기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- Sceye Flies Floating Cell Tower to Japan to Set Up Test 4G Network (새 창 · 바깥 사이트)
Providing wireless connectivity from the sky has been the dream of a number of commercial ventures like the shuttered Google Project Loon . Now, Japanese telecom giant SoftBank has moved a step closer to selling phone service from the sky. In a partnership with an American aerosp…
EN IEEE Spectrum Telecom · 통신 · 네트워크 · 2026.10.15 - Is AI pentesting as good as a human pentester? (새 창 · 바깥 사이트)
AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment, and understanding business context. Intruder compares the strengths and weaknesses of both approaches and explains where AI agents can improve security…
EN BleepingComputer · 보안 · 2026.10.15 - Deploy with Void (새 창 · 바깥 사이트)
Introducing Void: an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare.
EN Cloudflare Blog · 기술 일반 · 2026.10.15 - Microsoft: Windows Server 2022 reached end of mainstream support (새 창 · 바깥 사이트)
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
EN BleepingComputer · 보안 · 2026.10.15 - Cloudflare and OpenAI: Making AI discovery better for everyone (새 창 · 바깥 사이트)
How Cloudflare and OpenAI are working together to help AI find useful content, keep up with changes, and make fewer wasted requests — making the experience better for users and website owners alike.
EN Cloudflare Blog · 기술 일반 · 2026.10.15 - TP-Link pledges $1B US investment amid mounting government resistance (새 창 · 바깥 사이트)
TP-Link's effort to obtain an FCC waiver for a pair of Wi-Fi 8 routers is being stymied by a handful of state-led lawsuits and static from 21 state AGs over cybersecurity concerns and the supplier's purported links to China.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks (새 창 · 바깥 사이트)
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and eac…
EN The Hacker News · 보안 · 2026.10.15 - Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing (새 창 · 바깥 사이트)
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open…
EN The Hacker News · 보안 · 2026.10.15 - Drupal Patches Critical Field UI Flaw With Unauthenticated RCE Path via Contributed Modules (새 창 · 바깥 사이트)
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19. An attacker cannot reach the flaw through core alone, the Drupal Security Team said in it…
EN The Hacker News · 보안 · 2026.10.15 - CISA Malcolm (새 창 · 바깥 사이트)
View CSAF Summary The following versions of CISA Malcolm are affected: Malcolm Malcolm CVSS Vendor Equipment v3 8.1 CISA Malcolm 6 Vulnerabilities Authentication Bypass by Spoofing, Incorrect Authorization, Server-Side Request Forgery (SSRF), Authentication Bypass Using an Altern…
EN CISA Advisories · 보안 · 2026.10.15 - CISA Adds One Known Exploited Vulnerability to Catalog (새 창 · 바깥 사이트)
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-21589 Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability This type of vulnerability is a frequ…
EN CISA Advisories · 보안 · 2026.10.15 - Eclipse Foundation Eclipse Milo (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Ecli…
EN CISA Advisories · 보안 · 2026.10.15 - Guangzhou Juan IoT Technology EseeCloud (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App EseeCloud Firmware CVSS Vendor Equipment v3 9.8 Guang…
EN CISA Advisories · 보안 · 2026.10.15 - J4Care dcm4che (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following versi…
EN CISA Advisories · 보안 · 2026.10.15 - Thermo Fisher Torrent Suite Software (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software CVSS Vendor Equipment v3 6.5 Thermo Fisher To…
EN CISA Advisories · 보안 · 2026.10.15 - Police arrests 95 suspects in international CSAM crackdown action (새 창 · 바깥 사이트)
Law enforcement authorities from 17 countries in Latin America and Europe have arrested 95 suspects in an INTERPOL-coordinated operation targeting the distribution of child sexual abuse material (CSAM) through online messaging groups. [...]
EN BleepingComputer · 보안 · 2026.10.15 - Eurobites: Vodafone onboards Three customers at Gatwick Airport (새 창 · 바깥 사이트)
Also in today's EMEA regional roundup: Ericsson's confusing Q3; Colt combines with Equinix; European SMEs put their faith in AI.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - Earnings beat, costs bite, growth AWOL – another day in telecoms, as Ericsson retools in flat market (새 창 · 바깥 사이트)
Ericsson beat Q3 earnings forecasts on seven percent organic sales growth, but warned AI-driven component costs will pressure margins through 2027, and said growth remains hard to come by –…
EN RCR Wireless · 통신 · 네트워크 · 2026.10.15 - Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early (새 창 · 바깥 사이트)
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure o…
EN The Hacker News · 보안 · 2026.10.15 - Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation (새 창 · 바깥 사이트)
Palo Alto Networks on Wednesday issued security updates for a high-severity flaw in PAN-OS software that has come under active exploitation. The vulnerability, tracked as CVE-2026-0322 (CVSS score: 8.6), is a case of remote code execution in the management interface. "A remote co…
EN The Hacker News · 보안 · 2026.10.15 - Why AI Confidence Is Not Validation (새 창 · 바깥 사이트)
AI is already part of digital forensics and incident response work, with or without a policy in place to govern it. The issue is that these tools are growing more confident in their own output faster than practitioners are developing reliable ways to verify it. Without governance…
EN The Hacker News · 보안 · 2026.10.15 - India Mandates Registered Caller Name Display on 4G and Newer Networks From November 1 (새 창 · 바깥 사이트)
The Indian government has directed telecom service providers (TSPs) in the country to mandatorily display callers' registered names along with their numbers for incoming calls starting November 1, 2026, in an effort to help people identify calls from unknown numbers and tackle sp…
EN The Hacker News · 보안 · 2026.10.15 - Compact Analog Signal Generators for Fast RF Testing (새 창 · 바깥 사이트)
This White Paper shows RF and microwave engineers and technicians how compact analog signal generators support core amplifier and receiver test tasks, from gain and distortion measurements to blocker rejection, power calibration, and local oscillator substitution. What you will l…
EN IEEE Spectrum Telecom · 통신 · 네트워크 · 2026.10.15 - Microsoft fixes bug causing Windows black screens, Explorer crashes (새 창 · 바깥 사이트)
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
EN BleepingComputer · 보안 · 2026.10.15 - GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories (새 창 · 바깥 사이트)
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of abou…
EN The Hacker News · 보안 · 2026.10.15 - Nokia faces difficulty of selling unwanted businesses (새 창 · 바깥 사이트)
Nokia has found buyers for FWA and private network assets, but its site implementation and microwave units are still mired in uncertainty.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - Cloud sovereignty comes with trade-offs – Swisscom CEO (새 창 · 바깥 사이트)
While there are areas in which telcos need to focus on sovereignty, we should be selective with its implementation, Swisscom's CEO Christoph Aeschilmann said during Network X.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts (새 창 · 바깥 사이트)
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent com…
EN The Hacker News · 보안 · 2026.10.15 - EU Grocers Pay a Steep Price for Unpatched Fridge Firmware (새 창 · 바깥 사이트)
Hundreds of stores lost millions of euros because they hired third parties to manage the outdated OT firmware running their cooling systems.
EN Dark Reading · 보안 · 2026.10.15 - 6G's monetization puzzle: From sensing to physical AI (새 창 · 바깥 사이트)
The recent 6G Forum tackled the thorny problem of how to monetize future 6G investments. There are plenty of ideas, but still plenty of uncertainty about what might be the winning use cases.
EN Light Reading · 통신 · 네트워크 · 2026.10.15
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)