キタきつね (@foxbook) header
キタきつね (@foxbook) profile picture

キタきつね

@foxbook

都内某企業セキュリティコンサル（専門PCI DSS）。セキュリティと生成AI記事をウォッチ中。Working as a security consultant(PCI DSS etc) at Tokyo. I'm focusing on security, and Generative AI news.

 東京都
foxsecurity.hatenablog.com/
Joined August 2009
  • Tweets86.4K
  • Following277
  • Followers5.1K
410Media
Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)Photo by キタきつね (@foxbook)
はてなブログに投稿しました 直近に公表された主な国内サイバーインシデント - Fox on Security foxsecurity.hatenablog.com/e… #はてなブログ
🤖 Made with AI
Image from キタきつね (@foxbook)
279
CISA updates cloud configuration check tools #Help Net Security (Oct 28) helpnetsecurity.com/2026/10/…
CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster - Help Net...

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster - Help Net...

The CISA ScubaGear update moves Microsoft 365 checks to direct API calls, and ScubaGoggles adds an assured controls baseline.

helpnetsecurity.com
276
GitHub package firewall blocks new npm packages #Help Net Security (Oct 28) helpnetsecurity.com/2026/10/…
GitHub's npm package firewall can block brand-new versions before they install - Help Net Security

GitHub's npm package firewall can block brand-new versions before they install - Help Net Security

GitHub package firewall checks npm packages against enterprise policy before install, blocking known malware and brand-new versions.

helpnetsecurity.com
274
Scam victims suffer long-term harms after fraud #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Shame and sleepless nights haunt scam victims long after the money is gone - Help Net Security

Shame and sleepless nights haunt scam victims long after the money is gone - Help Net Security

ITRC's 2026 report examines the emotional toll of scams and identity theft, gaps in victim support and prolonged recovery efforts.

helpnetsecurity.com
292
CISA warns Fragnesia chained with PHP2Shell #BleepingComputer (Oct 29) bleepingcomputer.com/news/se…
CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

CISA warns of Fragnesia Linux flaw chained in PHP2Shell attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies to patch a high-severity Linux kernel privilege escalation bug that attackers are chaining with the PHP2Shell...

bleepingcomputer.com
276
Hackers exploit Cisco SD-WAN flaw to deploy KeyDrift #BleepingComputer (Oct 29) bleepingcomputer.com/news/se…
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a...

bleepingcomputer.com
1
306
Chrome extensions with 13.4 million installs hijack searches #BleepingComputer (Oct 29) bleepingcomputer.com/news/se…
Chrome extensions with 13.4 million installs caught hijacking searches

Chrome extensions with 13.4 million installs caught hijacking searches

A massive search-hijacking campaign involving 319 Chrome extensions with a combined 13.4 million reported installations redirected users' searches through tracking servers to generate advertising...

bleepingcomputer.com
307
Ubuntu Core Desktop aims at immutable systems #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Ubuntu Core Desktop returns as Canonical's plan for an immutable default desktop - Help Net Security

Ubuntu Core Desktop returns as Canonical's plan for an immutable default desktop - Help Net Security

Canonical revives Ubuntu Core Desktop, an immutable all-snap build meant to become Ubuntu’s default, with daily images in the 27.04 cycle.

helpnetsecurity.com
278
Stolen school accounts enable cross-district attacks #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Stolen staff logins are spreading attacks between K-12 school districts - Help Net Security

Stolen staff logins are spreading attacks between K-12 school districts - Help Net Security

K-12 cybersecurity: MS-ISAC flagged leaked logins at 808 school organizations as attackers use hijacked accounts to phish other districts.

helpnetsecurity.com
256
Google Gemini 4 Carbon strengthens cybersecurity capabilities #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws - Help Net...

Google says Gemini 4 Carbon beats its predecessors at finding and fixing security flaws - Help Net...

Google’s Gemini 4 Carbon improves coding and cybersecurity, adds safeguards and launches with targeted access for cyber defenders.

helpnetsecurity.com
311
TLS certificate automation readiness gap #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
IT bosses are confident they've found the certificates they don't know about - Help Net Security

IT bosses are confident they've found the certificates they don't know about - Help Net Security

40% of IT leaders said TLS certificate automation has them ready for 47-day certs. Sectigo’s data shows 61% automate half or fewer renewals.

helpnetsecurity.com
1
298
Qualys CISO discusses AI-era vulnerability prioritization #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Qualys CISO on what security teams can do as exploit campaigns grow - Help Net Security

Qualys CISO on what security teams can do as exploit campaigns grow - Help Net Security

Qualys CISO Nathan Smolenski on AI vulnerability management, tracking the window of exposure, and how to build trust in autonomous patching.

helpnetsecurity.com
261
Oracle EBS flaw CVE-2026-101767 faces exploit attempts #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) - Help...

Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767) - Help...

Exploitation attempts have started against CVE-2026-101767, a recently patched Oracle E-Business Suite (EBS) flaw.

helpnetsecurity.com
346
Volt Typhoon uses Silent Train relay network #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Volt Typhoon targeted enterprise control planes via ever-changing "Silent Train" relay network -...

Volt Typhoon targeted enterprise control planes via ever-changing "Silent Train" relay network -...

Volt Typhoon has been using a covert, constantly rotating relay network to hide its most sensitive intrusions, Lumen's researchers revealed.

helpnetsecurity.com
257
Researchers break built-in browsers in AI developer tools #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop - Help...

Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop - Help...

AI assistant browser vulnerabilities in VS Code and Codex let one file read a developer’s whole disk. Both tools are still unpatched.

helpnetsecurity.com
236
Fake ChatGPT and Claude desktop apps spread Yoba malware #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Yoba malware hides in fake desktop versions of ChatGPT and Claude - Help Net Security

Yoba malware hides in fake desktop versions of ChatGPT and Claude - Help Net Security

Fake ChatGPT and Claude desktop apps on GitHub use signed OpenAI and Anthropic executables to load Yoba malware and a cryptominer.

helpnetsecurity.com
259
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained #Help Net Security (Oct 29) helpnetsecurity.com/2026/10/…
Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls - Help...

Chinese hackers used VMware ESX zero-day; PHP2Shell and Fragnesia chained to root firewalls - Help...

Attackers exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the Fragnesia bug to root firewalls.

helpnetsecurity.com
1
291
GMOの攻撃後対応を3つの意思決定から検証 #日経クロステック (Oct 30) xtech.nikkei.com/atcl/nxt/co…
GMOのサイバー攻撃対応は適切だったのか、3つの重要な判断を振り返る

GMOのサイバー攻撃対応は適切だったのか、3つの重要な判断を振り返る

　GMOインターネットグループがサイバー攻撃を受け、幾つもの判断を迫られてきた。同社が下してきた、身代金の支払いなどには「『永久に応じない』宣言」「能動的サイバー防御の要請」「利用者へのパソコンの電源オフ要請」という3つの判断について、的確だったのか振り返る。

xtech.nikkei.com
294
Qilinのランサムウェア攻撃、勢力拡大の背景 #日経クロステック (Oct 30) xtech.nikkei.com/atcl/nxt/co…
「Qilin」がリスク評価で首位に、攻撃実行者への好条件提示で勢力拡大

「Qilin」がリスク評価で首位に、攻撃実行者への好条件提示で勢力拡大

　今回は、最もリスクの高い上位5グループのトップに座るQilinに改めてフォーカスする。同グループは1年前の2025年10月、アサヒグループホールディングスへのランサムウエア攻撃に関して犯行声明を出した。その脅威の規模は日本企業の担当者を震撼（しんかん）させた。

xtech.nikkei.com
285
相次ぐ漏えいの背景、VPNのゼロデイと更新体制 #日経クロステック (Oct 29) xtech.nikkei.com/atcl/nxt/co…
相次ぐ情報漏洩の陰でVPNのゼロデイ攻撃が深刻化、パッチだけでは不十分

相次ぐ情報漏洩の陰でVPNのゼロデイ攻撃が深刻化、パッチだけでは不十分

　VPN（仮想私設網）装置を狙う攻撃が深刻化している。特に危険なのは、脆弱性の公表時点で既に攻撃が確認される「ゼロデイ攻撃」が急増している点だ。パッチを適用するだけでは被害を防げない場合も多いという。相次ぐ情報漏洩事案に注目が集まるあまり、VPNの脆弱性対応がおろそかになる危険がある

xtech.nikkei.com
1
308
個人情報漏えい報告は延べ2億6000万人に #日本経済新聞 (Oct 29) nikkei.com/article/DGXZQOUD2…
不正アクセス情報漏洩、4月以降は延べ2億6000万人 個人情報保護委

不正アクセス情報漏洩、4月以降は延べ2億6000万人　個人情報保護委

2026年4月以降、個人情報保護委員会が事業者から報告を受けた不正アクセスによる個人情報漏洩が延べ約2億6000万人に上ることが29日、委員会への取材で分かった。10月に入り、大規模な漏洩事案が急増している。企業へのサイバー攻撃の多発を踏まえ、委員会が速報値としてまとめた。委員会の資料によると、10月1〜16日に個人情報を扱う事業者から法令に基づいて直接報告を受けた不正アクセス

nikkei.com
316
Load more