{"id":47577,"date":"2026-03-24T14:49:53","date_gmt":"2026-03-24T07:49:53","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47577"},"modified":"2026-03-31T14:50:42","modified_gmt":"2026-03-31T07:50:42","slug":"hay-va-ngay-loat-lo-hong-apple-craft-cms-laravel-truoc-3-4-2026","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/hay-va-ngay-loat-lo-hong-apple-craft-cms-laravel-truoc-3-4-2026\/","title":{"rendered":"H\u00e3y v\u00e1 ngay lo\u1ea1t l\u1ed7 h\u1ed5ng Apple, Craft CMS, Laravel tr\u01b0\u1edbc 3\/4\/2026"},"content":{"rendered":"
C\u01a1 quan An ninh m\u1ea1ng v\u00e0 H\u1ea1 t\u1ea7ng M\u1ef9 (CISA) v\u1eeba b\u1ed5 sung 5 l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Apple, Craft CMS v\u00e0 Laravel Livewire v\u00e0o danh m\u1ee5c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ecb khai th\u00e1c (KEV). \u0110\u1ed9ng th\u00e1i n\u00e0y \u0111i k\u00e8m y\u00eau c\u1ea7u c\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 tr\u01b0\u1edbc ng\u00e0y 03\/04\/2026 n\u1ebfu kh\u00f4ng s\u1ebd \u0111\u1ed1i m\u1eb7t nguy c\u01a1 b\u1ecb x\u00e2m nh\u1eadp v\u00e0 ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng.<\/b>
\n\u200b<\/div>\n
\n
\"1774247925905.png\"<\/div>\n<\/div>\n
T\u00e2m \u0111i\u1ec3m c\u1ee7a \u0111\u1ee3t c\u1ea3nh b\u00e1o l\u00e0 5 l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c, tr\u1ea3i d\u00e0i t\u1eeb thi\u1ebft b\u1ecb ng\u01b0\u1eddi d\u00f9ng \u0111\u1ebfn h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7. Trong \u0111\u00f3, 3 l\u1ed7 h\u1ed5ng tr\u00ean n\u1ec1n t\u1ea3ng Apple g\u1ed3m WebKit (CVE-2025-31277) v\u00e0 hai l\u1ed7i trong nh\u00e2n h\u1ec7 \u0111i\u1ec1u h\u00e0nh (CVE-2025-43510, CVE-2025-43520) \u0111\u1ec1u li\u00ean quan \u0111\u1ebfn l\u1ed7i x\u1eed l\u00fd b\u1ed9 nh\u1edb.C\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y c\u00f3 th\u1ec3 b\u1ecb l\u1ee3i d\u1ee5ng khi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp n\u1ed9i dung web \u0111\u1ed9c h\u1ea1i ho\u1eb7c ch\u1ea1y \u1ee9ng d\u1ee5ng b\u1ecb c\u00e0i c\u1eafm m\u00e3 nguy hi\u1ec3m, d\u1eabn t\u1edbi vi\u1ec7c can thi\u1ec7p s\u00e2u v\u00e0o h\u1ec7 th\u1ed1ng, th\u1eadm ch\u00ed ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb. Th\u1ef1c t\u1ebf, m\u1ed9t s\u1ed1 l\u1ed7 h\u1ed5ng trong nh\u00f3m n\u00e0y \u0111\u00e3 t\u1eebng b\u1ecb khai th\u00e1c trong b\u1ed9 c\u00f4ng c\u1ee5 t\u1ea5n c\u00f4ng iOS mang t\u00ean DarkSword \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u.<\/p>\n

\u1ede ph\u00eda h\u1ec7 th\u1ed1ng m\u00e1y ch\u1ee7, l\u1ed7 h\u1ed5ng CVE-2025-32432 tr\u00ean Craft CMS \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 \u1edf m\u1ee9c nghi\u00eam tr\u1ecdng nh\u1ea5t, \u0111i\u1ec3m 10\/10. \u0110\u00e2y l\u00e0 l\u1ed7i cho ph\u00e9p ch\u00e8n m\u00e3 v\u00e0 th\u1ef1c thi l\u1ec7nh t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c. L\u1ed7 h\u1ed5ng n\u00e0y \u0111\u00e3 b\u1ecb khai th\u00e1c t\u1eeb s\u1edbm d\u01b0\u1edbi d\u1ea1ng zero-day b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 c\u00e0i ph\u1ea7n m\u1ec1m \u0111\u00e0o ti\u1ec1n \u1ea3o v\u00e0 bi\u1ebfn m\u00e1y ch\u1ee7 th\u00e0nh \u201ctr\u1ea1m trung chuy\u1ec3n\u201d ph\u1ee5c v\u1ee5 c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn.<\/p>\n

Laravel Livewire – m\u1ed9t framework ph\u1ed5 bi\u1ebfn trong ph\u00e1t tri\u1ec3n web c\u0169ng n\u1eb1m trong danh s\u00e1ch v\u1edbi l\u1ed7 h\u1ed5ng CVE-2025-54068 (CVSS 9,8). L\u1ed7i n\u00e0y cho ph\u00e9p th\u1ef1c thi l\u1ec7nh t\u1eeb xa trong m\u1ed9t s\u1ed1 \u0111i\u1ec1u ki\u1ec7n nh\u1ea5t \u0111\u1ecbnh, th\u1eadm ch\u00ed kh\u00f4ng c\u1ea7n \u0111\u0103ng nh\u1eadp. Ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c \u0111\u01b0\u1ee3c ghi nh\u1eadn c\u00f3 li\u00ean quan \u0111\u1ebfn nh\u00f3m tin t\u1eb7c MuddyWater n\u1ed5i ti\u1ebfng v\u1edbi c\u00e1c chi\u1ebfn d\u1ecbch gi\u00e1n \u0111i\u1ec7p m\u1ea1ng nh\u1eafm v\u00e0o l\u0129nh v\u1ef1c n\u0103ng l\u01b0\u1ee3ng, t\u00e0i ch\u00ednh v\u00e0 h\u1ea1 t\u1ea7ng quan tr\u1ecdng.<\/p>\n

\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng hi\u1ec7n nay kh\u00f4ng ch\u1ec9 d\u1ef1a v\u00e0o k\u1ef9 thu\u1eadt m\u00e0 c\u00f2n k\u1ebft h\u1ee3p l\u1eeba \u0111\u1ea3o tinh vi. Ch\u00fang s\u1eed d\u1ee5ng t\u00e0i kho\u1ea3n email h\u1ee3p ph\u00e1p b\u1ecb chi\u1ebfm quy\u1ec1n \u0111\u1ec3 g\u1eedi m\u00e3 \u0111\u1ed9c, khi\u1ebfn h\u1ec7 th\u1ed1ng ph\u00f2ng th\u1ee7 kh\u00f3 ph\u00e1t hi\u1ec7n h\u01a1n. M\u1ed9t s\u1ed1 m\u00e3 \u0111\u1ed9c c\u00f2n c\u00f3 th\u1ec3 \u1ea9n m\u00ecnh l\u00e2u d\u00e0i, tr\u00e1nh b\u1ecb ph\u00e2n t\u00edch.<\/p>\n

Vi\u1ec7c ch\u1eadm tr\u1ec5 v\u00e1 l\u1ed7i c\u00f3 th\u1ec3 khi\u1ebfn t\u1ed5 ch\u1ee9c tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau ti\u1ebfp theo trong c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u00f3 ch\u1ee7 \u0111\u00edch. C\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean n\u00ean l\u01b0u \u00fd:\u200b<\/p>\n<\/div>\n

    \n
  • \n
    C\u1eadp nh\u1eadt ngay c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt cho Apple, Craft CMS, Laravel Livewire\u200b<\/div>\n<\/li>\n
  • \n
    Ki\u1ec3m tra log h\u1ec7 th\u1ed1ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n d\u1ea5u hi\u1ec7u truy c\u1eadp b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n
  • \n
    T\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt email, \u0111\u1eb7c bi\u1ec7t v\u1edbi t\u00e0i kho\u1ea3n n\u1ed9i b\u1ed9 quan tr\u1ecdng\u200b<\/div>\n<\/li>\n
  • \n
    Tri\u1ec3n khai gi\u1ea3i ph\u00e1p gi\u00e1m s\u00e1t an ninh c\u00f3 kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng\u200b<\/div>\n<\/li>\n
  • \n
    H\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp v\u00e0 ph\u00e2n t\u00e1ch h\u1ec7 th\u1ed1ng quan tr\u1ecdng\u200b<\/div>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

    C\u01a1 quan An ninh m\u1ea1ng v\u00e0 H\u1ea1 t\u1ea7ng M\u1ef9 (CISA) v\u1eeba b\u1ed5 sung 5 l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong Apple, Craft CMS v\u00e0 Laravel Livewire v\u00e0o danh m\u1ee5c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ecb khai th\u00e1c (KEV). \u0110\u1ed9ng th\u00e1i n\u00e0y \u0111i k\u00e8m y\u00eau c\u1ea7u c\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 tr\u01b0\u1edbc ng\u00e0y 03\/04\/2026 n\u1ebfu kh\u00f4ng […]<\/p>\n","protected":false},"author":20,"featured_media":47578,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[4,24,35],"tags":[],"class_list":["post-47577","post","type-post","status-publish","format-standard","has-post-thumbnail","category-kien-thuc-an-toan-thong-tin","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47577"}],"version-history":[{"count":2,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47577\/revisions"}],"predecessor-version":[{"id":47580,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47577\/revisions\/47580"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47578"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}