PLANCK기술 소식
보안 · 통신 기술 분야 공식 매체의 RSS에서 매일 8시 · 17시에 제목과 짧은 요약을 모읍니다. 본문은 각 매체 사이트에서 읽으십시오.
- FBI Arrests Executive at Ransomware Negotiation Firm (새 창 · 바깥 사이트)
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sou…
EN Krebs on Security · 보안 · 2026.10.10 - ASOS Breach Reveals the Risks in Customer-Facing SaaS (새 창 · 바깥 사이트)
The attack on the British retailer shows that compromising a single identity can lead to much deeper penetration of the corporate network.
EN Dark Reading · 보안 · 2026.10.10 - AI Scramble Drives Cybersecurity M&A Boom (새 창 · 바깥 사이트)
Welcome to another gangbuster year for strategic M&A activity in cyber, with 117 deals announced in the latest quarter. What's different: Many of the buyers are not your typical cybersecurity firms.
EN Dark Reading · 보안 · 2026.10.10 - What We Missed: FBI Strikes Back at ShinyHunters (새 창 · 바깥 사이트)
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the arrest of a suspected ShinyHunters operative to the compromise of a Pentagon-run data center.
EN Dark Reading · 보안 · 2026.10.10 - Security Threats Don't Stop at the Office: Why Executives' Families Need Training, Too (새 창 · 바깥 사이트)
Those closest to executives must match their security postures because the weakest link in a family can become the entry point for attacks.
EN Dark Reading · 보안 · 2026.10.10 - Social Engineering AI Agents: The New BEC for 2026 (새 창 · 바깥 사이트)
As AI agents gain authority over business systems, attackers can manipulate them like business email compromise (BEC) victims.
EN Dark Reading · 보안 · 2026.10.09 - 'AgentCorruption' Puts AWS Environments at Risk With Single Prompt (새 창 · 바깥 사이트)
A now-patched vulnerability in AWS Bedrock AgentCore could have allowed an attacker to use one AI chatbot to take over an organization's entire fleet.
EN Dark Reading · 보안 · 2026.10.09 - Satel Netco Design (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. The following versions…
EN CISA Advisories · 보안 · 2026.10.08 - Grid Protection Alliance openPDC and openHistorian (새 창 · 바깥 사이트)
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC openPDC (Docker image) openHistorian CVSS Vendor Equipment v3 9.8 Grid Protection Alliance openPDC 5 Vulnerabilities Deserialization of Untrusted Data, Missing Aut…
EN CISA Advisories · 보안 · 2026.10.08 - Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data (새 창 · 바깥 사이트)
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology…
EN CISA Advisories · 보안 · 2026.10.08 - Red Lion Controls N-Tron 700 Series (Update A) (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to r…
EN CISA Advisories · 보안 · 2026.10.08 - ShinyHunters Extorted Boeing Spin-off Prior to Arrests (새 창 · 바깥 사이트)
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacke…
EN Krebs on Security · 보안 · 2026.10.07 - Hitachi Energy RTU500 (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is publishing this cybersecurity advisory in response to the security findings reported by Dragos affecting end-of-life RTU500 CMU firmware version 9.x. The reported findings are associated with legacy RTU500 firmware versions that were developed…
EN CISA Advisories · 보안 · 2026.10.06 - Savannah lwIP SMTP client (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. The following versions of Savannah lwIP SMTP client are affected: lwIP SMTP client 2.2.1 (CVE-2026-15340) CVSS Vendo…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy SOI (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of RCE (Remote Code Execution) vulnerability in Apache ActiveMQ component of SOI product versions listed in this document. These vulnerabilities can be exploited to carry out various attacks affecting confidentiality, integrity, and avail…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy Asset Suite (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of unauthenticated servlet access vulnerabilities that affect Asset Suite product versions listed in this document. These vulnerabilities can be exploited to potentially cause confidentiality, integrity and availability impact on the prod…
EN CISA Advisories · 보안 · 2026.10.06 - Johnson Controls EasyIO FG (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmware CVSS Vendor Equipment v3 7.7 Johnson Controls EasyIO FG…
EN CISA Advisories · 보안 · 2026.10.06 - Hitachi Energy REB500 (새 창 · 바깥 사이트)
View CSAF Summary Hitachi Energy is aware of open-source software vulnerabilities that affect REB500 product versions listed in this document. These vulnerabilities can be exploited to carry out Denial of Service (DoS) attack on the product. Please refer to the Recommended Immedi…
EN CISA Advisories · 보안 · 2026.10.06 - 보안인증 소프트웨어 취약점 관련 클리닝 서비스 가동 안내 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.06
- 금융권 등 개인정보 유출 사고 피해보상금 지급 등 사칭 피싱 주의 권고 (새 창 · 바깥 사이트)KISA 보호나라 보안공지 · 보안 · 2026.10.06
- CISA Adds One Known Exploited Vulnerability to Catalog (새 창 · 바깥 사이트)
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-88779 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability This type of vulnerability i…
EN CISA Advisories · 보안 · 2026.10.04 - CISA Adds Two Known Exploited Vulnerabilities to Catalog (새 창 · 바깥 사이트)
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-102489 Zammad GmbH Zammad Session Fixation Vulnerability CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability…
EN CISA Advisories · 보안 · 2026.10.02 - Johnson Controls EasyIO Neo Series EC and CW Controllers (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. The following versions of Johnson Controls EasyIO Neo Series EC and CW Controllers are affected: EasyIO Neo S…
EN CISA Advisories · 보안 · 2026.10.01 - Armatura LLC Armatura One (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to the database, execute arbitrary code on the host with the highest level of privilege, or gain control of the physical access-control system. The following ver…
EN CISA Advisories · 보안 · 2026.10.01 - Monta monta.app (새 창 · 바깥 사이트)
View CSAF Summary Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks. The following versions of Monta monta.app are af…
EN CISA Advisories · 보안 · 2026.10.01 - Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation (새 창 · 바깥 사이트)
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically e…
EN Krebs on Security · 보안 · 2026.09.29 - U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions (새 창 · 바깥 사이트)
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restit…
EN Krebs on Security · 보안 · 2026.09.26 - Data Broker Radaris Loses Domains in Privacy Fight (새 창 · 바깥 사이트)
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey priva…
EN Krebs on Security · 보안 · 2026.09.17 - Microsoft Plugs Nearly 1,000 Security Holes (새 창 · 바깥 사이트)
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security expe…
EN Krebs on Security · 보안 · 2026.09.09 - FBI Probes Service Selling 153M+ Drivers Licenses (새 창 · 바깥 사이트)
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appea…
EN Krebs on Security · 보안 · 2026.09.02
제목과 요약의 저작권은 각 매체에 있습니다. PLANCK는 링크만 모아 보여 주며 내용을 고치거나 번역하지 않습니다. 피드(제목 · 링크)