17日 木曜日、友引

+ About the security content of Safari 14.0

https://support.apple.com/ja-jp/HT211845

CVE-2020-9948

CVE-2020-9951

CVE-2020-9952

CVE-2020-9983

+ About the security content of tvOS 14.0

https://support.apple.com/ja-jp/HT211843

CVE-2020-9979: CodeColorist of Ant-Financial LightYear Labs

CVE-2020-9976: Rias A. Sherzad of JAIDE GmbH in Hamburg, Germany

CVE-2020-9968: Adam Chester(@xpn) of TrustedSec

CVE-2020-9952

+ About the security content of watchOS 7.0

https://support.apple.com/ja-jp/HT211844

CVE-2020-9976

CVE-2020-9946

CVE-2020-9968

CVE-2020-9952

+ About the security content of iOS 14.0 and iPadOS 14.0

https://support.apple.com/ja-jp/HT211850

CVE-2020-9958

CVE-2020-9979

CVE-2020-9773

CVE-2020-9992

CVE-2020-9964

CVE-2020-9976

CVE-2020-9973

CVE-2020-9946

CVE-2020-9968

CVE-2020-9959

CVE-2020-9952

+ About the security content of Xcode 12.0

https://support.apple.com/ja-jp/HT211848

CVE-2020-9992

+ VU#490028 Microsoft Windows Netlogon Remote Protocol (MS-NRPC) uses insecure AES-CFB8 initialization vector

https://www.kb.cert.org/vuls/id/490028

CVE-2020-1472

+ ISC BIND 9.16.7, 9.11.23 released

https://downloads.isc.org/isc/bind9/9.16.7/doc/arm/html/notes.html

https://downloads.isc.org/isc/bind9/9.11.23/RELEASE-NOTES-bind-9.11.23.html

+ Apache Tomcat 9.0.38, 8.5.58 released

http://tomcat.apache.org/tomcat-9.0-doc/changelog.html#Tomcat_9.0.38_(markt)

http://tomcat.apache.org/tomcat-8.5-doc/changelog.html#Tomcat_8.5.58_(markt)

経産省と総務省がDXの指針　プライバシー保護を経営課題に

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020800017/091000427/?ST=nxt_thmit_security

いまだに衰えない「DNSキャッシュポイズニング」、対策を回避する攻撃の手口

https://xtech.nikkei.com/atcl/nxt/column/18/01419/091000003/?ST=nxt_thmit_security

電子契約サービスに新展開、主要ベンダーが目指す「プラットフォーム化」とは

https://xtech.nikkei.com/atcl/nxt/column/18/00001/04593/?ST=nxt_thmit_security

SBI証券、不正アクセスを受け顧客資金9864万円が流出

https://xtech.nikkei.com/atcl/nxt/news/18/08753/?ST=nxt_thmit_security

ゆうちょ銀行が不正出金問題で会見、109件1811万円の被害が明らかに

https://xtech.nikkei.com/atcl/nxt/column/18/01421/091600021/?ST=nxt_thmit_security

止まらぬ不正送金問題、LINE Pay・Kyash・メルペイでも被害発覚

https://xtech.nikkei.com/atcl/nxt/column/18/01421/091600020/?ST=nxt_thmit_security

UPDATE: JVNVU#92653659 ENTTEC 製 Lighting Controllers における複数の脆弱性

http://jvn.jp/vu/JVNVU92653659/index.html