PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- Fake Arch Linux AUR packages exploit typos to run malware with root privileges (새 창 · 바깥 사이트)
Arch Linux users who mistyped yay or paru while installing the package helpers from the Arch User Repository (AUR) may have given a stranger root access to their machine. AUR is a popular community package source for Arch Linux and related distributions, hosting user-submitted bu…
EN Help Net Security · 보안 · 2026.10.16 - Android adds AI-powered scam alerts, hangs up on bank impostors (새 창 · 바깥 사이트)
Google’s new scam protections cover Google Messages and third-party messaging apps, with an enhanced protection mode, expanded scam alerts and safeguards against call-forwarding and screen-sharing scams. “With scams growing harder to spot, it’s nearly impossible for users t…
EN Help Net Security · 보안 · 2026.10.16 - Microsoft: October Windows update may break Smart App Control (새 창 · 바깥 사이트)
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update. [...]
EN BleepingComputer · 보안 · 2026.10.16 - BAE Systems cyberattack disrupts US federal court operations (새 창 · 바깥 사이트)
The Administrative Office of the US Courts says a cyberattack on government contractor BAE Systems has taken down the notice system used by federal bankruptcy courts. [...]
EN BleepingComputer · 보안 · 2026.10.16 - China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers (새 창 · 바깥 사이트)
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score…
EN The Hacker News · 보안 · 2026.10.16 - CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing (새 창 · 바깥 사이트)
AI agents being tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material, CERT-In said in an advisory on October 15. The agents went beyond their assigned tasks, and none of the organizations detec…
EN The Hacker News · 보안 · 2026.10.16 - BeyondTrust patches zero-day exploited in attacks since August (새 창 · 바깥 사이트)
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
EN BleepingComputer · 보안 · 2026.10.16 - Why Active Directory weaknesses stay open for years in teams with one or two admins (새 창 · 바깥 사이트)
David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a cohort works, with weekly sessions, homework and measure…
EN Help Net Security · 보안 · 2026.10.16 - The cyber talent shortage? Job postings just hit a four-year low (새 창 · 바깥 사이트)
US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job data provider JobSpikr, removed dup…
EN Help Net Security · 보안 · 2026.10.16 - Stolen AI API keys are paying for hackers’ autonomous scans (새 창 · 바깥 사이트)
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the key’s owner pays for the scans. Bitsight’s threat intelligence team tracked the shift across thousands of posts on 16 underground…
EN Help Net Security · 보안 · 2026.10.16 - PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions (새 창 · 바깥 사이트)
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw…
EN The Hacker News · 보안 · 2026.10.16 - DDoS attacks can knock services offline before links reach capacity (새 창 · 바깥 사이트)
More than 9.1 million DDoS attacks were recorded globally between January and June 2026, an increase of nearly a quarter year over year, according to Netscout’s DDoS Threat Intelligence Report. Large attacks and distributed targeting strain defenses Attacks exceeding 1 Tbps or…
EN Help Net Security · 보안 · 2026.10.16 - New infosec products of the week: October 16, 2026 (새 창 · 바깥 사이트)
Here’s a look at the most interesting products from the past week, featuring releases from NinjaOne, Qualys, Scytale, and SolarWinds. NinjaOne combines Katana AI and MCP server to accelerate IT problem resolution NinjaOne has announced Katana AI, an agentic AI technician that s…
EN Help Net Security · 보안 · 2026.10.16 - Fastfetch 2.70.0 changes how Disk free space is reported (새 창 · 바깥 사이트)
Fastfetch is a system information tool written mainly in C that runs on Linux, macOS, Windows 8.1 and later, Android and several BSDs. The fastfetch project removed QuickJS scripting and changed what its Disk, Command and Shell modules report in version 2.70.0, released October 1…
EN Help Net Security · 보안 · 2026.10.16 - ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.16
- Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) (새 창 · 바깥 사이트)
I believe the cybersecurity industry may be approaching AI security the wrong way.
EN SANS ISC · 보안 · 2026.10.16 - Palo Alto Networks 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.16
- 코인 탈취를 위한 악성URL 유포에 따른 스미싱 주의 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.16
- Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) (새 창 · 바깥 사이트)
[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
EN SANS ISC · 보안 · 2026.10.16 - SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape (새 창 · 바깥 사이트)
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
EN Dark Reading · 보안 · 2026.10.16 - F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud (새 창 · 바깥 사이트)
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
EN Dark Reading · 보안 · 2026.10.16 - AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too (새 창 · 바깥 사이트)
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
EN Dark Reading · 보안 · 2026.10.16 - Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers (새 창 · 바깥 사이트)
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud. [...]
EN BleepingComputer · 보안 · 2026.10.16 - Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory (새 창 · 바깥 사이트)
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and…
EN The Hacker News · 보안 · 2026.10.16 - Android gets AI defenses against messaging scams, fake calls (새 창 · 바깥 사이트)
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
EN BleepingComputer · 보안 · 2026.10.16 - ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More (새 창 · 바깥 사이트)
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A truste…
EN The Hacker News · 보안 · 2026.10.16 - Hackers hijack D-Link, Ubiquiti devices to resell your stolen bandwidth (새 창 · 바깥 사이트)
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
EN BleepingComputer · 보안 · 2026.10.16 - Fake Arch Linux packages push malware with root privileges (새 창 · 바깥 사이트)
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
EN BleepingComputer · 보안 · 2026.10.16 - Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads (새 창 · 바깥 사이트)
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday. The hidden attack code ran the momen…
EN The Hacker News · 보안 · 2026.10.16 - Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks (새 창 · 바깥 사이트)
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that mak…
EN The Hacker News · 보안 · 2026.10.16
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)