2020년 2월 4일 보안정보 스크래핑

2월 4일 보안정보 스크래핑

=================================================

+ 주요 취약점 - 특이사항 없음

=================================================

+ 취약점 - Intel Processor 취약점 외 2건

1. Intel Processor 취약점
Intel Processor Identification Utility denial of service
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175496

Intel Processor Identification Utility privilege escalation
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175495

Intel Processor Identification Utility privilege escalation
- https://exchange.xforce.ibmcloud.com/vulnerabilities/175494

2. Jira 8.3.4 - Information Disclosure (Username Enumeration) (CVE-2019-8449)
Exploit Type: information disclosure vulnerability
- https://www.exploit-db.com/exploits/47990

3. phpList 3.5.0 - Authentication Bypass
Exploit Type: authentication bypass vulnerability
- https://www.exploit-db.com/exploits/47989

=================================================

+ 보안이슈 - ICS 시스템의 프로세스 노리는 랜섬웨어, 에칸스 등장 외 2건

1. ICS 시스템의 프로세스 노리는 랜섬웨어, 에칸스 등장
에칸스, ICS의 프로세스 찾아 죽이는 랜섬웨어.
하지만 죽이는 프로세스의 수가 많지는 않음. 64개에 불과.
이번 기회에 ICS 관리자들은 프로세스들에 대한 가시성 확보하는 것이 중요.
- https://www.boannews.com/media/view.asp?idx=86150

2. 라자루스의 파트너 트릭봇, 새로운 탐지 회피 기능 탑재해
꾸준한 발전이 특징인 트릭봇, 이번에 윈도우 10 보안 기능 우회하는 기술 탑재.
우회할 뿐만 아니라 권한도 높이고 여러 엔드포인트에 접근해 트릭봇에 감염시킴.
여러 범죄 단체와의 파트너십을 올해에도 계속 모색할 것.
- https://www.boannews.com/media/view.asp?idx=86147

3. 기업 노리는 새로운 사이버 위협 ‘AD 탈취’ 보안대책 집중해부
AD 관리자가 피해야할 6가지 AD 운영사례 살펴보니
AD계정 보호를 위한 5가지 대책 제시
- https://www.boannews.com/media/view.asp?idx=86125

=================================================