24日 月曜日、大安

+ Option to Copy Production Data to sandbox unavailable

https://jira-service-management.status.atlassian.com/incidents/cbpq4dnn069n

https://confluence.status.atlassian.com/incidents/ptl3ndgnz78l

+ RHSA-2024:4036 Important: thunderbird security update

https://access.redhat.com/errata/RHSA-2024:4036

CVE-2024-5688

CVE-2024-5690

CVE-2024-5691

CVE-2024-5693

CVE-2024-5696

CVE-2024-5700

CVE-2024-5702

+ RHSA-2024:4000 Important: ghostscript security update

https://access.redhat.com/errata/RHSA-2024:4000

CVE-2024-33871

+ Mozilla Thunderbird 115.12.2 released

https://www.thunderbird.net/en-US/thunderbird/115.12.2/releasenotes/

+ Linux Kernelの脆弱性（CVE-2024-31076 ～ CVE-2024-38780）

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20240622/

CVE-2024-31076

CVE-2024-33619

CVE-2024-34777

CVE-2024-36244

CVE-2024-36270

CVE-2024-36281

CVE-2024-36286

CVE-2024-36288

CVE-2024-36477

CVE-2024-36478

CVE-2024-36481

CVE-2024-36484

CVE-2024-36489

CVE-2024-37353

CVE-2024-37356

CVE-2024-38381

CVE-2024-38388

CVE-2024-38390

CVE-2024-38391

CVE-2024-38620

CVE-2024-38621

CVE-2024-38622

CVE-2024-38623

CVE-2024-38624

CVE-2024-38625

CVE-2024-38626

CVE-2024-38627

CVE-2024-38628

CVE-2024-38629

CVE-2024-38630

CVE-2024-38631

CVE-2024-38632

CVE-2024-38633

CVE-2024-38634

CVE-2024-38635

CVE-2024-38636

CVE-2024-38637

CVE-2024-38659

CVE-2024-38662

CVE-2024-38780

+ Linux Kernelの脆弱性（CVE-2024-38538 ～ CVE-2024-38618）

https://security.sios.jp/vulnerability/kernel-security-vulnerability-20240621/

CVE-2024-38538

CVE-2024-38539

CVE-2024-38540

CVE-2024-38541

CVE-2024-38542

CVE-2024-38543

CVE-2024-38544

CVE-2024-38545

CVE-2024-38546

CVE-2024-38547

CVE-2024-38548

CVE-2024-38549

CVE-2024-38550

CVE-2024-38551

CVE-2024-38552

CVE-2024-38553

CVE-2024-38554

CVE-2024-38555

CVE-2024-38556

CVE-2024-38557

CVE-2024-38558

CVE-2024-38559

CVE-2024-38560

CVE-2024-38561

CVE-2024-38562

CVE-2024-38563

CVE-2024-38564

CVE-2024-38565

CVE-2024-38566

CVE-2024-38567

CVE-2024-38568

CVE-2024-38569

CVE-2024-38570

CVE-2024-38571

CVE-2024-38572

CVE-2024-38573

CVE-2024-38574

CVE-2024-38575

CVE-2024-38576

CVE-2024-38577

CVE-2024-38578

CVE-2024-38579

CVE-2024-38580

CVE-2024-38581

CVE-2024-38582

CVE-2024-38583

CVE-2024-38584

CVE-2024-38585

CVE-2024-38586

CVE-2024-38587

CVE-2024-38588

CVE-2024-38589

CVE-2024-38590

CVE-2024-38591

CVE-2024-38592

CVE-2024-38593

CVE-2024-38594

CVE-2024-38595

CVE-2024-38596

CVE-2024-38597

CVE-2024-38598

CVE-2024-38599

CVE-2024-38600

CVE-2024-38601

CVE-2024-38602

CVE-2024-38603

CVE-2024-38604

CVE-2024-38605

CVE-2024-38606

CVE-2024-38607

CVE-2024-38608

CVE-2024-38609

CVE-2024-38610

CVE-2024-38611

CVE-2024-38612

CVE-2024-38613

CVE-2024-38614

CVE-2024-38615

CVE-2024-38616

CVE-2024-38617

CVE-2024-38618

JVNVU#97110647 CAREL製Boss-Miniにおけるパストラバーサルの脆弱性

https://jvn.jp/vu/JVNVU97110647/index.html

JVNVU#90096964 Westermo製L210-F2Gにおける複数の脆弱性

https://jvn.jp/vu/JVNVU90096964/index.html

JVNVU#94388667 横河電機製CENTUM CAMSログサーバーにおける不十分なアクセス権設定の脆弱性

https://jvn.jp/vu/JVNVU94388667/index.html

JVNVU#98754764 三菱電機製放電加工機におけるリモートコード実行の脆弱性

https://jvn.jp/vu/JVNVU98754764/index.html

JVNVU#91384468 LINE client for iOSにおけるユニバーサルクロスサイトスクリプティングの脆弱性

https://jvn.jp/vu/JVNVU91384468/index.html

キーワード

セキュリティー・クリアランス（Security Clearance）

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600009/061700171/?ST=nxt_thmit_security

日経コンピュータ「動かないコンピュータ」

2つの高校で相次ぎサポート詐欺　個情委への報告が遅れて行政指導

https://xtech.nikkei.com/atcl/nxt/mag/nc/18/020600011/061900158/?ST=nxt_thmit_security

吉川孝志のマルウエア徹底解剖

サイバー攻撃者はいかに身元を隠すのか、画像にピクセル単位で情報を埋め込むことも

https://xtech.nikkei.com/atcl/nxt/column/18/02805/061900006/?ST=nxt_thmit_security

知らぬ間に住民登録抹消、窓口支援SaaS導入の静岡県磐田市で起きた珍事の理由

https://xtech.nikkei.com/atcl/nxt/column/18/00001/09438/?ST=nxt_thmit_security

JAXAに複数回のサイバー攻撃、情報流出の可能性も

https://xtech.nikkei.com/atcl/nxt/news/24/01043/?ST=nxt_thmit_security