi setsembeke kakhulu kunanobe nguluphi luhlelo lolubhaliwe.
  • Ema-interface ekuphatsa: tikhonsoli tekuphatsa temishini yakho lebalulekile tingafinyelelwa kunobe ngukuphi kunethiwekhi, noma kuphela kusuka kunethiwekhi yekuphatsa lechaziwe? Kukhawulela kungena akubususi buntsatsakali, kodvwa kuguculela kuhlasela lokungaba kusuka kuyo yonkhe i-inthanethi kube kuhlasela lokudzinga kucala indzawo yekunyatsela ngekhatsi.

Siphetfo lesisebentako sincane. Buntsatsakali abusiyo ingoti lengakajwayeleki lecatsamela ibhizinisi lakho; busehlakalo lesiphindzaphindzekako longasiprakthiza. Lokwehlukanisa inhlangano lemelako nalena lemako akusiko kungabi khona kweliphutsa, kodvwa ngemahora lendlulako emkhatsini kwekushicilelwa kwekulungisa nekufakwa kwako.

Imitfombo