Key Takeaways
- Daim ntawv tshaj tawm tsis ntev los no los ntawm cybersecurity tuam txhab McAfee pom tias video hu software tuaj yeem raug nyiag los rau neeg soj xyuas.
- Kev sib tham apps xws li eHarmony thiab Ntau Ntses tau nyob ntawm cov uas pom tias muaj kev cuam tshuam rau kev nyiag.
- Tus naj npawb ntawm cov neeg siv lub rooj sib tham hauv video tau nce ntau, nrog ntau tus neeg raug yuam ua haujlwm hauv tsev thaum muaj tus kabmob coronavirus.
Koj qhov kev hu video yuav tsis muaj kev nyab xeeb li koj xav, raws li kev tshawb fawb tshiab.
Cybersecurity ruaj McAfee tau tshaj tawm tsab ntawv tshaj tawm qhia txog qhov tsis zoo tshiab hauv cov khoom siv video hu xov tooj software (SDK). Hackers tuaj yeem siv qhov tsis zoo no los soj ntsuam cov neeg siv cov video nyob thiab hu xov tooj. Kev sib tham apps xws li eHarmony thiab Ntau Ntses yog cov uas tau txheeb pom tias yog siv lub platform SDK yooj yim.
"Txawm hais tias koj tab tom tuaj koom cov rooj sib tham ua haujlwm virtual tsis tu ncua lossis ntsib nrog cov tsev neeg txuas ntxiv thoob plaws ntiaj teb, raws li cov neeg siv khoom, nws tseem ceeb kom paub tias koj tau txais dab tsi tiag tiag thaum rub tawm cov ntawv thov uas pab koj txuas nrog, " Steve Povolny, tus thawj coj ntawm McAfee Advanced Threat Research tau hais hauv kev xam phaj email.
"Raws li ceev, dav siv cov cuab yeej sib tham video thiab cov apps tshwm sim, cov kev hem thawj rau kev nyab xeeb hauv online yuav tshwm sim tsis tau."
Ntau yam hem rau kev sib tham video
Lub SDK, muab los ntawm lub tuam txhab software Agora.io, tuaj yeem siv los ntawm cov ntawv thov rau kev sib txuas lus suab thiab video thoob plaws ntau lub platform, xws li mobile thiab web. Nws tsis paub tias muaj pes tsawg lwm cov apps tuaj yeem cuam tshuam, Povolny tau hais.
Txij li thaum McAfee nrhiav pom qhov teeb meem kev nyab xeeb no, Agora tau hloov kho nws SDK los muab kev nkag mus. Tab sis cov kws tshaj lij hais tias ntau hom kev sib txuas lus video tseem muaj kev cuam tshuam rau kev nyiag.
Txhua yam txuas nrog Is Taws Nem tuaj yeem raug nyiag, taw qhia Joseph Carson, tus kws tshawb fawb txog kev nyab xeeb ntawm cybersecurity firm Thycotic, hauv kev xam phaj email.
"Txhua yam khoom siv uas muaj lub koob yees duab tuaj yeem raug tsim txom los kaw cov yeeb yaj kiab, tshuaj xyuas cov ntaub ntawv, thiab ua lub suab lossis lub ntsej muag lees paub," nws ntxiv.
"Nyob rau hauv ntau qhov xwm txheej, cov neeg muag khoom uas tsim lawv tsis muab lub peev xwm los tua lawv, uas txhais tau hais tias lawv tsom ntsoov rau kev yooj yim ntawm kev siv thiab yuav luag ib txwm txi kev ruaj ntseg raws li qhov tshwm sim."
Tus naj npawb ntawm cov neeg siv cov kev sib tham hauv video tau nce zuj zus, nrog ntau tus neeg raug yuam ua haujlwm hauv tsev thaum lub sijhawm muaj tus kabmob coronavirus, Hank Schless, tus thawj coj loj ntawm kev daws teebmeem kev nyab xeeb ntawm cybersecurity firm Lookout, tau hais hauv kev xam phaj email.
"Cov neeg ua phem phem paub tias muaj ntau tus neeg siv tshiab uas tsis paub txog cov apps uas lawv tuaj yeem siv tau," nws hais ntxiv. "Nyob rau hauv hom phiaj xwm no, lawv feem ntau siv ob qho tib si phem URLs thiab cov ntawv cuav txuas ntxiv coj cov hom phiaj rau nplooj ntawv phishing."
Insider Attacks is the biggest hem
Kev hu xov tooj yog qhov yooj yim tshaj plaws thaum hu xov tooj raug kaw thiab khaws cia rau ntawm tus neeg thib peb server lossis ntawm tus neeg muab kev pabcuam app, Hang Dinh, tus xibfwb ntawm khoos phis tawj thiab cov ntaub ntawv tshawb fawb ntawm Indiana University South Bend, tau hais hauv email interview.
Piv txwv li, kev hu xov tooj hauv Facebook Messenger tau khaws cia hauv Facebook cov servers thiab tuaj yeem pom los ntawm Facebook cov neeg ua haujlwm.
"Yog tias ib tus ntawm lawv cov neeg ua haujlwm tsis ceev faj txog kev nyab xeeb, koj hu tuaj yeem raug nyiag," Dinh ntxiv. "Nco ntsoov tias Twitter tseem raug nyiag vim yog tus neeg sab hauv qhov txhaum."
Txhawm rau ua kom lawv cov kev sib txuas lus muaj kev nyab xeeb dua, cov neeg siv yuav tsum xaiv qhov kawg-rau-kawg encrypted video hu xws li WhatsApp, Google Duo, FaceTime, thiab ExtentWorld, Dinh hais.
"Ua qhov kawg-rau-kawg encrypted txhais tau hais tias kev hu tsis tau muab khaws cia thiab decrypted ntawm lwm tus neeg rau zaub mov, suav nrog tus neeg muab kev pabcuam hu rau cov servers," nws ntxiv.
Nrov video sablaj software Zoom kuj tsis ntev los no tau pib muab qhov kawg-rau-kawg encrypted video hu. Tseem, qhov encryption feature ntawm Zoom tsis qhib los ntawm lub neej ntawd, Dinh sau tseg.
Rau cov neeg feem coob, qhov kev pheej hmoo tseem ceeb tshaj plaws rau kev nyiag nkas vis dis aus yog eavesdropping, Chris Morales, tus thawj coj saib xyuas kev nyab xeeb ntawm cybersecurity tuam txhab Vectra AI, tau hais hauv kev xam phaj email.
"Lwm qhov kev pheej hmoo yog kev cuam tshuam ntawm kev sib tham nrog cov duab sib koom thiab suab," nws hais. "Xav txog nws zoo li digital graffiti."
Txhawm rau tiv thaiv hackers, cov neeg siv yuav tsum muaj tus password rau txhua lub rooj sib tham video, Morales tau hais.
Tus password yuav tsum tsis txhob muab tso tawm rau pej xeem thiab yuav tsum tau muab faib ua tus kheej. Tus neeg saib xyuas kuj tuaj yeem, los ntawm lub neej ntawd, pab kom tsis txhob hais lus rau txhua tus neeg koom thiab lov tes taw kev tshuaj ntsuam sib qhia. "Tus password ntawd muaj zog npaum li cas tseem yuav cuam tshuam lub peev xwm rau ib tus neeg nkag mus rau qhov kev sib tham tam sim no," nws hais ntxiv. "Tab sis nws zoo dua tsis muaj lo lus zais txhua."
