![\"\"](\"https:\/\/i.mwtsolutions.eu\/wp-content\/uploads\/2021\/06\/verkada.jpg\")
<\/p>\n9. b\u0159ezna 2021 byla spole\u010dnost Verkada, softwarov\u00e1 spole\u010dnost specializuj\u00edc\u00ed se na v\u00fdrobu bezpe\u010dnostn\u00edch kamer pro monitorov\u00e1n\u00ed kontroly fyzick\u00e9ho p\u0159\u00edstupu, napadena hackery.<\/p>\n
<\/p>\n
Ti z\u00edskali p\u0159\u00edstup k vide\u016fm nejm\u00e9n\u011b 15 tis\u00edc kamer rozm\u00edst\u011bn\u00fdch na r\u016fzn\u00fdch m\u00edstech a odhalili vnit\u0159n\u00ed fungov\u00e1n\u00ed nemocnic, klinik a \u00fastav\u016f pro du\u0161evn\u00ed zdrav\u00ed, bank, policejn\u00edch stanic, v\u011bznic, \u0161kol a spole\u010dnost\u00ed jako Tesla a Cloudflare.<\/p>\n
<\/p>\n
Tento incident sv\u011bd\u010d\u00ed o tom, jak moc jsme sledov\u00e1ni, a \u017ee je \u010dasto v\u011bnov\u00e1na mal\u00e1 pozornost zabezpe\u010den\u00ed platforem, kter\u00e9 se k tomu pou\u017e\u00edvaj\u00ed. Ne\u017e se v\u0161ak pust\u00edme do podrobnost\u00ed \u2013 \u00a0jak do\u0161lo k \u00fatoku na Verkadu?<\/p>\n
<\/p>\n
\u00dato\u010dn\u00edci tvrd\u00ed, \u017ee se jim poda\u0159ilo z\u00edskat p\u0159ihla\u0161ovac\u00ed \u00fadaje, kter\u00e9 byly ve\u0159ejn\u011b dostupn\u00e9 online,
\ns pr\u00e1vy superadministr\u00e1tora, co\u017e jim umo\u017enilo p\u0159\u00edstup k jak\u00e9koli kame\u0159e pat\u0159\u00edc\u00ed kter\u00e9mukoli z klient\u016f spole\u010dnosti.<\/p>\n
<\/p>\n
Nejen, \u017ee pr\u00e1va superadministr\u00e1tora poskytovala p\u0159\u00edstup k video kan\u00e1l\u016fm, ale tak\u00e9 poskytovala p\u0159\u00edstup ke ko\u0159enov\u00e9mu
\nshellu uvnit\u0159 kamer b\u011b\u017e\u00edc\u00edch u ka\u017ed\u00e9ho z\u00e1kazn\u00edka.<\/p>\n
<\/p>\n
N\u011bkter\u00e9 organizace v z\u00e1sad\u011b poskytuj\u00ed u\u017eivatel\u016fm neomezen\u00fd p\u0159\u00edstup, m\u00edsto aby u\u017eivatel\u016fm poskytovali pouze p\u0159\u00edstup, kter\u00fd opravdu pot\u0159ebuj\u00ed. Po tomto incidentu bylo zji\u0161t\u011bno, \u017ee t\u00e9m\u011b\u0159 ka\u017ed\u00fd zam\u011bstnanec Verkada m\u011bl opr\u00e1vn\u011bn\u00ed superadministr\u00e1tora.<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
Podle spole\u010dnosti z\u00edskali \u00fato\u010dn\u00edci p\u0159\u00edstup prost\u0159ednictv\u00edm serveru Jenkins, kter\u00fd pou\u017e\u00edv\u00e1 t\u00fdm podpory k prov\u00e1d\u011bn\u00ed operac\u00ed hromadn\u00e9 \u00fadr\u017eby na z\u00e1kaznick\u00fdch kamer\u00e1ch.<\/p>\n
<\/p>\n
Pokud by byl server Jenkins monitorov\u00e1n Verkadou na neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup od nezn\u00e1m\u00fdch hostitel\u016f (vn\u011b jejich s\u00edt\u011b), mohl b\u00fdt \u00fatok zastaven ji\u017e na sv\u00e9m po\u010d\u00e1tku.<\/p>\n
<\/p>\n
Monitorovat v\u0161echny servery, u\u017eivatele a koncov\u00e1 za\u0159\u00edzen\u00ed p\u0159ipojen\u00e1 k va\u0161\u00ed s\u00edti. To je dal\u0161\u00ed \u010d\u00e1st Zero Trust principu.<\/p>\n
<\/p>\n
Hacke\u0159i uvedli, \u017ee se jim poda\u0159ilo z\u00edskat root p\u0159\u00edstup ke kamer\u00e1m. Z\u00edsk\u00e1n\u00ed t\u00e9to \u00farovn\u011b p\u0159\u00edstupu nevy\u017eadovalo dal\u0161\u00ed hackov\u00e1n\u00ed, \u00fato\u010dn\u00edci byli schopni vyu\u017e\u00edt ka\u017edou vestav\u011bnou nebo p\u0159edinstalovanou funkci kamer, p\u0159\u00edpadn\u011b spou\u0161t\u011bt vlastn\u00ed scripty.<\/p>\n
<\/p>\n
Jde o rostouc\u00ed trend kybernetick\u00fdch \u00fatok\u016f, kdy \u00fato\u010dn\u00edci vyu\u017e\u00edvaj\u00ed p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku a dal\u0161\u00edch sou\u010d\u00e1st\u00ed opera\u010dn\u00edho syst\u00e9mu. Mohou tak spojit sv\u00e9 \u0161kodliv\u00e9 akce se skute\u010dn\u00fdmi, autorizovan\u00fdmi procesy.<\/p>\n
<\/p>\n
Monitorov\u00e1n\u00ed \u010d\u00e1st\u00ed opera\u010dn\u00edho syst\u00e9mu (jako jsou zm\u011bny kl\u00ed\u010d\u016f registru, aktivity p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku a zm\u011bn politik), kter\u00e9 p\u016fvodn\u011b nemohl nikdo krom\u011b administr\u00e1tor\u016f upravit, je z\u00e1sadn\u00ed pro detekci p\u0159\u00edtomnosti \u00fato\u010dn\u00edk\u016f ve va\u0161\u00ed s\u00edti.<\/p>\n
<\/p>\n
Abychom to shrnuli – ve spole\u010dnosti Verkada nedok\u00e1zali \u0159e\u0161it t\u0159i d\u016fle\u017eit\u00e9 z\u00e1sady pro zabezpe\u010den\u00ed IAM.<\/p>\n
<\/p>\n
Verkada nem\u011bla \u017e\u00e1dn\u00e9 \u0159e\u0161en\u00ed end-to-end spr\u00e1vy a monitorov\u00e1n\u00ed IAM. I p\u0159es to, \u017ee jej m\u00e1 ka\u017ed\u00e1 spole\u010dnost na dosah ruky.<\/p>\n
<\/p>\n
Pod\u00edvejte se na na\u0161e integrovan\u00e9 \u0159e\u0161en\u00ed IAM \u2013 ManageEngine AD360, postaven\u00e9 tak, aby spl\u0148ovalo po\u017eadavky IAM a kybernetick\u00e9 bezpe\u010dnosti dne\u0161n\u00edho IT sv\u011bta. Vylep\u0161ete sv\u00e9 IAM, ne\u017e bude p\u0159\u00edli\u0161 pozd\u011b!<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
9. b\u0159ezna 2021 byla spole\u010dnost Verkada, softwarov\u00e1 spole\u010dnost specializuj\u00edc\u00ed se na v\u00fdrobu bezpe\u010dnostn\u00edch kamer pro monitorov\u00e1n\u00ed kontroly fyzick\u00e9ho p\u0159\u00edstupu, napadena hackery. Ti z\u00edskali p\u0159\u00edstup k vide\u016fm nejm\u00e9n\u011b 15 tis\u00edc kamer rozm\u00edst\u011bn\u00fdch na r\u016fzn\u00fdch m\u00edstech a odhalili vnit\u0159n\u00ed fungov\u00e1n\u00ed nemocnic, klinik a \u00fastav\u016f pro du\u0161evn\u00ed zdrav\u00ed, bank, policejn\u00edch stanic, v\u011bznic, \u0161kol a spole\u010dnost\u00ed jako Tesla […]<\/p>\n","protected":false},"author":20,"featured_media":73667,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_links_to":"","_links_to_target":""},"categories":[274,289],"tags":[365,394],"acf":[],"aioseo_notices":[],"yoast_head":"\n