PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches (새 창 · 바깥 사이트)
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be…
EN The Hacker News · 보안 · 2026.10.15 - MS 10월 보안 위협에 따른 정기 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.15
- Cisco 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.15
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles (새 창 · 바깥 사이트)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
EN Dark Reading · 보안 · 2026.10.15 - Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (새 창 · 바깥 사이트)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
EN Dark Reading · 보안 · 2026.10.15 - Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability (새 창 · 바깥 사이트)
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it su…
EN The Hacker News · 보안 · 2026.10.15 - Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App (새 창 · 바깥 사이트)
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes a…
EN The Hacker News · 보안 · 2026.10.15 - CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts (새 창 · 바깥 사이트)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.…
EN The Hacker News · 보안 · 2026.10.14 - CISA Adds Four Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerab…
EN CISA Advisories · 보안 · 2026.10.14 - Ivanti 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
- GitLab 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
- Microsoft Patches More Than 1,400 Security Flaws (새 창 · 바깥 사이트)
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmo…
EN Krebs on Security · 보안 · 2026.10.14 - Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday (새 창 · 바깥 사이트)
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
EN Dark Reading · 보안 · 2026.10.14 - October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) (새 창 · 바깥 사이트)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited.
EN SANS ISC · 보안 · 2026.10.14 - CISA Adds Two Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnera…
EN CISA Advisories · 보안 · 2026.10.13 - Swann Communications SWIFI-SE2KIC (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware CVSS Vendor Equipment v3 6.2 Swann Communic…
EN CISA Advisories · 보안 · 2026.10.13 - CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure (새 창 · 바깥 사이트)
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935 , affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypas…
EN CISA Advisories · 보안 · 2026.10.13 - Inductive Automation Ignition Software (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0| Ignition >=8.3.0| CVSS Vend…
EN CISA Advisories · 보안 · 2026.10.13 - SonicWall 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.13
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack (새 창 · 바깥 사이트)
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
EN Dark Reading · 보안 · 2026.10.13 - Citrix 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.12
- 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt (새 창 · 바깥 사이트)
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
EN Dark Reading · 보안 · 2026.10.09 - Satel Netco Design (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. The following versions…
EN CISA Advisories · 보안 · 2026.10.08 - Grid Protection Alliance openPDC and openHistorian (새 창 · 바깥 사이트)
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC openPDC (Docker image) openHistorian CVSS Vendor Equipment v3 9.8 Grid Protection Alliance openPDC 5 Vulnerabilities Deserialization of Untrusted Data, Missing Aut…
EN CISA Advisories · 보안 · 2026.10.08 - Red Lion Controls N-Tron 700 Series (Update A) (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to r…
EN CISA Advisories · 보안 · 2026.10.08 - Savannah lwIP SMTP client (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) CVSS Vendo…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy SOI (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and avail…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy Asset Suite (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the prod…
EN CISA Advisories · 보안 · 2026.10.06 - Johnson Controls EasyIO FG (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmware CVSS Vendor Equipment v3 7.7 Johnson Controls EasyIO FG…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy REB500 (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immedi…
EN CISA Advisories · 보안 · 2026.10.06
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)