[B! åŒ—æœé®®][ä¸å›½] tukananaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tukanana id:tukanana

åŒ—æœé®®ã¨ä¸å›½ã«é–¢ã™ã‚‹tukananaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

{{#following_bookmarks}}

${{author_name}}$

{{author_name}} {{created}}

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

{{/following_bookmarks}}

{{/is_wiped}}

åŒ—æœé®®ãƒãƒƒã‚«ãƒ¼ã€Œèº«ä»£é‡‘ã€ã‚’æŠ¼åŽã€€ç±³å¸æ³•çœã€ã€Œä¸å›½ã§è³‡é‡‘æ´—æµ„ã€æ˜Žã‹ã™
ç±³å¸æ³•çœã®ãƒ¢ãƒŠã‚³å¸æ³•å‰¯é•·å®˜ã¯7æœˆ19æ—¥ã€åŒ—æœé®®ã®ãƒãƒƒã‚«ãƒ¼ã«ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚’å—ã‘ãŸç±³å›½å†…ã®ç—…é™¢ãŒã€ãƒãƒƒã‚«ãƒ¼ã«æ”¯æ‰•ã£ãŸèº«ä»£é‡‘50ä¸‡ãƒ‰ãƒ«ï¼ˆç´„6900ä¸‡å††ï¼‰ã‚’æŠ¼åŽã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚åŒ—æœé®®ã®ãƒãƒƒã‚«ãƒ¼ã‚‰ã‚’æ‰‹åŠ©ã‘ã™ã‚‹ä¸å›½ã®ãƒžãƒãƒ¼ãƒãƒ³ãƒ€ãƒªãƒ³ã‚°ï¼ˆè³‡é‡‘æ´—æµ„ï¼‰æ¥è€…ãŒå˜åœ¨ã™ã‚‹ã“ã¨ã‚‚æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ã€ãƒ¯ã‚·ãƒ³ãƒˆãƒ³ï¼å¡©åŽŸæ°¸ä¹…ã€‘ç±³å¸æ³•çœã®ãƒ¢ãƒŠã‚³å¸æ³•å‰¯é•·å®˜ã¯7æœˆ19æ—¥ã€åŒ—æœé®®ã®ãƒãƒƒã‚«ãƒ¼ã«ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚’å—ã‘ãŸç±³å›½å†…ã®ç—…é™¢ãŒã€ãƒãƒƒã‚«ãƒ¼ã«æ”¯æ‰•ã£ãŸèº«ä»£é‡‘50ä¸‡ãƒ‰ãƒ«ï¼ˆç´„6900ä¸‡å††ï¼‰ã‚’æŠ¼åŽã—ãŸã¨ç™ºè¡¨ã—ãŸã€‚åŒ—æœé®®ã®ãƒãƒƒã‚«ãƒ¼ã‚‰ã‚’æ‰‹åŠ©ã‘ã™ã‚‹ä¸å›½ã®ãƒžãƒãƒ¼ãƒãƒ³ãƒ€ãƒªãƒ³ã‚°ï¼ˆè³‡é‡‘æ´—æµ„ï¼‰æ¥è€…ãŒå˜åœ¨ã™ã‚‹ã“ã¨ã‚‚æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ãƒ¢ãƒŠã‚³æ°ã¯ç±³æ±éƒ¨ãƒ‹ãƒ¥ãƒ¼ãƒ¨ãƒ¼ã‚¯å·žã®ã‚µã‚¤ãƒãƒ¼å¯¾ç–ä¼šè°ã§è¬›æ¼”ã€‚åŒ—æœé®®ãŒæ”¯æ´ã™ã‚‹ã€Œãƒžã‚¦ã‚¤ã€ã¨å‘¼ã°ã‚Œã‚‹ãƒãƒƒã‚«ãƒ¼é›†å›£ã®æ´»å‹•ã«æ‰“æ’ƒã‚’ä¸ŽãˆãŸã¨ç™ºè¡¨ã—ãŸã€‚ ãƒãƒƒã‚«ãƒ¼é›†å›£ã¯ãƒ©ãƒ³ã‚µãƒ ã‚¦ã‚¨ã‚¢ã¨å‘¼ã°ã‚Œã‚‹ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚¦ã‚¤ãƒ«ã‚¹ã‚’é€ã‚Šä»˜ã‘ã‚‹æ‰‹å£ã§çŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã€‚æ”»æ’ƒå¯¾è±¡
tukanana 2022/07/22
security

åŒ—æœé®®

ä¸å›½
ãƒªãƒ³ã‚¯
ä¸å›½ãƒ»ã‚¤ãƒ©ãƒ³ãƒ»åŒ—æœé®®ãƒ»ãƒˆãƒ«ã‚³ã®æ”¯æ´ã‚’å—ã‘ãŸãƒãƒƒã‚ãƒ³â€‹â€‹ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ãŒLog4jã®ã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã€ŒLog4Shellã€ã‚’æ‚ªç”¨ã—ã¦ã„ã‚‹ã¨MicrosoftãŒç™ºè¡¨
2021å¹´12æœˆ14æ—¥ã€MicrosoftãŒJavaã®Log4jãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«å˜åœ¨ã—ã¦ã„ãŸãƒªãƒ¢ãƒ¼ãƒˆã‚³ãƒ¼ãƒ‰å®Ÿè¡Œã‚’å¯èƒ½ã«ã™ã‚‹ã‚¼ãƒãƒ‡ã‚¤è„†å¼±æ€§ã€ŒLog4Shellã€ãŒä¸å›½ãƒ»ã‚¤ãƒ©ãƒ³ãƒ»åŒ—æœé®®ãƒ»ãƒˆãƒ«ã‚³ã«é–¢é€£ã™ã‚‹æ”¿åºœç³»ãƒãƒƒã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ã«ã‚ˆã£ã¦ç”¨ã„ã‚‰ã‚Œã‚‹ã“ã¨ã‚’ç¢ºèªã—ãŸã¨ç™ºè¡¨ã—ã¾ã—ãŸã€‚ã•ã‚‰ã«åŒæ—¥ã«ã¯ã‚¢ãƒ¡ãƒªã‚«ã®ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¤ãƒ³ãƒ•ãƒ©ã‚¹ãƒˆãƒ©ã‚¯ãƒãƒ£ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åº(CISA)ãŒè¡Œæ”¿å„çœã«å¯¾ã—ã¦Log4Shellã®ä¿®æ£ãƒ‘ãƒƒãƒã‚’12æœˆ24æ—¥ã¾ã§ã«é©ç”¨ã™ã‚‹ã‚ˆã†ã«é€šé”ã‚’å‡ºã—ã¾ã—ãŸã€‚ Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation - Microsoft Security Blog https://www.microsoft.com/security/blog/2021/12/11/guida
tukanana 2021/12/16
security

Microsoft

Java

linux

ä¸å›½

åŒ—æœé®®

ã‚¤ãƒ©ãƒ³
ãƒªãƒ³ã‚¯
Guidance for preventing, detecting, and hunting for exploitation of the Log4j 2 vulnerability | Microsoft Security Blog
January 10, 2022 recap â€“ The Log4j vulnerabilities represent a complex and high-risk situation for companies across the globe. This open-source component is widely used across many suppliersâ€™ software and services. By nature of Log4j being a component, the vulnerabilities affect not only applications that use vulnerable libraries, but also any services that use these applications, so customers may
tukanana 2021/12/16
ã€ŒMSTICã¯ã¾ãŸã€CVE-2021-44228ã®è„†å¼±æ€§ãŒã€ä¸å›½ã€ã‚¤ãƒ©ãƒ³ã€åŒ—æœé®®ã€ãŠã‚ˆã³ãƒˆãƒ«ã‚³ã‚’èµ·æºã¨ã™ã‚‹è¤‡æ•°ã®è¿½è·¡ã•ã‚ŒãŸå›½æ°‘å›½å®¶æ´»å‹•ã‚°ãƒ«ãƒ¼ãƒ—ã«ã‚ˆã£ã¦ä½¿ç”¨ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‚’ç¢ºèªã—ã¾ã—ãŸã€‚ã€

security

Microsoft

ä¸å›½

ã‚¤ãƒ©ãƒ³

åŒ—æœé®®
ãƒªãƒ³ã‚¯
ã€ç‰¹åˆ¥å¯¾è«‡ã€‘å…ƒæ‹…å½“è¨˜è€…ãŒèªžã‚Šã¤ãã™ã€ŒåŒ—æœé®®ã€ã®çœŸå®Ÿã«è¿«ã‚‹è¡“ï¼ˆä¸Šï¼‰ï¼šåŸŽå†…åº·ä¼¸,å¡šæœ¬å£®ä¸€ | è¨˜äº‹ | æ–°æ½®ç¤¾ã€€Foresight(ãƒ•ã‚©ãƒ¼ã‚µã‚¤ãƒˆ) | ä¼šå“¡åˆ¶å›½éš›æƒ…å ±ã‚µã‚¤ãƒˆ
tukanana 2021/11/12
security

åŒ—æœé®®

ä¸å›½
ãƒªãƒ³ã‚¯
APT trends report Q3 2021
tukanana 2021/10/27
security

èª¿æŸ»

ãƒã‚·ã‚¢

ä¸å›½

åŒ—æœé®®
ãƒªãƒ³ã‚¯
æ¨™çš„åž‹æ”»æ’ƒã®å®Ÿæ…‹ã¨å¯¾ç–ã‚¢ãƒ—ãƒãƒ¼ãƒ ç¬¬5ç‰ˆ æ—¥æœ¬ã‚’ç‹™ã†ã‚µã‚¤ãƒãƒ¼ã‚¨ã‚¹ãƒ”ã‚ªãƒŠãƒ¼ã‚¸ã®å‹•å‘2020å¹´åº¦ - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£äº‹æ¥ - ãƒžã‚¯ãƒ‹ã‚«
ãƒ¬ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ 2020å¹´åº¦ (2020å¹´4æœˆã‹ã‚‰2021å¹´3æœˆ) ã«è¦³æ¸¬ã•ã‚ŒãŸã€æ—¥æœ¬ã®çµ„ç¹”ã‹ã‚‰æ©Ÿå¯†æƒ…å ± (å€‹äººæƒ…å ±ã€æ”¿ç–é–¢é€£æƒ…å ±ã€è£½é€ ãƒ‡ãƒ¼ã‚¿ãªã©) ã‚’çªƒå–ã—ã‚ˆã†ã¨ã™ã‚‹æ”»æ’ƒã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã«é–¢ã™ã‚‹åˆ†æžå†…å®¹ã‚’ã€æ³¨æ„å–šèµ·ã‚’ç›®çš„ã¨ã—ã¦è¨˜è¼‰ã—ã¦ã„ã¾ã™ã€‚ã‚¹ãƒ†ãƒ«ã‚¹æ€§ã®é«˜ã„é éš”æ“ä½œãƒžãƒ«ã‚¦ã‚§ã‚¢ (RAT) ã‚’ç”¨ã„ãŸäº‹æ¡ˆã‚’ä¸å¿ƒã«ã€æ–°ã—ã„æ”»æ’ƒæ‰‹æ³•ã‚„ãã®è„…å¨ã®æ¤œå‡ºã«ã¤ã„ã¦è¨˜è¼‰ã—ã¦ã„ã¾ã™ã€‚ ãƒ¬ãƒãƒ¼ãƒˆã®æœ€å¾Œã«ã¯ã€æœ¬æ–‡ä¸ã§ç´¹ä»‹ã—ãŸæ”»æ’ƒã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã§ä½¿ã‚ã‚ŒãŸã‚¤ãƒ³ãƒ‡ã‚£ã‚±ãƒ¼ã‚¿ã‚’æŽ²è¼‰ã—ã¦ã„ã¾ã™ã€‚ æ”»æ’ƒã®ã‚¿ã‚¤ãƒ ãƒ©ã‚¤ãƒ³ã¨æ”»æ’ƒãŒè¦³æ¸¬ã•ã‚ŒãŸæ¥ç¨® 2020å¹´åº¦ã®æ”»æ’ƒå‹•å‘ã¯ã€å‰å¹´åº¦ã®è¦³æ¸¬1ã¨æ¯”è¼ƒã™ã‚‹ã¨ã€2019å¹´åº¦ã«æ¯”è¼ƒçš„æ´»ç™ºã§ã‚ã£ãŸå›½å†…ã®çµ„ç¹”ã‚’æ¨™çš„ã¨ã—ãŸTickã¨BlackTechæ”»æ’ƒã‚°ãƒ«ãƒ¼ãƒ—ã®æ´»å‹•ãŒä½Žä¸‹ã—ã€LODEINFOãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’ä½¿ã†APT10æ”»æ’ƒã‚°ãƒ«ãƒ¼ãƒ—ã€A41APTæ”»æ’ƒã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã®å ±å‘Šã•ã‚ŒãŸAPT10æ”»æ’ƒã‚°ãƒ«ãƒ¼ãƒ—ã®æ”»æ’ƒãŒæ´»ç™º
tukanana 2021/05/25
security

ä¸å›½

åŒ—æœé®®

èª¿æŸ»
ãƒªãƒ³ã‚¯
APT trends report Q2 2020
tukanana 2020/07/31
security

ä¸å›½

ãƒã‚·ã‚¢

åŒ—æœé®®
ãƒªãƒ³ã‚¯
EU imposes the first ever sanctions against cyber-attacks
tukanana 2020/07/31
security

EU

ä¸å›½

ãƒã‚·ã‚¢

åŒ—æœé®®
ãƒªãƒ³ã‚¯
APT trends report Q1 2019
tukanana 2019/05/08
security

ä¸å›½

ãƒã‚·ã‚¢

åŒ—æœé®®
ãƒªãƒ³ã‚¯
åŒ—æœé®®ã®â€œå›½å®¶æ”¯æ´åž‹â€ã‚µã‚¤ãƒãƒ¼æ”»æ’ƒã‚°ãƒ«ãƒ¼ãƒ—ã€æ—¥æœ¬ã‚’ç‹™ã†ã€ŒAPT37ã€ã¨é‡‘èžæ©Ÿé–¢ã‚’æ¨™çš„ã«ã™ã‚‹ã€ŒAPT38ã€ã€€
tukanana 2019/04/23
security

ä¸å›½

åŒ—æœé®®
ãƒªãƒ³ã‚¯
åŒ—æœé®®ã‚’éžé›£ã™ã‚‹å›½é€£äººæ¨©å ±å‘Šæ›¸ã¨ä¸å›½ã®ã€Œ2ã¤ã®æ‡¸å¿µã€
tukanana 2014/04/06
åŒ—æœé®®ã‚’äººæ¨©å•é¡Œã§éžé›£ã™ã‚‹ã¨ä¸å›½ã«ç«ã®ç²‰ãŒé£›ã‚“ã§ãã‚‹ã®ã§ä¸å›½ã®æ…‹åº¦ãŒâ€¦(ä»¥ä¸‹ç•¥

åŒ—æœé®®

ä¸å›½
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@HatenaBookmark
ãƒªãƒªãƒ¼ã‚¹ã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“ã‚¹ã®ãŠçŸ¥ã‚‰ã›
@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx