2020년 2월 10일 보안정보 스크래핑

2월 10일 보안정보 스크래핑

=================================================

+ 주요 취약점 - 특이사항 없음

=================================================

+ 취약점 - macOS/iOS 취약점

1. macOS/iOS 취약점
macOS/iOS IOAccelCommandQueue2::processSegmentKernelCommand() Out-Of-Bounds Timestamp Write
- https://packetstormsecurity.com/files/156261/macOS-iOS-IOAccelCommandQueue2-processSegmentKernelCommand-Out-Of-Bounds-Timestamp-Write.html

macOS/iOS ImageIO PVR Processing Out-Of-Bounds Read
- https://packetstormsecurity.com/files/156260/macOS-iOS-ImageIO-PVR-Processing-Out-Of-Bounds-Read.html

macOS/iOS ImageIO PVR Image Processing Heap Corruption
- https://packetstormsecurity.com/files/156259/macOS-iOS-ImageIO-PVR-Image-Processing-Heap-Corruption.html

macOS/iOS XNU mk_timer_create_trap() Race Condition
- https://packetstormsecurity.com/files/156256/macOS-iOS-XNU-mk_timer_create_trap-Race-Condition.html

macOS ImageIO JPEG Out-Of-Bounds Write
- https://packetstormsecurity.com/files/156254/macOS-ImageIO-JPEG-Out-Of-Bounds-Write.html

macOS/iOS kern_stack_snapshot_internal() Userspace Share Issue
- https://packetstormsecurity.com/files/156253/macOS-iOS-kern_stack_snapshot_internal-Userspace-Share-Issue.html

macOS/iOS ImageIO DDS Image Out-Of-Bounds Read
- https://packetstormsecurity.com/files/156252/macOS-iOS-ImageIO-DDS-Image-Out-Of-Bounds-Read.html

=================================================

+ 보안이슈 - 안티바이러스 프로세스를 중단시키기 위해 GIGABYTE 드라이버를 사용하는 랜섬웨어 발견 외 2건

1. 안티바이러스 프로세스를 중단시키기 위해 GIGABYTE 드라이버를 사용하는 랜섬웨어 발견
보안 프로세스를 종료하기 위해 신뢰할 수 있는 드라이버 활용해
Steel.exe가 보안 소프트웨어를 모두 종료시키면, 랜섬웨어가 탐지될 걱정 없이 시스템을 암호화할 수 있는 상태가 됨
- https://www.bleepingcomputer.com/news/security/ransomware-exploits-gigabyte-driver-to-kill-av-processes/

2. 해커는 화면 밝기를 사용하여 에어 갭 컴퓨터에서 민감한 데이터를 유출 할 수 있습니다
새로운 사이버 보안 연구에 따르면 공격자는 화면 밝기를 조작하여 에어 갭 컴퓨터에서 민감한 정보를 유출
침입자는 침입 탐지 시스템 (IDS), 방화벽 및 AV 프로그램을 우회하여 데이터를 유출 할 수 있음
- https://gbhackers.com/optical-covert-channel/

3. 이 와중에…기업 타깃 신종 코로나 사칭 피싱 공격 포착
첨부파일 실행 시 악성코드 감염
피싱 메일은 영문으로 작성됐지만 향후 국문으로 된 메일도 등장할 수 있어
- http://www.inews24.com/view/1241331

=================================================