16日 火曜日、赤口

+ Mozilla Thunderbird 52.1.1 released
https://www.mozilla.org/en-US/thunderbird/52.1.1/releasenotes/

+ Cisco Snort++ Protocol Decoder Denial of Service Vulnerabilities
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170515-snort
CVE-2017-6657
CVE-2017-6658

+ MS17-010 (Ransomware WannaCry) Impact to Cisco Products
https://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20170515

+ SA76969 PostgreSQL Download Server Spoofing Vulnerability
https://secuniaresearch.flexerasoftware.com/advisories/76969/
CVE-2016-7048

+ hitachi-sec-2017-113 Multiple Vulnerabilities in Cosminexus XML Processor
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-113/index.html
CVE-2014-0107
CVE-2014-0376

+ hitachi-sec-2017-112 Multiple Vulnerabilities in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager
http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/hitachi-sec-2017-112/index.html

+ hitachi-sec-2017-113 Cosminexus XML Processorにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-113/index.html
CVE-2014-0107
CVE-2014-0376

+ hitachi-sec-2017-112 Hitachi IT Operations Director, JP1/IT Desktop Management - Manager, JP1/IT Desktop Management 2 - Managerにおける複数の脆弱性
http://www.hitachi.co.jp/Prod/comp/soft1/security/info/vuls/hitachi-sec-2017-112/index.html

+ Google Chrome Denial of Service Vulnerability
https://cxsecurity.com/issue/WLB-2017050096

+ About the security content of macOS Sierra 10.12.5, Security Update 2017-002 El Capitan, and Security Update 2017-002 Yosemite
https://support.apple.com/en-us/HT207797

+ KDE kauth and kdelibs Logic Flaw Lets Local Users Obtain Root Privileges
http://www.securitytracker.com/id/1038480
CVE-2017-8422

+ Git Lets Remote Authenticated Users Escape the 'git-shell' and Gain Elevated Privileges
http://www.securitytracker.com/id/1038479
CVE-2017-8386

VPNの素朴な疑問
固定IP料金をケチってインターネットVPNをどうして使えるの？
http://itpro.nikkeibp.co.jp/atcl/column/17/050100176/050100002/?ST=security&itp_list_theme

「日本はルーターに守られた」、WannaCry流行でトレンドマイクロが分析
http://itpro.nikkeibp.co.jp/atcl/news/17/051501407/?ST=security&itp_list_theme

デバッグ市場は「波立っている」、ローソン玉塚会長がHUG社長就任で抱負
http://itpro.nikkeibp.co.jp/atcl/news/17/051501406/?ST=security&itp_list_theme

ITproアーカイブス
ランサムウエア「WannaCry」関連記事
http://itpro.nikkeibp.co.jp/atcl/column/17/040700124/051500002/?ST=security&itp_list_theme

ニュース解説
国内襲い始めたWannaCry、日立やJR東など600カ所2000端末で感染
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/051500971/?ST=security&itp_list_theme

「XPにも例外的にパッチ提供」、マイクロソフトがWannaCryで対処策
http://itpro.nikkeibp.co.jp/atcl/news/17/051501399/?ST=security&itp_list_theme

ニュース解説
ランサムウエア「WannaCry」が感染拡大した理由
http://itpro.nikkeibp.co.jp/atcl/column/14/346926/051500970/?ST=security&itp_list_theme

シリコンバレーNextレポート
米NSAが隠蔽したXPの脆弱性、WannaCryが狙う
http://itpro.nikkeibp.co.jp/atcl/column/15/061500148/051500108/?ST=security&itp_list_theme

世界規模のサイバー攻撃、「被害拡大に警戒を」当局が呼びかけ
http://itpro.nikkeibp.co.jp/atcl/news/17/051501397/?ST=security&itp_list_theme

Linux Security Week: May 15th, 2017
http://www.linuxsecurity.com/content/view/171500/187/

Lessons from last week’s cyberattack
http://www.linuxsecurity.com/content/view/171498/169/

More UPNP woes: Crashable library bites routers and software
http://www.linuxsecurity.com/content/view/171497/169/

Gmail Docs phishing attack: Google targets devs with tighter web app ID checks
http://www.linuxsecurity.com/content/view/171496/169/

Microsoft blames US stockpiled vulnerability for ransomware attack
http://www.linuxsecurity.com/content/view/171495/169/