A website ending in gov.vn has an advertising link attached. (Source: Tin Tuc Newspaper) |
According to the review results of the National Cyber Security Monitoring Center (NCSC) under the Department of Information Security (Ministry of Information and Communications) in September 2023, 18 provinces, cities and 10 ministries and branches still have 67 government agency websites with the domain name ".gov.vn" being exploited to insert inappropriate advertising content. Many websites are exploited to install, post, redirect or link to inappropriate advertising content such as card games, gambling, etc.
These files appear in Google search results and redirect users to other websites when they access the link. This becomes dangerous if the website is exploited to post and disseminate bad and toxic content, distorting the sovereignty, policies of the Party and policies and laws of the State.
Currently, 10 ministries and sectors whose websites are still being exploited to insert inappropriate advertising content include the Ministry of Industry and Trade; Ministry of Education and Training; Ministry of Transport; Ministry of Science and Technology; Ministry of Labor, War Invalids and Social Affairs; Ministry of Home Affairs; Ministry of Agriculture and Rural Development; Ministry of Health; Ministry of Culture, Sports and Tourism and the Supreme People's Procuracy.
18 provinces and cities include: Ha Tinh, Tuyen Quang, Da Nang, Dien Bien, Dong Nai, Hanoi, Hai Duong, Hai Phong, Ho Chi Minh City, Kon Tum, Lai Chau, Phu Tho, Quang Binh, Quang Nam, Quang Ninh, Quang Tri, Thai Binh and Thanh Hoa.
NCSC's technical system has recorded 57,916 weaknesses and information security vulnerabilities in the information systems of state agencies and organizations. The number of weaknesses and vulnerabilities mentioned above is very large.
Faced with the above situation, NCSC warns of information insecurity in the systems of state agencies. At the same time, technology experts recommend that, in addition to handling the inserted content, units need to investigate and find the path of hackers entering the system, thereby detecting vulnerabilities and patching all of these vulnerabilities. Note that it is necessary to review and handle vulnerabilities in both website software and server operating systems to ensure information security for the system.
Source
Comment (0)