Jya mu nzira nyamukuru Jya ku bintu nyamukuru Simbuka kurupapuro

 

Ibitwerekeyeho

Intego y'Ikigo cy'Igihugu Gishinzwe Umutekano mu by'Ikoranabuhanga (NCSA) ni ukubaka ubumenyi n'ubushobozi bukenewe kugira ngo ikoranabuhanga ry'u Rwanda rikomeze iterambere ry'ubukungu n'imibereho myiza. By'umwihariko, NCSA igenzura ibi bikurikira:

Kurinda ikoranabuhanga no guhangana n’ibitero

Kurinda ikoranabuhanga isaha ku yindi (24/7), gukurikirana ibyago bishobora kubaho no gusubiza ibitero by’ikoranabuhanga.

Gushyiraho amabwiriza n’ingamba z’umutekano w’ikoranabuhanga

Gushyiraho amabwiriza n’ingamba zerekeye umutekano w’ibijyanye n’ikoranabuhanga kugira ngo habeho ubushobozi bwo guhangana n’ibitero by’ikoranabuhanga.

 

Kurinda amakuru bwite n’imibereho bwite by’umuntu

Gushyira mu bikorwa Itegeko ryerekeye kurinda amakuru bwite n’imibereho bwite by’umuntu

Guhuriza hamwe ibikorwa by’umutekano w’ikoranabuhanga

 Dukorana n’abafatanyabikorwa kugira ngo habeho urubuga rw’ikoranabuhanga rutekanye

Amakuru n’ibigezweho ku mutekano w’ibijyanye n’ikoranabuhanga

Security Alert: WordPress Security Update - October 2026

Wordfence has released security updates for WordPress Core, plugins, and themes to address multiple vulnerabilities, including the high‑severity CVE-2026-119977 in WordPress Core, which enables attackers to run arbitrary code on servers without authentication.

Affected Systems:

The affected systems and versions include, but are not limited to:

  • WordPress Core: versions prior to 7.1.4

  • WordPress Plugins: 

    • addon elements for Elementor page builder: versions prior to 1.14.5

    • WP Directory Kit: versions prior to 1.6.1

  • WordPress Theme :

    • Avada Website Builder For WordPress & WooCommerce: versions prior to 7.16.4

Security Risks

Exploitation of these vulnerabilities can enable arbitrary code execution, privilege escalation, or script injection, resulting in site compromise, data exposure, and operational disruption.

 

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

  • Update as soon as possible to the latest supported versions of all affected WordPress components to address known vulnerabilities and reduce the risk of exploitation.

   The WordPress components versions available for upgrade include, but are not limited to:

  • WordPress Core: Upgrade to version 7.1.4 or above

  • Wordpress Plugins:

  • Wordpress Theme:

    • Avada Website Builder For WordPress & WooCommerce: Upgrade to version 7.16.4 or above

  • Before updating or patching, please ensure that you have the latest backup that can easily be restored. 

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.

References

Amakuru yihutirwa ku mutekano w’ikoranabuhanga

Security Alert: WordPress Security Update - October 2026

Wordfence has released security updates for WordPress Core, plugins, and themes to address multiple vulnerabilities, including the high‑severity CVE-2026-119977 in WordPress Core, which enables attackers to run arbitrary code on servers without authentication.

Affected Systems:

The affected systems and versions include, but are not limited to:

  • WordPress Core: versions prior to 7.1.4

  • WordPress Plugins: 

    • addon elements for Elementor page builder: versions prior to 1.14.5

    • WP Directory Kit: versions prior to 1.6.1

  • WordPress Theme :

    • Avada Website Builder For WordPress & WooCommerce: versions prior to 7.16.4

Security Risks

Exploitation of these vulnerabilities can enable arbitrary code execution, privilege escalation, or script injection, resulting in site compromise, data exposure, and operational disruption.

 

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

  • Update as soon as possible to the latest supported versions of all affected WordPress components to address known vulnerabilities and reduce the risk of exploitation.

   The WordPress components versions available for upgrade include, but are not limited to:

  • WordPress Core: Upgrade to version 7.1.4 or above

  • Wordpress Plugins:

  • Wordpress Theme:

    • Avada Website Builder For WordPress & WooCommerce: Upgrade to version 7.16.4 or above

  • Before updating or patching, please ensure that you have the latest backup that can easily be restored. 

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.

References

Ahari inyandiko

Itegeko ryerekeye kurinda amakuru bwite n’imibereho bwite by’umuntu
Amabwiriza ku mutekano w’ikoranabuhanga
Ingamba z’Igihugu ku Mutekano w’Ikoranabuhanga 2024-2029
Amabwiriza kuri Porogaramu z’Ikoranabuhanga

Ibice by’ingenzi twibandaho

Gusubiza ibitero by’ikoranabuhanga isaha ku yindi (24/7)

Mu rwego rwo gukumira ibitero by’ikoranabuhanga, NCSA ibinyujije muri Rw-CSIRT itanga ubufasha bwo guhangana na byo amasaha 24/7 kugira ngo ibashe kugenzura ibyo bibazo, kugabanya ingaruka zabyo no gukura amasomo azafasha mu gukumira ibisa na byo mu bihe bizaza.

Ubukangurambaga ku rwego rw’Igihugu ku mutekano w’ikoranabuhanga no kurinda amakuru bwite.

Dutanga inyandiko, tukanakora ubukangurambaga mu bigo twigisha abaturage uburyo bwiza bwo kwirinda no kwibungabunga umutekano wabo kuri murandasi.

Kurinda ibikorwaremezo by’Ingenzi by’ikoranabuhanga

NCSA ikurikirana kandi ikarinda ibikorwa remezo by’ingenzi by’ikoranabuhanga mu nzego z’Igihugu

Gukurikirana no gusesengura ibyago bifitanye isano n’ikoranabuhanga

NCSA ibinyujije muri Rw-CSIRT ikurikirana ibyago by’ikoranabuhanga amasaha 24/7 ndetse ikora n’ubushakashatsi kugira ngo ikomeze gukurikira ibigezweho mu mutekano w’ikoranabuhanga.

Politiki n’amabwiriza

Gushyiraho no gushyira mu bikorwa politiki zigamije gukomeza urwego rw’igihugu rw’umutekano w’ikoranabuhanga.

Ubufatanye mpuzamahanga

Gufatanya n’abafatanyabikorwa mpuzamahanga mu kurwanya ibyaha by’ikoranabuhanga byambukiranya imipaka

Abafatanyabikorwa