PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App (새 창 · 바깥 사이트)
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes a…
EN The Hacker News · 보안 · 2026.10.15 - Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages (새 창 · 바깥 사이트)
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix…
EN The Hacker News · 보안 · 2026.10.15 - U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud (새 창 · 바깥 사이트)
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea's fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens and Chinese nationals f…
EN The Hacker News · 보안 · 2026.10.15 - U.K. Sanctions Cryptomus for RU Money Laundering (새 창 · 바깥 사이트)
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent ex…
EN Krebs on Security · 보안 · 2026.10.14 - Russian Influence Operation Widely Targets Latin America (새 창 · 바깥 사이트)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
EN Dark Reading · 보안 · 2026.10.14 - CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts (새 창 · 바깥 사이트)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.…
EN The Hacker News · 보안 · 2026.10.14 - CISA Adds Four Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerab…
EN CISA Advisories · 보안 · 2026.10.14 - Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) (새 창 · 바깥 사이트)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
EN SANS ISC · 보안 · 2026.10.14 - Ransomware Gangs Embrace Physical Threats, Family Stalking? (새 창 · 바깥 사이트)
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
EN Dark Reading · 보안 · 2026.10.14 - ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.14
- Ivanti 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
- GitLab 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
- Microsoft Patches More Than 1,400 Security Flaws (새 창 · 바깥 사이트)
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmo…
EN Krebs on Security · 보안 · 2026.10.14 - Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday (새 창 · 바깥 사이트)
The scary surprises in the largest security update ever include defense bypasses and unauthenticated RCEs.
EN Dark Reading · 보안 · 2026.10.14 - North Korea Phishes Ukrainians for War Intel (새 창 · 바깥 사이트)
The Democratic People's Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
EN Dark Reading · 보안 · 2026.10.14 - Anthropic Finds Ingredients for Future AI Worms (새 창 · 바깥 사이트)
Anthropic's latest study combines IoT and network tests to explore AI self-replication, which researchers said would be "challenging" to shut down.
EN Dark Reading · 보안 · 2026.10.14 - October 2026 Microsoft Patch Tuesday, (Tue, Oct 13th) (새 창 · 바깥 사이트)
Microsoft today released patches for 1,417 vulnerabilities. 76 of these vulnerabilities are rated critical, with 7 critical vulnerabiilties requiring no customer actions. One vulnerability was disclosed before today's patch Tuesday, and one is already exploited.
EN SANS ISC · 보안 · 2026.10.14 - CISA Adds Two Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-96951 Microsoft Windows Command Injection Vulnerability CVE-2026-104935 Ivanti Connect Secure Authentication Bypass by Spoofing Vulnera…
EN CISA Advisories · 보안 · 2026.10.13 - Swann Communications SWIFI-SE2KIC (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to view video information without authentication. The following versions of Swann Communications SWIFI-SE2KIC are affected: SWIFI-SE2KIC firmware CVSS Vendor Equipment v3 6.2 Swann Communic…
EN CISA Advisories · 보안 · 2026.10.13 - CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure (새 창 · 바깥 사이트)
CISA is aware of Ivanti’s disclosure of a newly exploited vulnerability, CVE-2026-104935 , affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior. CISA is aware of cyber threat actors exploiting this zero-day authentication bypas…
EN CISA Advisories · 보안 · 2026.10.13 - Inductive Automation Ignition Software (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could allow an authenticated low-level user to escalate their privileges to a higher level. The following versions of Inductive Automation Ignition Software are affected: Ignition >=8.1.0| Ignition >=8.3.0| CVSS Vend…
EN CISA Advisories · 보안 · 2026.10.13 - ISC Stormcast For Tuesday, October 13th, 2026 https://isc.sans.edu/podcastdetail/10134, (Tue, Oct 13th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.13
- SonicWall 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.13
- Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack (새 창 · 바깥 사이트)
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
EN Dark Reading · 보안 · 2026.10.13 - Prominent Ransomware Negotiator Faces Extortion Charges (새 창 · 바깥 사이트)
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort money.
EN Dark Reading · 보안 · 2026.10.13 - No Identity, No Recovery: Cyber Resilience Starts With IAM (새 창 · 바깥 사이트)
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
EN Dark Reading · 보안 · 2026.10.13 - Passing the Baton: Dark Reading Names New Editor-in-Chief (새 창 · 바깥 사이트)
Fahmida Y. Rashid will keep the momentum going as she leads Dark Reading.
EN Dark Reading · 보안 · 2026.10.12 - ISC Stormcast For Monday, October 12th, 2026 https://isc.sans.edu/podcastdetail/10132, (Mon, Oct 12th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.12
- Citrix 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.12
- Why TLP should not replace your internal information classification, (Sat, Oct 10th) (새 창 · 바깥 사이트)
The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far).
EN SANS ISC · 보안 · 2026.10.10
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)