[B! security][mail] dazedã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

dazed id:dazed

securityã¨mailã«é–¢ã™ã‚‹dazedã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (26)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

æ¾ç«¹ã€Googleãƒ•ã‚©ãƒ¼ãƒ ã®è¨å®šãƒŸã‚¹ã§å€‹äººæƒ…å ±æ¼ãˆã„ã®å¯èƒ½æ€§
æ¾ç«¹ã¯6æœˆ17æ—¥ã€å¤§é˜ªæ¾ç«¹åº§ã®ç‰¹å®šã®ã‚¤ãƒ™ãƒ³ãƒˆã«ç”³ã—è¾¼ã‚“ã ä¼šå“¡æƒ…å ±111äººåˆ†ãŒã€ä»–ã®ç”³è¾¼è€…ã‹ã‚‰é–²è¦§å¯èƒ½ã ã£ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã¨ç™ºè¡¨ã—ãŸã€‚ç”³ã—è¾¼ã¿ç”¨ã®Googleãƒ•ã‚©ãƒ¼ãƒ ã§è¨å®šãƒŸã‚¹ãŒã‚ã£ãŸãŸã‚ã€‚ å¯¾è±¡ã¯ã€ã€Œæ¾ç«¹æŒèˆžä¼Žä¼šã€ä¼šå“¡ã®ã†ã¡ã€å¤§é˜ªæ¾ç«¹åº§ã€Œä¸ƒæœˆå¤§æŒèˆžä¼Žã€ãƒã‚±ãƒƒãƒˆè³¼å…¥è€…é™å®šã§å‹Ÿé›†ã—ãŸã€Œèˆ¹ä¹—ã‚Šè¾¼ã¿ã€ã‚¤ãƒ™ãƒ³ãƒˆã®å¿œå‹Ÿè€…ã€‚ 6æœˆ11æ—¥åˆå¾Œ4æ™‚30åˆ†ã”ã‚ã‹ã‚‰12æ—¥åˆå‰12æ™‚50åˆ†ã”ã‚ã«å¿œå‹Ÿã—ãŸä¼šå“¡ã®ä¼šå“¡ç•ªå·ã€æ°åã€éƒµä¾¿ç•ªå·ã€ä½æ‰€ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã€å‚åŠ äººæ•°ãŒã€ç”³ã—è¾¼ã‚“ã ä¼šå“¡ç›¸äº’ã§é–²è¦§å¯èƒ½ã ã£ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†ã€‚ å„æƒ…å ±ã¯å€‹äººã”ã¨ã«ã²ã‚‚ä»˜ã‘ã‚‰ã‚Œãªã„è¡¨ç¤ºã«ãªã£ã¦ãŠã‚Šã€ã€Œå€‹äººã‚’ç‰¹å®šã™ã‚‹ã“ã¨ã¯å›°é›£ã ã£ãŸã€ã¨ã—ã¦ã„ã‚‹ã€‚é–²è¦§ã§ããŸã®ã¯ã€ãƒ•ã‚©ãƒ¼ãƒ ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããŸé™å®šçš„ãªä¼šå“¡ã§ã€å¤–éƒ¨ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã§ãã‚‹çŠ¶æ…‹ã§ã¯ãªã‹ã£ãŸã¨ã„ã†ã€‚ å¯¾è±¡è€…ã«ã¯è¬ç½ªæ–‡ã‚’é€ä»˜ã—ãŸã€‚å†ç™ºé˜²æ¢ã®ãŸã‚ã€ãƒ•ã‚©ãƒ¼ãƒ å…¬é–‹æ™‚ã®ãƒ†ã‚¹ãƒˆã¨ãƒã‚§ãƒƒã‚¯ä½“åˆ¶ã®å¼·åŒ–ã‚’å›³ã‚‹ã¨ã—
dazed 2024/06/19
security

mail

form

google

èŠ¸èƒ½
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®SMTPãƒ—ãƒãƒˆã‚³ãƒ«å®Ÿè£…ã«ãªã‚Šã™ã¾ã—ãƒ¡ãƒ¼ãƒ«ã‚’é€ä¿¡ã•ã‚Œã‚‹è„†å¼±æ€§ã€ŒSMTP Smugglingã€ï¼æ·±åˆ»åº¦ã¯ã€ŒMEDIUMã€ã§ã€ŒPostfixã€ã€ã€ŒSendmailã€ã€ã€ŒEximã€ã«å½±éŸ¿
dazed 2024/01/18
security

mail
ãƒªãƒ³ã‚¯
æ–°ã—ã„Outlookã€Microsoftã«æ©Ÿå¯†ãƒ‡ãƒ¼ã‚¿ã‚’é€ä¿¡ã™ã‚‹å±é™ºæ€§ï¼Ÿ æµ·å¤–ãƒ¡ãƒ‡ã‚£ã‚¢ãŒè¦é˜ã€ã‚„ã˜ã†ã¾Watchã€‘
dazed 2023/11/16
microsoft

mail

security

privacy
ãƒªãƒ³ã‚¯
ã€é‡è¦ãƒ»ç·Šæ€¥ã€‘å…¥å‡ºé‡‘ã‚’è¦åˆ¶ã—ã¾ã—ãŸâ”€â”€â€œè©æ¬ºã£ã½ã„â€ä¸‰äº•ä½å‹éŠ€è¡Œã®ãƒ¡ãƒ¼ãƒ«ãŒè©±é¡Œã€€ä¸€ä½“ãªãœï¼Ÿã€€çµŒç·¯ã‚’èžã„ãŸ
ãƒ¡ãƒ¼ãƒ«ãŒé€ã‚‰ã‚ŒãŸã®ã¯8æœˆ30æ—¥åˆå¾Œ2æ™‚ã”ã‚ã€‚æœ¬æ–‡ã®å‡ºã ã—ã¯ã€ŒãŠå®¢ã•ã¾ã®å£åº§ã®å…¥å‡ºé‡‘ã‚’è¦åˆ¶ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã®ã§ã€ãŠçŸ¥ã‚‰ã›ã—ã¾ã™ã€‚æœ¬äººç¢ºèªå¾Œã€åˆ¶é™ã‚’è§£é™¤ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€ï¼ˆåŽŸæ–‡ãƒžãƒžï¼‰ã¨ã—ãŸä¸Šã§ã€ã“ã®ã‚ˆã†ãªæ–‡é¢ã§å½ã®ãƒã‚°ã‚¤ãƒ³ç”»é¢ã¸èª˜å°Žã™ã‚‹ãƒ¡ãƒ¼ãƒ«ãŒæ€¥å¢—ã—ã¦ã„ã‚‹ã¨èª¬æ˜Žã€‚ã“ã‚Œã‚‰ã®ãƒªãƒ³ã‚¯ã«ã¯çµ¶å¯¾ã‚¢ã‚¯ã‚»ã‚¹ã—ãªã„ã‚ˆã†ã«è¨´ãˆã¦ã„ã‚‹ã€‚ ãƒ¡ãƒ¼ãƒ«æœ¬æ–‡ä¸‹éƒ¨ã«ã¯ã€Œè©æ¬ºè¢«å®³é˜²æ¢ã‚’ç›®çš„ã¨ã—ã¦ã€è©æ¬ºãƒ¡ãƒ¼ãƒ«ã®å®Ÿæ…‹ã‚’ã‚ˆã‚Šä¸€å±¤ã”ç†è§£ã„ãŸã ããŸã‚ã«ã€å®Ÿéš›ã®è©æ¬ºãƒ¡ãƒ¼ãƒ«åŒæ§˜ã®æ–‡è¨€ã‚’ä¸€éƒ¨ã«è¨˜è¼‰ã—ã¦ãŠã‚Šã¾ã™ã€ï¼ˆåŽŸæ–‡ãƒžãƒžï¼‰ã®è¨˜è¼‰ã‚‚è¦‹ã‚‰ã‚Œã‚‹ã€‚ ã“ã®ãƒ¡ãƒ¼ãƒ«ã¯Xï¼ˆå…ƒTwitterï¼‰ä¸Šã§ã‚‚è©±é¡Œã«ã€‚å—ã‘å–ã£ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã¯ã€Œè‚ãŒå†·ãˆãŸã®ã§ã€ã¡ã‚ƒã‚“ã¨æ³¨æ„ã—ã‚ˆã†ã¨æ€ã£ãŸã€ã€Œãƒ¡ãƒ¼ãƒ«ãŒç§€é€¸ã™ãŽã‚‹ã€ãªã©ã®è‚¯å®šçš„ãªå£°ã‚„ã€ã€Œç´›ã‚‰ã‚ã—ã„ã€ã€Œã“ã®ãƒ¡ãƒ¼ãƒ«ã‚’è€ƒãˆãŸäººã¯2æ™‚é–“æ£åº§ã—ã¦ã»ã—ã„ã€ãªã©ã®å¦å®šçš„ãªæ„è¦‹ã‚‚ä¸ŠãŒã£ãŸã€‚ã“ã‚Œã‚’å—ã‘ã€åˆå¾Œ4æ™‚20åˆ†ã”ã‚ã«ã¯ã€Œä¸‰äº•ä½å‹éŠ€è¡Œã€
dazed 2023/08/30
ã¤ã„ã«ãƒ¡ãƒ¼ãƒ«ã®é›»åç½²åã‚‚ãƒãƒƒã‚¯ã•ã‚ŒãŸã®ã‹ã¨å¿ƒé…ã«ãªã£ãŸã‘ã©æœ¬ç‰©ã§ã‚ˆã‹ã£ãŸã€‚ã¡ãªã¿ã«Macã®ãƒ¡ãƒ¼ãƒ©ãƒ¼ã§ã¯SPAMæ‰±ã„ã ã£ãŸã€‚

bank

mail

spam

smbc

security
ãƒªãƒ³ã‚¯
NISCã¨æ°—è±¡åºãŒä½¿ç”¨ã—ã¦ã„ãŸãƒ¡ãƒ¼ãƒ«é–¢é€£æ©Ÿå™¨ã¸ã®ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2023å¹´8æœˆ4æ—¥ã€å†…é–£ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼(NISC)ã¨æ°—è±¡åºã¯ãã‚Œãžã‚Œé›»åãƒ¡ãƒ¼ãƒ«é–¢é€£ã®ã‚·ã‚¹ãƒ†ãƒ ãƒ»æ©Ÿå™¨ã‹ã‚‰ä¸æ£é€šä¿¡ã®ç—•è·¡ãŒç¢ºèªã•ã‚Œã€ãƒ¡ãƒ¼ãƒ«ãƒ‡ãƒ¼ã‚¿ã®ä¸€éƒ¨ãŒå¤–éƒ¨ã«æµå‡ºã—ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã¨å…¬è¡¨ã—ã¾ã—ãŸã€‚ã“ã“ã§ã¯é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ æ”¿åºœçµ„ç¹”ã«å¯¾ã—ã‚¼ãƒãƒ‡ã‚¤æ”»æ’ƒ NISCã¨æ°—è±¡åºåŠã³æ°—è±¡ç ”ç©¶æ‰€ã€å›½ç«‹ç§‘å¦åšç‰©é¤¨ã€æ•™è·å“¡æ”¯æ´æ©Ÿæ§‹ãŒå„ã€…é‹ç”¨ã‚’è¡Œã£ã¦ã„ãŸé›»åãƒ¡ãƒ¼ãƒ«é–¢é€£ã‚·ã‚¹ãƒ†ãƒ ãƒ»æ©Ÿå™¨ã«è„†å¼±æ€§ãŒå˜åœ¨ã—ã¦ãŠã‚Šã€ãã®è„†å¼±æ€§ã«é–¢é€£ã—ãŸä¸æ£é€šä¿¡ãŒç¢ºèªã•ã‚ŒãŸã€‚ ä»Šå›žç¢ºèªã•ã‚ŒãŸä¸æ£é€šä¿¡ã«ã‚ˆã‚Šã€ãƒ¡ãƒ¼ãƒ«ãƒ‡ãƒ¼ã‚¿ã®ä¸€éƒ¨ãŒå¤–éƒ¨ã«æµå‡ºã—ãŸå¯èƒ½æ€§ãŒã‚ã‚‹ã€‚ä¸¡çµ„ç¹”ã§ã¯ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ç‰ã®å€‹äººæƒ…å ±ãŒæ¼ãˆã„ã—ãŸå¯èƒ½æ€§ã‚’æŽ’é™¤ã§ããªã„ã¨ã—ã¦å€‹äººæƒ…å ±ä¿è·å§”å“¡ä¼šã«å ±å‘Šã—ãŸä»–ã€å¯¾è±¡è€…ã«ã‚‚å€‹åˆ¥ã«é€£çµ¡ã‚’è¡Œã†ã€‚å…¬è¡¨æ™‚ç‚¹ã§ã¯æµå‡ºå¯èƒ½æ€§ã®ã‚ã‚‹æƒ…å ±ã®æ‚ªç”¨ã¯ç¢ºèªã•ã‚Œã¦ã„ãªã„ãŒã€NISCã§ã¯ç´„5,000ä»¶ã®å€‹äººæƒ…å ±ãŒå¯¾è±¡ã«å«ã¾ã‚Œã¦ãŠã‚Šã€æµå‡ºå¯èƒ½æ€§ã®ã‚ã‚‹äº‹æ¡ˆãŒ
dazed 2023/08/07
security

mail

government
ãƒªãƒ³ã‚¯
JVN#09409909: WordPress ã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§
WordPress ã«ã¯ã€ã€Œãƒ¡ãƒ¼ãƒ«æŠ•ç¨¿ã€æ©Ÿèƒ½ã«é–¢ä¿‚ã™ã‚‹æ¬¡ã®è¤‡æ•°ã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ æ ¼ç´åž‹ã‚¯ãƒã‚¹ã‚µã‚¤ãƒˆã‚¹ã‚¯ãƒªãƒ—ãƒ†ã‚£ãƒ³ã‚° (CWE-79) - CVE-2022-43497
dazed 2022/11/08
wordpress

mail

security
ãƒªãƒ³ã‚¯
JVNVU#92673251: OpenSSLã«è¤‡æ•°ã®è„†å¼±æ€§
OpenSSL 3.0.0ã‹ã‚‰3.0.6 OpenSSL 1.1.1ãŠã‚ˆã³1.0.2ã¯ã€æœ¬è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã¾ã›ã‚“ã€‚ ã¾ãŸã€å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã«ã¤ã„ã¦ã¯ã€NCSC-NLãŒå…¬é–‹ã—ã¦ã„ã‚‹æƒ…å ±ã‚‚å‚ç…§ã—ã¦ãã ã•ã„ã€‚ OpenSSL Projectã‚ˆã‚Šã€OpenSSL Security Advisory [01 November 2022]ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ OpenSSLã«ã¯ã€æ¬¡ã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ æ·±åˆ»åº¦ - é«˜ï¼ˆSeverity: Highï¼‰ é›»åãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®å‡¦ç†ã«ãŠã‘ã‚‹4ãƒã‚¤ãƒˆã®ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ - CVE-2022-3602 X.509è¨¼æ˜Žæ›¸ã®æ¤œè¨¼ã‚’è¡Œã†éš›ã€è¨¼æ˜Žæ›¸ã®åå‰ã®ãƒã‚§ãƒƒã‚¯æ™‚ã«ãƒãƒƒãƒ•ã‚¡ã‚ªãƒ¼ãƒãƒ¼ãƒ•ãƒãƒ¼ãŒç™ºç”Ÿã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ãŸã ã—ã€ã“ã®å•é¡Œã¯è¨¼æ˜Žæ›¸ãƒã‚§ãƒ¼ãƒ³ã®ç½²åæ¤œè¨¼ã®å¾Œã§ç™ºç”Ÿã—ã¾ã™ã€‚ãã®ãŸã‚ã€æ‚ªæ„ã‚ã‚‹ç´°å·¥ãŒè¡Œã‚ã‚ŒãŸè¨¼æ˜Žæ›¸ã«å¯¾ã—ã¦CAãŒç½²åã—ã€æœ¬æ¥ãªã‚‰ã°é€”ä¸ã§å¤±æ•—ã™ã‚‹ã¯
dazed 2022/11/02
security

ssl

mail
ãƒªãƒ³ã‚¯
AVGã‚„ã‚¢ãƒã‚¹ãƒˆãŒé›»åãƒ¡ãƒ¼ãƒ«ã‚½ãƒ•ãƒˆThunderbirdã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚’å¦¨ã’ã‚‹å•é¡Œ | ã‚¹ãƒ©ãƒ‰ IT
çª“ã®æœã®è¨˜äº‹ã«ã‚ˆã‚Œã°ã€é›»åãƒ¡ãƒ¼ãƒ«ã‚½ãƒ•ãƒˆã®Thunderbirdã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã€ã€ŒAVGã€ã€Œã‚¢ãƒã‚¹ãƒˆã€ã®ã‚¢ãƒ³ãƒã‚¦ã‚¤ãƒ«ã‚¹ã‚½ãƒ•ãƒˆã«å¦¨ã’ã‚‰ã‚Œã‚‹ç¾è±¡ãŒç™ºç”Ÿã—ã¦ã„ã‚‹ã¨ã„ã†ã€‚ã“ã®å•é¡Œã¯Windowsç’°å¢ƒã§ãŠãã¦ã„ã‚‹ã¨ã®ã“ã¨ã€‚åŽŸå› ã¯AVGã‚„Avastã®Mail Shieldã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã«å•é¡ŒãŒã‚ã‚‹æ¨¡æ§˜ã€‚é–‹ç™ºå…ƒã®AVASTã¯ã“ã®å•é¡Œã‚’æŠŠæ¡ã—ã¦ã„ã‚‹ã¨ã®ã“ã¨ã§ã€ç¾åœ¨ã€å•é¡Œã‚’ä¿®æ£ã—ãŸãƒ™ãƒ¼ã‚¿ç‰ˆï¼ˆv22.9.6032ã€build 22.9.7526ï¼‰ãŒå…¬é–‹ä¸ã¨ãªã£ã¦ã„ã‚‹ï¼ˆçª“ã®æœã€Avast Forumã€Thunderbirdå…¬å¼Twitterï¼‰ã€‚
dazed 2022/10/24
windows

security

avast

avg

mozilla

thunderbird

mail
ãƒªãƒ³ã‚¯
Appleã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åãŒã€Œâ€â€ã€ã«ãªã£ã¦ã„ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚’å—ä¿¡ã™ã‚‹ã¨ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—é–‹ã‘ãªããªã‚‹å•é¡Œã‚’ã€ŒiOS 16.0.3ã€ã§ä¿®æ£ã€‚
Appleã¯ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åãŒã€Œâ€â€ã€ã«ãªã£ã¦ã„ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚’å—ä¿¡ã™ã‚‹ã¨ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—é–‹ã‘ãªããªã‚‹å•é¡Œã‚’ã€ŒiOS 16.0.3ã€ã§ä¿®æ£ã—ãŸãã†ã§ã™ã€‚è©³ç´°ã¯ä»¥ä¸‹ã‹ã‚‰ã€‚ Appleã¯ç¾åœ°æ™‚é–“2022å¹´10æœˆ10æ—¥ã€iPhone 8ä»¥é™ã®iPhoneã«å¯¾ã—ã€è¤‡æ•°ã®ä¸å…·åˆã‚’ä¿®æ£ã—ãŸã€ŒiOS 16.0.3 (Build 20A392)ã€ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¾ã—ãŸãŒã€Appleã¯ã€ã“ã®iOS 16.0.3ã§ãƒ¦ãƒ¼ã‚¶ãƒ¼åãŒç‰¹æ®Šãªãƒ¡ãƒ¼ãƒ«ã‚’å—ä¿¡ã™ã‚‹ã¨ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªãŒã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã—é–‹ã‘ãªããªã‚‹å•é¡Œã‚’ä¿®æ£ã—ãŸãã†ã§ã™ã€‚ ä¸æ£ãªãƒ¡ãƒ¼ãƒ«ã®å—ä¿¡å¾Œã€â€œãƒ¡ãƒ¼ãƒ«â€ãŒèµ·å‹•æ™‚ã«ã‚¯ãƒ©ãƒƒã‚·ãƒ¥ã™ã‚‹å•é¡Œ ãƒªãƒªãƒ¼ã‚¹ãƒŽãƒ¼ãƒˆã‚ˆã‚ŠæŠœç²‹ ã“ã®å•é¡Œã‚’#Mailjackã¨ã—ã¦Appleã«å ±å‘Šã—ã¦ã„ãŸãƒ‰ã‚¤ãƒ„equinux VPN Trackerãƒãƒ¼ãƒ ã«ã‚ˆã‚‹ã¨ã€iOS 16ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ—ãƒªã§ã¯ã€é€šå¸¸ã€ŒFrom: [email protected]
dazed 2022/10/13
iphone

ios

mail

security
ãƒªãƒ³ã‚¯
ãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«ã€é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ã€ŒDMARCã€ã€ŒDKIMã€å°Žå…¥ã€€ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°é˜²æ¢
NTTãƒ‰ã‚³ãƒ¢ã¯8æœˆ23æ—¥ã€ã€Œãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«ã€ã«ã€é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ã‚ˆã‚‹èªè¨¼æŠ€è¡“ã€ŒDMARCã€ã€ŒDKIMã€ã‚’å°Žå…¥ã—ãŸã€‚ãªã‚Šã™ã¾ã—ãƒ¡ãƒ¼ãƒ«ãªã©ã‚’ã‚ˆã‚Šé«˜ç²¾åº¦ã«åˆ¤åˆ¥ã—ã€ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã«ã‚ˆã‚‹è¢«å®³ãªã©ã‚’ä½Žæ¸›ã™ã‚‹ç›®çš„ã€‚ DMARCã¯ã€ãƒ¡ãƒ¼ãƒ«ãƒ˜ãƒƒãƒ€ã«å«ã¾ã‚Œã‚‹é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’èªè¨¼ã™ã‚‹æŠ€è¡“ã€‚DKIMã¯DMARCã®èªè¨¼æ‰‹æ®µã ã€‚ã“ã‚Œã‚‰ã®æŠ€è¡“ã«ã‚ˆã‚Šã€ä¼æ¥ã®å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‹ã‚‰é€ä¿¡ã•ã‚ŒãŸæ£è¦ãƒ¡ãƒ¼ãƒ«ã¨åˆ¤å®šã§ããŸãƒ¡ãƒ¼ãƒ«ã«ã¯ã€å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒžãƒ¼ã‚¯ã‚’è¡¨ç¤ºã™ã‚‹ã€‚ ãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«ã¯2021å¹´ã‹ã‚‰ã€é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼æŠ€è¡“ã€ŒSPFã€ã‚’æŽ¡ç”¨ã€‚SPFã«ã‚ˆã‚Šå…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‹ã‚‰é€ä¿¡ã•ã‚ŒãŸãƒ¡ãƒ¼ãƒ«ã¨åˆ¤å®šã§ããŸå ´åˆã«ã€å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒžãƒ¼ã‚¯ã‚’è¡¨ç¤ºã—ã¦ããŸã€‚ ãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«ã®ã€Œè¿·æƒ‘ãƒ¡ãƒ¼ãƒ«ãŠã¾ã‹ã›ãƒ–ãƒãƒƒã‚¯ã€ã€Œè©æ¬ºï¼ã‚¦ã‚¤ãƒ«ã‚¹ãƒ¡ãƒ¼ãƒ«æ‹’å¦ã€ã€Œãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«å…¬å¼ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã€æ©Ÿèƒ½ï¼ˆãã‚Œãžã‚Œç„¡æ–™ï¼‰ã‚’é€šã˜ã¦ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«æä¾›ã™ã‚‹ã€‚å„ã‚µãƒ¼ãƒ“ã‚¹ã¯ã€æ–°è¦å¥‘ç´„æ™‚ã«è‡ªå‹•ã§é©ç”¨ã•ã‚Œã¦ã„ã‚‹ã€‚ é–¢é€£è¨˜äº‹
dazed 2022/08/23
docomo

mail

security

damarc

dkim

spf

auth
ãƒªãƒ³ã‚¯
Reddit - Dive into anything
dazed 2022/06/07
Sparkã®CPUä½¿ç”¨çŽ‡ã€å‰ã‹ã‚‰æ°—ã«ãªã£ã¦ãŸã®ã ã‘ã©ã€HockeySDKã§ä½•ã‚„ã£ã¦ã‚‹ã‚“ã ã‚ï¼Ÿï¼•å¹´å‰ã®æƒ…å ±ã ã‘ã©æœ€æ–°ç‰ˆã‚‚åŒã˜ãªã®ã‹ãªã€‚ä»Šã®Macè‹¥å¹²ãƒ‘ãƒ¯ãƒ¼è¶³ã‚Šãªã„ã®ã§ã™ããƒ•ã‚¡ãƒ³å›žã‚‹ã‘ã©ã€M1ã§é«˜æ€§èƒ½ã«ãªã‚‹ã¨æ°—ã¥ã‹ãªã•ãã†ã§ãƒ¤ãƒã„ã€‚

macOS

mail

security

HockeySDK

spark
ãƒªãƒ³ã‚¯
ãˆããã£ã¨ã‚’èªžã‚‹å·§å¦™ãªãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒ¡ãƒ¼ãƒ«å¢—åŠ ã€‚æ±äº¬éƒ½æ°´é“å±€ã‚„åƒè‘‰éŠ€è¡Œãªã©ã‚‚ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
JRæ±æ—¥æœ¬ã®æŒ‡å®šåˆ¸äºˆç´„ã‚µãƒ¼ãƒ“ã‚¹ã€Œãˆããã£ã¨ã€ã‚’å½è£…ã—ãŸãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒ¡ãƒ¼ãƒ«ãŒå¤§é‡ã«å‡ºå›žã‚Šå§‹ã‚ã¦ã„ã‚‹ã€‚ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°å¯¾ç–å”è°ä¼šã«ã‚ˆã‚Œã°ã€Œãˆããã£ã¨ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®è‡ªå‹•é€€ä¼šå‡¦ç†ã«ã¤ã„ã¦ã€ãªã©ã®ä»¶åã§ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒ¡ãƒ¼ãƒ«ãŒå±Šã„ã¦ã„ã‚‹ã¨ã„ã†ã€‚ç·¨é›†åã®ã¨ã“ã‚ã«å¤§é‡ã«å±Šã„ã¦ã„ã‚‹ã‚‚ã®ã‚’ãã®ã¾ã¾å¼•ç”¨ã™ã‚‹ã¨ä»¥ä¸‹ã®ã‚ˆã†ãªå†…å®¹ã¨ãªã£ã¦ã„ã‚‹ï¼ˆãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°å¯¾ç–å”è°ä¼šã€ITmediaï¼‰ã€‚ ã€Œãˆããã£ã¨ã€ã¯ 2022 å¹´ 2 æœˆ21 æ—¥ã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’ãƒªãƒ‹ãƒ¥ãƒ¼ã‚¢ãƒ«ã„ãŸã—ã¾ã—ãŸã€‚ã“ã‚Œ ã«ä¼´ã„ã€ã€Œãˆããã£ã¨ã€åˆ©ç”¨è¦ç´„ãƒ»ä¼šå“¡è¦ç´„ã‚’å¤‰æ›´ã—ã€æœ€å¾Œã«ãƒã‚°ã‚¤ãƒ³ã‚’ã—ãŸæ—¥ã‚ˆã‚Šèµ·ç®—ã— ã¦ï¼’å¹´ä»¥ä¸Šã€Œãˆããã£ã¨ã€ã®ã”åˆ©ç”¨ï¼ˆãƒã‚°ã‚¤ãƒ³ï¼‰ãŒç¢ºèªã§ããªã„ã€Œãˆããã£ã¨ã€ã‚¢ã‚«ã‚¦ãƒ³ãƒˆ ã¯ã€è‡ªå‹•çš„ã«é€€ä¼šå‡¦ç†ã•ã›ã¦ã„ãŸã ãã“ã¨ã¨ã„ãŸã—ã¾ã—ãŸã€‚ãªãŠã€å¯¾è±¡ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®è‡ªå‹•é€€ ä¼šå‡¦ç†ã‚’ã€æœ¬è¦ç´„ã«åŸºã¥ãã€2022 å¹´ 4 æœˆ 18 æ—¥ã‚ˆã‚Šé †æ¬¡ã€å®Ÿæ–½ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ ã¨éžå¸¸ã«å·§å¦™
dazed 2022/03/08
mail

spam

phishing

security
ãƒªãƒ³ã‚¯
AWS SESã§ä¿¡é ¼æ€§ã®é«˜ã„ãƒ¡ãƒ¼ãƒ«é€ä¿¡(SPF, DKIM, DMARC) with Terraform - é›»æ°—ã²ã¤ã˜ç‰§å ´
ãƒ¡ãƒ¼ãƒ«èªè¨¼ã®ä»•çµ„ã¿ã¨ã€SESã§ã®Terraformã‚’ä½¿ã£ãŸè¨å®šæ–¹æ³•ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ ãƒ¡ãƒ¼ãƒ«èªè¨¼ã®ç¨®é¡ž ãƒ¡ãƒ¼ãƒ«ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ MAIL FROM FROM SPF(Sender Policy Framework) DKIM(DomainKeys Identified Mail) DMARC SESã®è¨å®š SESã§åˆ©ç”¨ã™ã‚‹ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ DKIMè¨å®š DMARC with DKIM DMARC with SPF å‚è€ƒ ãƒ¡ãƒ¼ãƒ«èªè¨¼ã®ç¨®é¡ž ãƒ¡ãƒ¼ãƒ«ã§ã¯é€ä¿¡å…ƒã®ãªã‚Šã™ã¾ã—ã‚’æ¤œå‡ºã™ã‚‹ãŸã‚ã®èªè¨¼ã®ä»•çµ„ã¿ã¨ã—ã¦ã€ä¸»ã«ä»¥ä¸‹ã®3ã¤ãŒã‚ã‚Šã¾ã™ã€‚ãã‚Œãžã‚ŒRFCã§å®šã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ SPF(Sender Policy Framework) DKIM(DomainKeys Identified Mail) DMARC(Domain-based Message Authentication, Reporting, and
dazed 2022/03/07
aws

mail

security
ãƒªãƒ³ã‚¯
ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã€ãƒ¡ãƒ¼ãƒ«ã§ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä»˜ãåœ§ç¸®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é‹ç”¨å»ƒæ¢ã€‚å—ä¿¡ã™ã‚‹ã¨è‡ªå‹•å‰Šé™¤
dazed 2022/02/16
â€œã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ã§ã¯(â€¦)ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ä»˜ãåœ§ç¸®ãƒ•ã‚¡ã‚¤ãƒ«ã¯ãƒ•ã‚¡ã‚¤ãƒ«è‡ªä½“ãŒæš—å·åŒ–ã•ã‚Œã¦ãŠã‚Šã€ãƒ¡ãƒ¼ãƒ«å—ä¿¡æ™‚ã«ãƒžãƒ«ã‚¦ã‚§ã‚¢ã®ãƒã‚§ãƒƒã‚¯ãŒãã‚ã‚ã¦å›°é›£ã§ã‚ã‚‹ã“ã¨ã‹ã‚‰ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã¨èª¬æ˜Žâ€

mail

security

softbank
ãƒªãƒ³ã‚¯
JVN#70100915: TransmitMail ã«ãŠã‘ã‚‹è¤‡æ•°ã®è„†å¼±æ€§
TransmitMail ã¯ã€PHP ã§å‹•ä½œã™ã‚‹ãƒ¡ãƒ¼ãƒ«ãƒ•ã‚©ãƒ¼ãƒ ã‚·ã‚¹ãƒ†ãƒ ã§ã™ã€‚TransmitMail ã«ã¯ã€æ¬¡ã®è¤‡æ•°ã®è„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ å¤–éƒ¨å…¥åŠ›å€¤ã®æ¤œè¨¼ä¸å‚™ã«èµ·å› ã™ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒˆãƒ©ãƒãƒ¼ã‚µãƒ« (CWE-22) - CVE-2022-22146
dazed 2022/01/25
php

mail

security
ãƒªãƒ³ã‚¯
ç¹°ã‚Šè¿”ã—æ‹¡æ•£ã™ã‚‹ã€Œã‚ãªãŸã®Apple IDã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è³ªå•ã‚’å†è¨å®šã—ã¦ãã ã•ã„ã€‚ã€ãƒ¡ãƒ¼ãƒ«ã«æ³¨æ„
ã‚ªãƒ³ãƒ—ãƒ¬ãƒŸã‚¹ã‹ã‚‰ã‚¯ãƒ©ã‚¦ãƒ‰ã¸ã®ç§»è¡Œã‚’ã¯ã˜ã‚ã€ãƒã‚¤ãƒ–ãƒªãƒƒãƒ‰ã‚¯ãƒ©ã‚¦ãƒ‰ç’°å¢ƒã‚’ã‚·ãƒ¼ãƒ ãƒ¬ã‚¹ã«ä¿è·ã—ãªãŒã‚‰ã€ã‚¯ãƒ©ã‚¦ãƒ‰ã®åˆ©ç‚¹ã‚’å®Ÿç¾ã—ã¾ã™ã€‚ è©³ã—ãã¯ã“ã¡ã‚‰
dazed 2018/01/26
apple

iphone

security

fishing

mail
ãƒªãƒ³ã‚¯
HTML ãƒ•ã‚¡ã‚¤ãƒ«ã‚’åˆ©ç”¨ã—ãŸãƒ“ã‚¸ãƒã‚¹ãƒ¡ãƒ¼ãƒ«è©æ¬ºï¼ˆBECï¼‰ | ãƒˆãƒ¬ãƒ³ãƒ‰ãƒžã‚¤ã‚¯ãƒ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ–ãƒã‚°
å¾“æ¥ã®ã€ŒBusiness Em ail Compromiseï¼ˆãƒ“ã‚¸ãƒã‚¹ãƒ¡ãƒ¼ãƒ«è©æ¬ºã€BECï¼‰ã€ã§ã¯ã€æ¨™çš„ PC ã‹ã‚‰ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæƒ…å ±ã‚’çªƒå–ã™ã‚‹ãŸã‚ã«ã€å®Ÿè¡Œãƒ•ã‚¡ã‚¤ãƒ«å½¢å¼ã®ã‚ãƒ¼ãƒã‚¬ãƒ¼ãŒä½¿ã‚ã‚Œã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã—ã€ãƒ¡ãƒ¼ãƒ«ã«æ·»ä»˜ã•ã‚ŒãŸå®Ÿè¡Œãƒ•ã‚¡ã‚¤ãƒ«ã¯ãƒžãƒ«ã‚¦ã‚§ã‚¢ã§ã‚ã‚‹å¯èƒ½æ€§ãŒé«˜ãã€é€šå¸¸ã€ãƒ¦ãƒ¼ã‚¶ã¯è¦æˆ’ã—ã¦æ·»ä»˜ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¾ã›ã‚“ã€‚ãã®çµæžœã€BEC ã«åˆ©ç”¨ã•ã‚Œã‚‹æ·»ä»˜ãƒ•ã‚¡ã‚¤ãƒ«ã®å½¢å¼ã¨ã—ã¦ã€å®Ÿè¡Œãƒ•ã‚¡ã‚¤ãƒ«ã‚ˆã‚Šã‚‚ã€HTML å½¢å¼ã® Web ãƒšãƒ¼ã‚¸ãŒå¤šãç¢ºèªã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ å›³ 1ï¼šHTML ãƒ•ã‚¡ã‚¤ãƒ«ãŒæ·»ä»˜ã•ã‚ŒãŸãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒ¡ãƒ¼ãƒ«ï¼ˆæ–™é‡‘ä½“ç³»ã®æ›´æ–°ã‚’å‘ŠçŸ¥ã™ã‚‹å†…å®¹ï¼‰ å›³ 1 ã®æ·»ä»˜ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é–‹ãã¨ã€ãƒ–ãƒ©ã‚¦ã‚¶ãŒç«‹ã¡ä¸Šã‚Šã€å›³ 2 ã®ãƒšãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ å›³ 2ï¼šHTML å½¢å¼ã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒšãƒ¼ã‚¸ ãƒ¦ãƒ¼ã‚¶ã¯ã€æ–‡æ›¸ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é–²è¦§ã™ã‚‹ãŸã‚ã«ã€ãƒ¦ãƒ¼ã‚¶åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã™ã‚‹ã‚ˆã†ã«èª˜å°Žã•ã‚Œã¾ã™ã€‚åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹
dazed 2017/07/31
security

malware

mail
ãƒªãƒ³ã‚¯
ã€PHPã€‘ä½œæˆã—ãŸãƒ¡ãƒ¼ãƒ«ãƒ•ã‚©ãƒ¼ãƒ ã«è„†å¼±æ€§ãŒãªã„ã‹ã€ã‚¢ãƒ‰ãƒã‚¤ã‚¹ã‚‚ã‚‰ãˆãªã„ã§ã—ã‚‡ã†ã‹ã€‚
PHPã¯ã€Webã‚µã‚¤ãƒˆæ§‹ç¯‰ã«ç‰¹åŒ–ã—ã¦é–‹ç™ºã•ã‚ŒãŸãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã§ã™ã€‚å¤§ããªç‰¹å¾´ã®ã²ã¨ã¤ã¯ã€HTMLã«ç›´æŽ¥ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’åŸ‹ã‚è¾¼ã‚€ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ç‚¹ã§ã™ã€‚PHPã‚’ç”¨ã„ã‚‹ã“ã¨ã§ã€HTMLã‚’å‹•çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã¨ã—ã¦å‡ºåŠ›ã§ãã¾ã™ã€‚HTMLãŒãã®ã¾ã¾ãƒ–ãƒ©ã‚¦ã‚¶ã«è¡¨ç¤ºã•ã‚Œã‚‹ã®ã«å¯¾ã—ã€PHPãƒ—ãƒã‚°ãƒ©ãƒ ã¯ã‚µãƒ¼ãƒå´ã§å®Ÿè¡Œã•ã‚ŒãŸçµæžœãŒãƒ–ãƒ©ã‚¦ã‚¶ã«è¡¨ç¤ºã•ã‚Œã‚‹ãŸã‚ã€PHPã‚¹ã‚¯ãƒªãƒ—ãƒˆã¯ã€Œã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã‚¹ã‚¯ãƒªãƒ—ãƒˆã€ã¨å‘¼ã°ã‚Œã¦ã„ã¾ã™ã€‚
dazed 2017/04/10
security

php

mail

form
ãƒªãƒ³ã‚¯
ã‚¹ãƒ‘ãƒ æ¥è€…ãŒãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ãƒŸã‚¹ã§ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹å…¨å…¬é–‹ã€13å„„ä»¶ä»¥ä¸Šã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’æŒã¡1æ—¥ã«æ•°å„„ä»¶ã®ã‚¹ãƒ‘ãƒ ã‚’é€ã‚Šã¤ã‘è’ç¨¼ãŽã™ã‚‹å®Ÿæ…‹ãŒåˆ¤æ˜Ž - GIGAZINE
ã‚¹ãƒ‘ãƒ ã‚’é€ã‚Šã¤ã‘ã‚‹æ¥è€…(ã‚¹ãƒ‘ãƒžãƒ¼)ãŒã€ã†ã£ã‹ã‚Šã¨ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‚’å…¬é–‹ã—ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã‹ã‚‰ã¯13å„„ä»¶ä»¥ä¸Šã‚‚ã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚„æ°åã‚’å«ã‚€ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ãŒè¦‹ã¤ã‹ã‚Šã€1æ—¥ã«10å„„ä»¶ã®ã‚¹ãƒ‘ãƒ ãƒ¡ãƒ¼ãƒ«ã‚’é€ã‚Šã¾ãã£ã¦ã„ã‚‹ãªã©ã€ã‚¹ãƒ‘ãƒžãƒ¼ã®æ‚ªè¡Œã®å®Ÿæ…‹ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ã„ã¾ã™ã€‚ Spammergate: The Fall of an Empire - Blog - MacKeeper https://mackeeper.com/blog/post/339-spammergate-the-fall-of-an-empire Spammers expose their entire operation through bad backups | CSO Online http://www.csoonline.com/article/3176433/security/spammers-expose-their
dazed 2017/03/07
mail

spam

security
ãƒªãƒ³ã‚¯
PHPMailerã®è„†å¼±æ€§ CVE-2016-10033ï¼CVE-2016-10045ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2016å¹´12æœˆ25æ—¥ã€PHPã®ãƒ¡ãƒ¼ãƒ«é€ä¿¡ãƒ©ã‚¤ãƒ–ãƒ©ãƒªPHPMailerã«ä»»æ„ã®ã‚³ãƒ¼ãƒ‰å®Ÿè¡Œå¯èƒ½ãªè„†å¼±æ€§ãŒç¢ºèªã•ã‚ŒãŸã¨ã—ã¦æƒ…å ±ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ã“ã“ã§ã¯è„†å¼±æ€§ã®é–¢é€£æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§ã®æ¦‚è¦ å¯¾è±¡ PHPMailer CVE CVE-2016-10033 CVE-2016-10045 å½±éŸ¿ RCE é‡è¦åº¦ Critical(ç™ºè¦‹è€…) ç·Šæ€¥(JVN) CVSS JPCERT/CCè©•ä¾¡ CVSSv3ï¼š5.4 (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) CVSSv2ï¼š5.5 (AV:N/AC:L/Au:S/C:P/I:P/A:N) PoC ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«å…¬é–‹æ¸ˆ CVE-2016-10033â‡’2016/12/26 CVE-2016-10045â‡’2016/12/28 ç™ºè¦‹è€…/å ±å‘Šè€… CVE-2016-10033:Dawid Golunskiæ°(
dazed 2017/01/05
php

mail

wordpress

security
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸