2020년 1월 10일 보안정보 입니다.

1월 10일 보안정보 입니다.

=================================================

+ 주요 취약점 - Cisco Releases Security Updates for Multiple Products 외 1건

1. Cisco Releases Security Updates for Multiple Products
Cisco has released security updates to address vulnerabilities in Cisco Webex Video Mesh, Cisco IOS, and Cisco IOS XE Software
- https://tools.cisco.com/security/center/publicationListing.x

2. Juniper Networks Releases Security Updates
Juniper Networks has released security updates to address multiple vulnerabilities in various Juniper products
- https://kb.juniper.net/InfoCenter/index?page=content&channel=SECURITY_ADVISORIES

=================================================

+ 취약점 - Oracle Weblogic 10.3.6.0.0 Remote Command Execution

1. Oracle Weblogic 10.3.6.0.0 Remote Command Execution
remote command execution exploit
- https://packetstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.html
=================================================

+ 보안정보 - 북한의 라자루스, 암호화폐 거래소 터는 실력 늘어났다 외 2건

1. 북한의 라자루스, 암호화폐 거래소 터는 실력 늘어났다
라자루스, 지금도 계속해서 암호화폐 거래소와 사업체 노리고 있음.
최근 맥OS용 멀웨어가 특히 크게 향상이 됨.
최종 페이로드 심는 방법과 전략도 바뀜. 이들의 강력한 의지 나타냄.
- https://www.boannews.com/media/view.asp?idx=85690

2. 말 많고 탈 많은 이메일, 새 보안 표준들 나오고 있다
이메일, 어쩌면 인류 역사 상 가장 보편적인 통신 수단...하지만 오래된 기술
이메일 보안의 핵심은 보낸 사람의 신원 확인이 어렵다는 것...해결책 등장하기도
- https://www.boannews.com/media/view.asp?idx=85669

3. 소디노키비, 갠드크랩 뒤이어 2019년 최다 유포 랜섬웨어 되다
2019년 4분기 랜섬웨어 공격 총 20만여 건 차단...소디노키비 최다 유포돼
지난 분기에 이어 ‘소디노키비’ 랜섬웨어 최다 유포, 급증하고 있는 ‘넴티’ 랜섬웨어도 각별한 주의 필요
‘비너스락커’ 조직, 2016년 말부터 꾸준히 한국 맞춤형 공격수법 사용해 다양한 랜섬웨어 유포 중
- https://www.boannews.com/media/view.asp?idx=85663
=================================================