Possible Increase of Intrusion Attempts on Sri Lankan Websites

19 April 2022 [NO.TCSA : 20220419-1-1-P]

PUBLISHED:
19 April 2022

Possible Intrusion Attempts on Sri Lankan Websites

TechCERT observed that hacktivists are staging intrusions on some Sri Lankan websites, in parallel to the ongoing protests. As a result, an increased number of website intrusions may be reported in the coming days.

TechCERT recommends the following, if you manage a website or a website hosting platform:

  • Update the website’s core, plugins, and underlying hosting platforms with all security upgrades.
  • Use industry best practices and guidelines to harden websites and hosting platforms.
  • Make sure security-enhancing mechanisms such as WAF/IPS/IDS are configured and armored.
  • Continuously monitor websites and hosting environments for security anomalies.
  • To proactively detect cyber risks, pay more attention to any reported security alerts/anomalies in a timely manner.

TechCERT strongly recommends all users to stay vigilant. More information will be shared when it becomes available.

16 April 2024 [NO.TCSA : 20240416-1-1-P]

Critical Command Injection Vulnerability Found in Palo Alto Networks GlobalProtect

READ MORE READ MORE
9 February 2024 [NO.TCSA : 20240209-1-1-P]

Critical Remote Code Execution Vulnerability Found in FortiOS SSL VPN

READ MORE READ MORE
13 July 2023 [NO.TCSA : 20230713-1-1-P]

Fortinet Patches Critical Remote Code Execution Vulnerability in FortiOS/FortiProxy

READ MORE READ MORE
Read More BACK TO THREAT BULLETIN