15日 水曜日、先勝

+ Google Chrome 141.0.7390.107/.108, 140.0.7339.249 released

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_14.html

https://chromereleases.googleblog.com/2025/10/extended-stable-updates-for-desktop_14.html

+ Mozilla Firefox 144.0 released

https://www.firefox.com/en-US/firefox/144.0/releasenotes/

+ Mozilla Foundation Security Advisory 2025-81 Security Vulnerabilities fixed in Firefox 144

https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/

CVE-2025-11708

CVE-2025-11709

CVE-2025-11710

CVE-2025-11711

CVE-2025-11716

CVE-2025-11717

CVE-2025-11712

CVE-2025-11718

CVE-2025-11713

CVE-2025-11719

CVE-2025-11720

CVE-2025-11714

CVE-2025-11715

CVE-2025-11721

+ Mozilla Thunderbird 144.0, 140.4 released

https://www.thunderbird.net/en-US/thunderbird/144.0/releasenotes/

https://www.thunderbird.net/en-US/thunderbird/140.4.0esr/releasenotes/

+ Mozilla Foundation Security Advisory 2025-84 Security Vulnerabilities fixed in Thunderbird 144

https://www.mozilla.org/en-US/security/advisories/mfsa2025-84/

CVE-2025-11708

CVE-2025-11709

CVE-2025-11710

CVE-2025-11711

CVE-2025-11716

CVE-2025-11712

CVE-2025-11713

CVE-2025-11719

CVE-2025-11714

CVE-2025-11715

CVE-2025-11721

+ Apache Tomcat 10.1.48 Released

https://tomcat.apache.org/tomcat-10.1-doc/changelog.html#Tomcat_10.1.48_(schultz)

ワンタイムパスワードは何がダメ？基本から学ぶ多要素認証

第2回

メールでOTPを送る方式は多要素認証ではない？米国の最新ガイドラインをひもとく

https://xtech.nikkei.com/atcl/nxt/column/18/03364/100300002/?ST=nxt_thmit_security

勝村幸博の「今日も誰かが狙われる」

AIでフィッシングが巧妙化、クリック率5割超のメールを3分で生成　攻防の最前線

https://xtech.nikkei.com/atcl/nxt/column/18/00676/100700207/?ST=nxt_thmit_security