{"id":2588,"date":"2023-12-15T11:34:21","date_gmt":"2023-12-15T11:34:21","guid":{"rendered":"https:\/\/chuyendoiso.haiphong.gov.vn\/?p=2588"},"modified":"2024-04-23T11:36:17","modified_gmt":"2024-04-23T11:36:17","slug":"lo-hong-zero-day-co-the-dan-den-cac-cuoc-tan-cong-dien-rong","status":"publish","type":"post","link":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/2023\/12\/15\/lo-hong-zero-day-co-the-dan-den-cac-cuoc-tan-cong-dien-rong\/","title":{"rendered":"L\u1ed7 h\u1ed5ng Zero-day c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng di\u1ec7n r\u1ed9ng"},"content":{"rendered":"
<\/p>\n
\"zero.jpg\"<\/a><\/div>\n

<\/p>\n

\n
\n
\n

An to\u00e0n th\u00f4ng tin<\/span><\/p>\n

L\u1ed7 h\u1ed5ng Zero-day c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng di\u1ec7n r\u1ed9ng<\/h1>\n
NM<\/span> \u2022<\/span> 22:09 13\/12\/2023<\/span><\/div>\n

Nh\u1eb1m \u0111\u1ea3m b\u1ea3o an to\u00e0n th\u00f4ng tin (ATTT) cho h\u1ec7 th\u1ed1ng th\u00f4ng tin c\u1ee7a t\u1ed5 ch\u1ee9c, g\u00f3p ph\u1ea7n b\u1ea3o \u0111\u1ea3m an to\u00e0n cho kh\u00f4ng gian m\u1ea1ng Vi\u1ec7t Nam, th\u1eddi gian qua, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia (NCSC), C\u1ee5c ATTT \u2013 B\u1ed9 TT&TT lu\u00f4n n\u1ed7 l\u1ef1c, t\u00edch c\u1ef1c t\u00ecm ki\u1ebfm, ph\u00e1t hi\u1ec7n, \u0111\u01b0a ra gi\u1ea3i ph\u00e1p, c\u00f9ng c\u00e1c khuy\u1ebfn ngh\u1ecb x\u1eed l\u00fd.<\/p>\n<\/div>\n

<\/div>\n<\/div>\n

K\u1ebb ph\u00e1 ho\u1ea1i t\u1ea5n c\u00f4ng b\u1ea3o m\u1eadt, d\u1eef li\u1ec7u<\/b><\/b><\/p>\n

Theo NCSC, hi\u1ec7n \u0111ang di\u1ec5n ra t\u00ecnh tr\u1ea1ng lo ng\u1ea1i, b\u00e1o \u0111\u1ed9ng v\u1ec1 h\u00e0nh vi s\u1eed d\u1ee5ng l\u1ed7 h\u1ed5ng Zero-day \u0111\u1ec3 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng th\u01b0 \u0111i\u1ec7n t\u1eed ng\u01b0\u1eddi d\u00f9ng, c\u00e1c t\u1ed5 ch\u1ee9c, DN s\u1eed d\u1ee5ng Zimbra.<\/p>\n

C\u1ee5 th\u1ec3, l\u1ed7 h\u1ed5ng Zero-day hi\u1ec7n nay ch\u01b0a t\u1eebng \u0111\u01b0\u1ee3c ghi nh\u1eadn trong c\u00e1c b\u1ea3n v\u00e1 tr\u01b0\u1edbc \u0111\u00e2y, mang t\u00ean Cross-site scripting (XSS) v\u00e0 \u1ee9ng d\u1ee5ng Zimbra hi\u1ec7n \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ph\u1ed5 bi\u1ebfn b\u1edfi h\u01a1n 200.000 DN tr\u00ean 140 qu\u1ed1c gia (bao g\u1ed3m nhi\u1ec1u t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7 v\u00e0 t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh tr\u00ean to\u00e0n th\u1ebf gi\u1edbi; Vi\u1ec7t Nam c\u00f3 kho\u1ea3ng h\u01a1n 1.000 t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi l\u1ed7 h\u1ed5ng Zero-day).<\/p>\n

\"zero.jpg\"
L\u1ed7 h\u1ed5ng Zero-day mang s\u1ee9c m\u1ea1ng ph\u00e1 ho\u1ea1i.<\/figcaption><\/figure>\n

XSS mang s\u1ee9c m\u1ea1nh ph\u00e1 ho\u1ea1i, c\u00f3 kh\u1ea3 n\u0103ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn t\u00ednh b\u1ea3o m\u1eadt v\u00e0 t\u00ednh to\u00e0n v\u1eb9n d\u1eef li\u1ec7u. H\u01a1n n\u1eefa, k\u1ebb t\u1ea5n c\u00f4ng n\u00e0y c\u00f3 th\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin nh\u1ea1y c\u1ea3m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng ho\u1eb7c th\u1ef1c thi m\u00e3 \u0111\u1ed9c tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb \u1ea3nh h\u01b0\u1edfng. \u0110\u1ed3ng th\u1eddi, trong qu\u00e1 tr\u00ecnh \u0111i\u1ec1u tra ghi nh\u1eadn nhi\u1ec1u t\u1ed5 ch\u1ee9c tr\u00ean th\u1ebf gi\u1edbi \u0111ang b\u1ecb t\u1ea5n c\u00f4ng b\u1edfi l\u1ed7 h\u1ed5ng n\u00e0y.<\/p>\n

Hi\u1ec7n t\u1ea1i, nh\u00e0 ph\u00e1t tri\u1ec3n ch\u01b0a c\u00f3 b\u1ea3n v\u00e1 cho l\u1ed7 h\u1ed5ng n\u00e0y, NCSC \u0111\u00e3 ti\u1ebfn h\u00e0nh g\u1eedi th\u00f4ng tin ph\u00e2n t\u00edch \u0111\u1ebfn nh\u00e0 ph\u00e1t tri\u1ec3n Zimbra \u0111\u1ec3 s\u1edbm \u0111\u01b0a ra bi\u1ec7n ph\u00e1p kh\u1eafc ph\u1ee5c v\u00e0 ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1.<\/p>\n

N\u00f3i c\u00e1ch kh\u00e1c, l\u1ed7 h\u1ed5ng DOM-based XSS b\u00ean trong m\u1ed9t t\u00ednh n\u0103ng c\u1ee7a Zimbra Mail Server; \u1ea3nh h\u01b0\u1edfng: Zimbra Mail Server \u2264 8.8.15 GA Release Patch 44, m\u1ed9t s\u1ed1 phi\u00ean b\u1ea3n c\u0169 c\u1ee7a c\u00e1c b\u1ea3n 9.x.x v\u00e0 10.x.x<\/p>\n

\u201cV\u00ec v\u1eady, l\u1ed7 h\u1ed5ng ATTT n\u00e0y c\u00f3 \u0111\u1ed9<\/i> \u1ea3nh h\u01b0\u1edfng t\u01b0\u01a1ng \u0111\u1ed1i l\u1edbn, c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng di\u1ec7n r\u1ed9ng\u201d,<\/i> <\/i>NCSC cho bi\u1ebft.<\/p>\n

T\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t, s\u1eb5n s\u00e0ng ph\u01b0\u01a1ng \u00e1n x\u1eed <\/b><\/b><\/p>\n

\u0110\u1ec3 hi\u1ec3u r\u00f5 v\u1ec1 nh\u1eefng nguy h\u1ea1i c\u0169ng nh\u01b0 \u0111\u01b0a ra c\u00e1c gi\u1ea3i ph\u00e1p an to\u00e0n, NCSC khuy\u1ebfn ngh\u1ecb ng\u01b0\u1eddi d\u00f9ng, c\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n nhanh ch\u00f3ng r\u00e0 so\u00e1t v\u00e0 th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p gi\u1ea3m thi\u1ec3u r\u1ee7i ro tr\u00ean m\u00e1y ch\u1ee7 th\u01b0 \u0111i\u1ec7n t\u1eed, \u0111\u1eb7c bi\u1ec7t l\u00e0 l\u1ed7 h\u1ed5ng XSS.<\/p>\n

C\u00f9ng v\u1edbi \u0111\u00f3, t\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t v\u00e0 s\u1eb5n s\u00e0ng ph\u01b0\u01a1ng \u00e1n x\u1eed l\u00fd khi ph\u00e1t hi\u1ec7n c\u00f3 d\u1ea5u hi\u1ec7u b\u1ecb khai th\u00e1c, t\u1ea5n c\u00f4ng m\u1ea1ng; \u0111\u1ed3ng th\u1eddi th\u01b0\u1eddng xuy\u00ean theo d\u00f5i k\u00eanh c\u1ea3nh b\u00e1o c\u1ee7a c\u00e1c c\u01a1 quan ch\u1ee9c n\u0103ng v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c uy t\u00edn v\u1ec1 ATTT \u0111\u1ec3 ph\u00e1t hi\u1ec7n k\u1ecbp th\u1eddi c\u00e1c nguy c\u01a1 t\u1ea5n c\u00f4ng m\u1ea1ng.<\/p>\n

\u201cTrong tr\u01b0\u1eddng h\u1ee3p b\u1ecb t\u1ea5n c\u00f4ng, h\u01b0\u1edbng kh\u1eafc ph\u1ee5 t\u1ea1m th\u1eddi hi\u1ec7u qu\u1ea3 ch\u00ednh l\u00e0 \u00e1p d\u1ee5ng vi\u1ec7c ng\u0103n ch\u1eb7n truy c\u1eadp mail Zimbra th\u00f4ng qua tr\u00ecnh duy\u1ec7t. V\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ea7n s\u1eed d\u1ee5ng email c\u00f3 th\u1ec3 truy c\u1eadp th\u00f4ng qua c\u00e1c \u1ee9ng d\u1ee5ng Outlook, Thunderbird\u2026. ho\u1eb7c thay \u0111\u1ed5i m\u1eadt kh\u1ea9u v\u00e0 t\u1ef1 r\u00e0 so\u00e1t email \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng (n\u1ebfu c\u00f3)\u201d<\/i>, NCSC khuy\u1ebfn ngh\u1ecb.<\/p>\n

\n

Trong tr\u01b0\u1eddng h\u1ee3p c\u1ea7n thi\u1ebft c\u00f3 th\u1ec3 li\u00ean h\u1ec7 \u0111\u1ea7u m\u1ed1i h\u1ed7 tr\u1ee3 c\u1ee7a C\u1ee5c ATTT: \u00d4ng Nguy\u1ec5n V\u0103n Chung, Tr\u01b0\u1edfng ph\u00f2ng Gi\u00e1m s\u00e1t ATTT, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia, C\u1ee5c ATTT; s\u1ed1 \u0111i\u1ec7n tho\u1ea1i: 0345551337; th\u01b0 \u0111i\u1ec7n t\u1eed: nvchung@mic.gov.vn.\/.<\/p>\n<\/div>\n

<\/div>\n
\n
\n
\n
<\/div>\n
Ngu\u1ed3n: https:\/\/ictvietnam.vn\/lo-hong-zero-day-co-the-dan-den-cac-cuoc-tan-cong-dien-rong-61996.html<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

An to\u00e0n th\u00f4ng tin L\u1ed7 h\u1ed5ng Zero-day c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng di\u1ec7n r\u1ed9ng NM \u2022 22:09 13\/12\/2023 Nh\u1eb1m \u0111\u1ea3m b\u1ea3o an to\u00e0n th\u00f4ng tin (ATTT) cho h\u1ec7 th\u1ed1ng th\u00f4ng tin c\u1ee7a t\u1ed5 ch\u1ee9c, g\u00f3p ph\u1ea7n b\u1ea3o \u0111\u1ea3m an to\u00e0n cho kh\u00f4ng gian m\u1ea1ng Vi\u1ec7t Nam, th\u1eddi gian qua, Trung t\u00e2m Gi\u00e1m […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[13],"tags":[],"class_list":{"0":"post-2588","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-tin-tuc"},"_links":{"self":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2588","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/comments?post=2588"}],"version-history":[{"count":2,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2588\/revisions"}],"predecessor-version":[{"id":2657,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/2588\/revisions\/2657"}],"wp:attachment":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media?parent=2588"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/categories?post=2588"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/tags?post=2588"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}