プãƒã‚°ãƒ©ãƒ 言語ã®Pythonã¨PHPã®ãƒ©ã‚¤ãƒ–ラリãŒä¹—ã£å–られã¦æ‚ªæ„ã®ã‚ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå…¬é–‹ã€é–‹ç™ºè€…ã®æƒ…å ±ãŒåŽé›†ã•ã‚Œã‚‹ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã§ã‚ã‚‹Pythonを開発ã«ç”¨ã„ã‚‹ãŸã‚ã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®äººæ°—ãªã‚‚ã®ã®ã²ã¨ã¤ã§ã‚る「ctxã€ãŒã€ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’å–å¾—ã—ãŸé–‹ç™ºè€…ã®æƒ…å ±ã‚’ä¾µå®³ã™ã‚‹æ‚ªæ„ã‚ã‚‹å¤‰æ›´ã‚’åŠ ãˆã‚‰ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ã¾ãŸã€ã‚ªãƒ¼ãƒ—ンソースã®ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°è¨€èªžã§ã‚ã‚‹PHPã®å…¨250万回以上ダウンãƒãƒ¼ãƒ‰ã•ã‚ŒãŸãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ã‚る「phpassã€ã«ã‚‚悪æ„ã®ã‚ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå«ã¾ã‚Œã¦ã„ãŸã¨å ±ã˜ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ Popular Python and PHP libraries hijacked to steal AWS keys https://www.bleepingcomputer.com/news/security/popular-python-and-php-libraries-hijacked-to-steal-aws-keys/ PyPI package 'ctx' and PHP library 'phpass'
{{#tags}}- {{label}}
{{/tags}}