セキュリティニュースまとめる君

VMware fixes three zero-day bugs exploited at Pwn2Own 2024
other
2024-05-14 14:48:08

New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation
vulnerability
2024-05-14 13:51:00

Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code
vulnerability
2024-05-14 11:17:00

CVE	CVE-2024-25641, CVE-2024-29895, CVE-2024-31445, CVE-2024-31459, CVE-2023-39361, CVE-2022-46169
影響を受ける製品	Cacti Framework
脆弱性サマリ	Arbitrary file write、Command injection、SQL injection、File inclusion
重大度	高、中、不明
RCE	有
攻撃観測	不明
PoC公開	有

6 Mistakes Organizations Make When Deploying Advanced Authentication
other
2024-05-14 10:51:00

Failing to conduct a risk assessment
- Organization risks exposing vulnerabilities by not assessing current threats, systems, and necessary protection levels.
- Different applications may require varying levels of security depending on sensitivity.
- Role-based access controls can enhance security by limiting access based on user roles.
Not completing due diligence to integrate authentication with current systems
- Ensure compatibility with existing systems and adopt industry-standard authentication methods.
- Toolkits simplify the integration process and enhance security.
Requiring only one authentication factor
- Emphasize the need for at least two authentication factors for enhanced security.
- Consider factors like physical tokens, biometrics, trusted devices, and high trust factors based on data sensitivity.
Forgetting about user experience
- Provide authentication solutions that balance security and accessibility to improve user experience.
- Clear instructions, user-friendly interfaces, and self-service options are essential for a positive user experience.
Not paying attention to authentication activities and patterns
- Regular monitoring and analysis of authentication activities are critical for ongoing security.
- Real-time alerts on suspicious behavior and risk-based authentication contribute to threat detection and mitigation.

Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls
incident
2024-05-14 10:44:00

事件発生日	2024年5月14日
被害者名	企業、ユーザー
被害サマリ	企業にスパムメールを送り、リモートアクセスを取得し、資格情報を収集
被害額	(予想)

攻撃者名	不明（ソーシャルエンジニアリング攻撃者）
攻撃手法サマリ	スパムメールを使用し、リモートアクセスを獲得する
マルウェア	AnyDesk、Quick Assist、OpenSSH for Windows、NetSupport RAT
脆弱性	不明

Google Chrome emergency update fixes 6th zero-day exploited in 2024
vulnerability
2024-05-14 08:10:31

CVE	CVE-2024-4761
影響を受ける製品	Google Chrome ブラウザ
脆弱性サマリ	ChromeのV8 JavaScriptエンジンに存在するout-of-bounds write問題
重大度	高
RCE	不明
攻撃観測	有
PoC公開	不明

Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices
other
2024-05-14 05:16:00

PyPi package backdoors Macs using the Sliver pen-testing suite
vulnerability
2024-05-13 21:50:00

CVE	なし
影響を受ける製品	macOS
脆弱性サマリ	PyPiパッケージがSliver C2敵対フレームワークを悪用してmacOSにバックドアを仕掛ける
重大度	高
RCE	有
攻撃観測	不明
PoC公開	不明

Apple backports fix for zero-day exploited in attacks to older iPhones
vulnerability
2024-05-13 21:47:02

CVE	CVE-2024-23296
影響を受ける製品	iOS 16.7.8, iPadOS 16.7.8, macOS Ventura 13.6.7
脆弱性サマリ	Appleが古いiPhoneやiPad向けに3月にリリースしたセキュリティパッチを適用したもの。iOSの確認されたゼロデイ脆弱性を修正。
重大度	高
RCE	不明
攻撃観測	有
PoC公開	無

Apple backports fix for RTKit iOS zero-day to older iPhones
other
2024-05-13 21:47:02