{"id":47936,"date":"2026-04-21T15:45:27","date_gmt":"2026-04-21T08:45:27","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47936"},"modified":"2026-05-29T15:46:26","modified_gmt":"2026-05-29T08:46:26","slug":"su-co-an-ninh-cua-vercel-nguy-co-tan-cong-chuoi-cung-ung-tu-cong-cu-ai-ben-thu-ba","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/su-co-an-ninh-cua-vercel-nguy-co-tan-cong-chuoi-cung-ung-tu-cong-cu-ai-ben-thu-ba\/","title":{"rendered":"S\u1ef1 c\u1ed1 an ninh c\u1ee7a Vercel: Nguy c\u01a1 t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng t\u1eeb c\u00f4ng c\u1ee5 AI b\u00ean th\u1ee9 ba"},"content":{"rendered":"
M\u1ed9t s\u1ef1 c\u1ed1 an ninh \u0111\u00e1ng ch\u00fa \u00fd v\u1eeba \u0111\u01b0\u1ee3c n\u1ec1n t\u1ea3ng \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y Vercel c\u00f4ng b\u1ed1, sau khi xu\u1ea5t hi\u1ec7n th\u00f4ng tin tin t\u1eb7c rao b\u00e1n d\u1eef li\u1ec7u n\u1ed9i b\u1ed9 tr\u00ean c\u00e1c di\u1ec5n \u0111\u00e0n ng\u1ea7m. Theo x\u00e1c nh\u1eadn ban \u0111\u1ea7u, h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9 c\u1ee7a Vercel \u0111\u00e3 b\u1ecb truy c\u1eadp tr\u00e1i ph\u00e9p. Ph\u00e2n t\u00edch b\u01b0\u1edbc \u0111\u1ea7u cho th\u1ea5y \u0111\u00e2y c\u00f3 d\u1ea5u hi\u1ec7u c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng v\u1edbi k\u1ef9 thu\u1eadt t\u01b0\u01a1ng \u0111\u1ed1i tinh vi.<\/b>
\n\u200b<\/div>\n
\n
\"1776654050319.png\"<\/div>\n

\u200b\u0110i\u1ec3m kh\u1edfi \u0111\u1ea7u c\u1ee7a s\u1ef1 c\u1ed1 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh b\u1eaft ngu\u1ed3n t\u1eeb m\u1ed9t c\u00f4ng c\u1ee5 AI b\u00ean th\u1ee9 ba l\u00e0 Context.ai. Tin t\u1eb7c \u0111\u00e3 l\u1ee3i d\u1ee5ng \u1ee9ng d\u1ee5ng OAuth c\u1ee7a c\u00f4ng c\u1ee5 n\u00e0y trong h\u1ec7 sinh th\u00e1i Google Workspace \u0111\u1ec3 x\u00e2m nh\u1eadp, t\u1eeb \u0111\u00f3 chi\u1ebfm quy\u1ec1n t\u00e0i kho\u1ea3n c\u1ee7a m\u1ed9t nh\u00e2n vi\u00ean Vercel. Khi \u0111\u00e3 c\u00f3 \u0111\u01b0\u1ee3c danh t\u00ednh h\u1ee3p l\u1ec7, k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n khai th\u00e1c th\u00eam l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m m\u00e0 s\u1eed d\u1ee5ng ch\u00ednh quy\u1ec1n truy c\u1eadp n\u00e0y \u0111\u1ec3 \u0111i s\u00e2u v\u00e0o h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9. \u0110\u00e2y l\u00e0 ki\u1ec3u t\u1ea5n c\u00f4ng \u201c\u0111i \u0111\u01b0\u1eddng v\u00f2ng\u201d ng\u00e0y c\u00e0ng ph\u1ed5 bi\u1ebfn trong c\u00e1c m\u00f4i tr\u01b0\u1eddng s\u1eed d\u1ee5ng nhi\u1ec1u d\u1ecbch v\u1ee5 b\u00ean th\u1ee9 ba.<\/p>\n

T\u1eeb t\u00e0i kho\u1ea3n b\u1ecb chi\u1ebfm, k\u1ebb t\u1ea5n c\u00f4ng ti\u1ebfp t\u1ee5c m\u1edf r\u1ed9ng ph\u1ea1m vi truy c\u1eadp sang m\u1ed9t s\u1ed1 m\u00f4i tr\u01b0\u1eddng n\u1ed9i b\u1ed9 v\u00e0 c\u00e1c bi\u1ebfn m\u00f4i tr\u01b0\u1eddng – th\u00e0nh ph\u1ea7n \u0111\u01b0\u1ee3c xem l\u00e0 \u201ch\u1eadu tr\u01b0\u1eddng\u201d c\u1ee7a h\u1ec7 th\u1ed1ng. Theo thi\u1ebft k\u1ebf c\u1ee7a Vercel, c\u00e1c bi\u1ebfn n\u00e0y \u0111\u01b0\u1ee3c chia th\u00e0nh hai nh\u00f3m: nh\u1ea1y c\u1ea3m v\u00e0 kh\u00f4ng nh\u1ea1y c\u1ea3m.<\/p>\n

Nh\u00f3m nh\u1ea1y c\u1ea3m \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef theo c\u01a1 ch\u1ebf kh\u00f4ng cho ph\u00e9p \u0111\u1ecdc tr\u1ef1c ti\u1ebfp, trong khi nh\u00f3m c\u00f2n l\u1ea1i c\u00f3 m\u1ee9c \u0111\u1ed9 b\u1ea3o v\u1ec7 th\u1ea5p h\u01a1n. Theo Vercel, hi\u1ec7n ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng cho th\u1ea5y c\u00e1c bi\u1ebfn \u0111\u01b0\u1ee3c \u0111\u00e1nh d\u1ea5u l\u00e0 nh\u1ea1y c\u1ea3m b\u1ecb truy c\u1eadp. Tuy nhi\u00ean, trong th\u1ef1c t\u1ebf v\u1eadn h\u00e0nh, nhi\u1ec1u th\u00f4ng tin t\u01b0\u1edfng nh\u01b0 kh\u00f4ng quan tr\u1ecdng nh\u01b0 c\u1ea5u h\u00ecnh d\u1ecbch v\u1ee5, \u0111\u1ecba ch\u1ec9 n\u1ed9i b\u1ed9 hay token t\u1ea1m th\u1eddi v\u1eabn c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh m\u1eaft x\u00edch gi\u00fap tin t\u1eb7c suy lu\u1eadn v\u00e0 m\u1edf r\u1ed9ng quy\u1ec1n truy c\u1eadp. Ch\u00ednh vi\u1ec7c khai th\u00e1c c\u00e1c bi\u1ebfn \u201ckh\u00f4ng nh\u1ea1y c\u1ea3m\u201d n\u00e0y \u0111\u01b0\u1ee3c cho l\u00e0 \u0111\u00e3 t\u1ea1o \u0111i\u1ec1u ki\u1ec7n \u0111\u1ec3 k\u1ebb t\u1ea5n c\u00f4ng ti\u1ebfn s\u00e2u h\u01a1n v\u00e0o h\u1ec7 th\u1ed1ng.<\/p>\n

\u0110\u00e1ng ch\u00fa \u00fd, s\u1ef1 c\u1ed1 di\u1ec5n ra trong b\u1ed1i c\u1ea3nh h\u1ec7 sinh th\u00e1i c\u1ee7a Vercel c\u00f3 ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng r\u1ed9ng. \u0110\u00e2y l\u00e0 \u0111\u01a1n v\u1ecb ph\u00e1t tri\u1ec3n Next.js – n\u1ec1n t\u1ea3ng ph\u1ed5 bi\u1ebfn trong c\u1ed9ng \u0111\u1ed3ng ph\u00e1t tri\u1ec3n. D\u00f9 v\u1eady, Vercel kh\u1eb3ng \u0111\u1ecbnh c\u00e1c d\u1ef1 \u00e1n m\u00e3 ngu\u1ed3n m\u1edf nh\u01b0 Next.js v\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng l\u00f5i hi\u1ec7n kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng. Tuy nhi\u00ean, v\u1ec1 m\u1eb7t l\u00fd thuy\u1ebft, n\u1ebfu c\u00e1c h\u1ec7 th\u1ed1ng tri\u1ec3n khai b\u1ecb ki\u1ec3m so\u00e1t, nguy c\u01a1 t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng v\u1eabn l\u00e0 k\u1ecbch b\u1ea3n c\u1ea7n \u0111\u01b0\u1ee3c l\u01b0u \u00fd.
\n\u200b<\/p><\/div>\n

\n
\"1776653786964.png\"<\/div>\n

\u1ea2nh b\u00e0i \u0111\u0103ng tr\u00ean di\u1ec5n \u0111\u00e0n ng\u1ea7m do \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ea5n c\u00f4ng ph\u00e1t t\u00e1n qua Telegram<\/i>\u200b<\/div>\n

\nC\u00f9ng th\u1eddi \u0111i\u1ec3m, m\u1ed9t \u0111\u1ed1i t\u01b0\u1ee3ng t\u1ef1 nh\u1eadn li\u00ean quan \u0111\u1ebfn nh\u00f3m ShinyHunters \u0111\u00e3 \u0111\u0103ng t\u1ea3i th\u00f4ng tin rao b\u00e1n d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c cho l\u00e0 l\u1ea5y t\u1eeb Vercel, bao g\u1ed3m kh\u00f3a truy c\u1eadp, m\u00e3 ngu\u1ed3n v\u00e0 th\u00f4ng tin t\u00e0i kho\u1ea3n n\u1ed9i b\u1ed9. Tuy nhi\u00ean, c\u00e1c d\u1eef li\u1ec7u n\u00e0y hi\u1ec7n ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c minh v\u00e0 ch\u01b0a c\u00f3 th\u00f4ng b\u00e1o ch\u00ednh th\u1ee9c t\u1eeb ph\u00eda Vercel v\u1ec1 c\u00e1c n\u1ed9i dung b\u1ecb rao b\u00e1n.<\/p>\n

Vercel cho bi\u1ebft \u0111\u00e3 x\u00e1c \u0111\u1ecbnh m\u1ed9t nh\u00f3m nh\u1ecf kh\u00e1ch h\u00e0ng c\u00f3 th\u1ec3 b\u1ecb \u1ea3nh h\u01b0\u1edfng, ch\u1ee7 \u0111\u1ed9ng li\u00ean h\u1ec7 \u0111\u1ec3 khuy\u1ebfn ngh\u1ecb thay \u0111\u1ed5i th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 m\u1edf r\u1ed9ng \u0111i\u1ec1u tra. Hi\u1ec7n t\u1ea1i, Vercel v\u1eabn \u0111ang ti\u1ebfp t\u1ee5c \u0111\u00e1nh gi\u00e1 kh\u1ea3 n\u0103ng d\u1eef li\u1ec7u b\u1ecb tr\u00edch xu\u1ea5t ra ngo\u00e0i v\u00e0 s\u1ebd c\u1eadp nh\u1eadt th\u00eam khi c\u00f3 th\u00f4ng tin m\u1edbi.<\/p>\n

Ngo\u00e0i ra, c\u00e1c chuy\u00ean gia nh\u1eadn \u0111\u1ecbnh nhi\u1ec1u kh\u1ea3 n\u0103ng s\u1ebd c\u1ea7n th\u00eam th\u1eddi gian \u0111\u1ec3 l\u00e0m r\u00f5 to\u00e0n b\u1ed9 ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng c\u0169ng nh\u01b0 ph\u01b0\u01a1ng th\u1ee9c khai th\u00e1c c\u1ee7a tin t\u1eb7c. Trong khi ch\u1edd k\u1ebft lu\u1eadn ch\u00ednh th\u1ee9c, ng\u01b0\u1eddi d\u00f9ng v\u00e0 doanh nghi\u1ec7p s\u1eed d\u1ee5ng n\u1ec1n t\u1ea3ng \u0111\u00e1m m\u00e2y n\u00f3i chung n\u00ean ch\u1ee7 \u0111\u1ed9ng r\u00e0 so\u00e1t l\u1ea1i h\u1ec7 th\u1ed1ng c\u1ee7a m\u00ecnh, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c t\u00edch h\u1ee3p b\u00ean th\u1ee9 ba, nh\u1eadt k\u00fd truy c\u1eadp v\u00e0 c\u01a1 ch\u1ebf qu\u1ea3n l\u00fd th\u00f4ng tin x\u00e1c th\u1ef1c.
\n\u200b<\/p><\/div>\n

T\u1ed5ng h\u1ee3p: Vercel, Bleeping Computer<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

M\u1ed9t s\u1ef1 c\u1ed1 an ninh \u0111\u00e1ng ch\u00fa \u00fd v\u1eeba \u0111\u01b0\u1ee3c n\u1ec1n t\u1ea3ng \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y Vercel c\u00f4ng b\u1ed1, sau khi xu\u1ea5t hi\u1ec7n th\u00f4ng tin tin t\u1eb7c rao b\u00e1n d\u1eef li\u1ec7u n\u1ed9i b\u1ed9 tr\u00ean c\u00e1c di\u1ec5n \u0111\u00e0n ng\u1ea7m. Theo x\u00e1c nh\u1eadn ban \u0111\u1ea7u, h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9 c\u1ee7a Vercel \u0111\u00e3 b\u1ecb truy c\u1eadp tr\u00e1i ph\u00e9p. […]<\/p>\n","protected":false},"author":20,"featured_media":47937,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47936","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47936"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47936\/revisions"}],"predecessor-version":[{"id":47938,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47936\/revisions\/47938"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47937"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}