PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- AhsayCBS Flaws Exploited to Deploy Web Shells Get New Fixes After Incomplete Patches (새 창 · 바깥 사이트)
Singapore-based Ahsay Backup has released security updates to address two security flaws in AhsayCBS that have been exploited by bad actors to drop web shells and XMRig cryptocurrency miners. The vulnerabilities in question are CVE-2026-105133 and CVE-2026-105134, which could be…
EN The Hacker News · 보안 · 2026.10.15 - China's path to 6G (새 창 · 바깥 사이트)
6G is a key pillar of China's latest five-year plan and while companies have been tight-lipped on their plans, some details are emerging.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.15
- MS 10월 보안 위협에 따른 정기 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.15
- Cisco 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.15
- Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles (새 창 · 바깥 사이트)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
EN Dark Reading · 보안 · 2026.10.15 - Yam Store: The Phishing Network Behind a Billion Messages (새 창 · 바깥 사이트)
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
EN Dark Reading · 보안 · 2026.10.15 - Yandex outage: Data shows that instead of going dark, malicious bots went on the move (새 창 · 바깥 사이트)
When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks.
EN Cloudflare Blog · 기술 일반 · 2026.10.15 - Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat (새 창 · 바깥 사이트)
A bug in Claude Code Desktop's preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
EN Dark Reading · 보안 · 2026.10.15 - Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability (새 창 · 바깥 사이트)
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance's operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through the gateway and, if it su…
EN The Hacker News · 보안 · 2026.10.15 - Cable One-Mega Broadband deal stays in limbo, but for how long? (새 창 · 바깥 사이트)
Cable One's deal to acquire the 55% of Mega Broadband it doesn't already own remains in a holding pattern after a judge ordered Cable One and lender CoBank to agree to a pair of briefing and hearing dates.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - Mainland China smartphone shipments drop to lowest Q3 level since 2013 – Omdia (새 창 · 바깥 사이트)
Mainland China's smartphone shipments declined 12% YOY to 59.3 million units in 3Q 2026. #pressrelease
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - 'Sovereign AI' claims often fail to match reality – Omdia (새 창 · 바깥 사이트)
New benchmark of 35 providers in 20 countries finds patchy guarantees, weak contracts and a blind spot on data in transit. #pressrelease
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora’s Built-in CODE App (새 창 · 바깥 사이트)
Attackers exploited a flaw in an optional Nextcloud app, Collabora Online - Built-in CODE Server, to plant web shells on Nextcloud servers. Three administrators reported the issue on GitHub, with the first logged attack on September 10. A web shell is a small file that executes a…
EN The Hacker News · 보안 · 2026.10.15 - Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages (새 창 · 바깥 사이트)
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix…
EN The Hacker News · 보안 · 2026.10.15 - U.S. Shuts Down Over 40 Laptop Farms, Charges 14 in North Korean IT Worker Fraud (새 창 · 바깥 사이트)
The U.S. Department of Justice (DoJ) on Tuesday charged 14 people and seized about 187 computers and KVM devices as part of its ongoing efforts to disrupt North Korea's fraudulent remote IT worker (ITW) scheme. The indictment charges a mix of U.S. citizens and Chinese nationals f…
EN The Hacker News · 보안 · 2026.10.15 - NCTC promotes four to SVP-level roles (새 창 · 바깥 사이트)
The National Content & Technology Cooperative has promoted Steve Beardslee, Rob Smith, Shelley Thompson and Stewart Myers to SVP roles in areas spanning product and tech, programming and member development. #pressrelease
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - FCC sets vote to earmark $162M more for mobile broadband in Alaska (새 창 · 바깥 사이트)
The FCC is set to vote to provide an additional $162 million for the Alaska Connect Fund, with a focus on mobile broadband service deployment. #pressrelease
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - VodafoneZiggo rolls out Hitron's DOCSIS 4.0 meter (새 창 · 바깥 사이트)
VodafoneZiggo is among the first operators to deploy the CGNDP4, Hitron's DOCSIS 4.0 testing and diagnostic platform for field techs. #pressrelease
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - AT&T follows Telefónica out of Mexico with $2B sale (새 창 · 바깥 사이트)
AT&T is selling AT&T Mexico to Grupo Televisa and Fintech Holdings for $2 billion in cash, leaving the country after more than a decade.
EN Light Reading · 통신 · 네트워크 · 2026.10.15 - U.K. Sanctions Cryptomus for RU Money Laundering (새 창 · 바깥 사이트)
The United Kingdom has issued economic sanctions against Cryptomus, a chameleonic cryptocurrency platform that experts say serves as a major conduit for payments related to ransomware, narcotics, darknet markets, fraud and cybercrime services that are helping Russia circumvent ex…
EN Krebs on Security · 보안 · 2026.10.14 - Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug (새 창 · 바깥 사이트)
While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available.
EN Cloudflare Blog · 기술 일반 · 2026.10.14 - Russian Influence Operation Widely Targets Latin America (새 창 · 바깥 사이트)
The AI-enabled operation used spoofed emails, fake government documents, and the creation of a local organization to target schools in Peru and Ecuador, among other efforts.
EN Dark Reading · 보안 · 2026.10.14 - CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts (새 창 · 바깥 사이트)
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged organizations to take steps to immediately update their Ivanti Connect Secure (ICS) appliances and deployments to the latest version following the disclosure of an actively exploited vulnerability.…
EN The Hacker News · 보안 · 2026.10.14 - CISA Adds Four Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519 Cisco Secure Email Gateway Relative Path Traversal Vulnerab…
EN CISA Advisories · 보안 · 2026.10.14 - Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) (새 창 · 바깥 사이트)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
EN SANS ISC · 보안 · 2026.10.14 - Ransomware Gangs Embrace Physical Threats, Family Stalking? (새 창 · 바깥 사이트)
Organizations are reporting that employees face threats of stalking, physical violence, and abduction. But these alarming claims are hard to verify.
EN Dark Reading · 보안 · 2026.10.14 - ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th) (새 창 · 바깥 사이트)EN SANS ISC · 보안 · 2026.10.14
- Ivanti 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
- GitLab 제품 보안 업데이트 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.14
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)