Possible Increase of Intrusion Attempts on Sri Lankan Websites

19 April 2022 [NO.TCSA : 20220419-1-1-P]

PUBLISHED:
19 April 2022

Possible Intrusion Attempts on Sri Lankan Websites

TechCERT observed that hacktivists are staging intrusions on some Sri Lankan websites, in parallel to the ongoing protests. As a result, an increased number of website intrusions may be reported in the coming days.

TechCERT recommends the following, if you manage a website or a website hosting platform:

  • Update the website’s core, plugins, and underlying hosting platforms with all security upgrades.
  • Use industry best practices and guidelines to harden websites and hosting platforms.
  • Make sure security-enhancing mechanisms such as WAF/IPS/IDS are configured and armored.
  • Continuously monitor websites and hosting environments for security anomalies.
  • To proactively detect cyber risks, pay more attention to any reported security alerts/anomalies in a timely manner.

TechCERT strongly recommends all users to stay vigilant. More information will be shared when it becomes available.

9 March 2023 [NO.TCSA : 20230309-1-1-P]

A Critical Code Execution Flaw Found in FortiOS and FortiProxy Administrative Interfaces

READ MORE READ MORE
20 February 2023 [NO.TCSA : 20230220-1-1-P]

Fortinet fixes critical RCE flaws in FortiNAC and FortiWeb

READ MORE READ MORE
16 January 2023 [NO.TCSA : 20230116-1-1-P]

Cacti Crisis: Severe Vulnerability Exploited in the Wild

READ MORE READ MORE
Read More BACK TO THREAT BULLETIN