2019년 12월 13일 보안정보 입니다.

12월 13일 보안정보 입니다.

=================================================

+ 주요 취약점 - Microsoft Windows Kernel denial of service

1. Microsoft Windows Kernel denial of service
[요약]
denial of service
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172991

=================================================

+ 취약점 - Windows Defender Antivirus 4.18.1908.7-0 File Extension Spoofing 외 2건

1. Windows Defender Antivirus 4.18.1908.7-0 File Extension Spoofing
[요약]
file extension spoofing vulnerability
- https://packetstormsecurity.com/files/155659/Windows-Defender-Antivirus-4.18.1908.7-0-File-Extension-Spoofing.html

2. Linux Kernel information disclosure
[요약]
vulnerability to obtain sensitive information
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172990

3. Apache SpamAssassin 취약점
** (Apache SpamAssassin은 리눅스 기반 스팸 방지 솔루션)
Apache SpamAssassin denial of service (CVE-2019-12420)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172979

Apache SpamAssassin command execution (CVE-2019-11805)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/172978

=================================================

+ 보안정보 - 다시 나타난 베가 랜섬웨어의 변종, 배후에 국가 있는 듯 외 2건

1. 다시 나타난 베가 랜섬웨어의 변종, 배후에 국가 있는 듯
[요약]
베가 랜섬웨어의 변종인 제펄린, 공격 수법과 방향 크게 바뀜.
러시아 및 그 주변 국가에서는 공격이 발동되지 않고 미국 및 서유럽 국가만 피해 입도록.
게다가 돈을 벌려는 의지도 안 보임. 국가 지원 해커일 가능성 높음.
- https://www.boannews.com/media/view.asp?idx=85155

2. 보안 분석과 관제, 커다란 변화가 다가오고 있다
[요약]
불과 2년 전과 비교하더라도 업무 난이도에서 큰 차이 나타나.
CISO는 사업 전체적 맥락을 잃지 않고 신기술에 보다 열린 마음 되어야.
클라우드로의 이주를 CISO가 기획하고 담당해야
- https://www.boannews.com/media/view.asp?idx=85178

3. Intel CPU, VoltJockey(CVE-2019-11157) 취약점 발견
[요약]
마이크로 아키텍처 설계과정 중 동적 주파수 관리 모델 DVFS에 존재하는 보안취약점 떄문에 발생.
주파수 오류를 기반으로 CPU에 인젝션 하는 형식으로, 하드웨어 오류를 이용하여 CPU 하드웨어 격리설비를 공격.
유사한 형태의 TrustZone의 기타 CPU의 보안확장 하드웨어들에도 유사한 효과를 줄 수 있음.
- https://blog.alyac.co.kr/2661?category=750247

=================================================