{"id":47984,"date":"2026-06-03T06:03:54","date_gmt":"2026-06-02T23:03:54","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47984"},"modified":"2026-06-05T06:04:36","modified_gmt":"2026-06-04T23:04:36","slug":"tin-tac-lan-dau-su-dung-ai-agent-de-tu-dong-danh-cap-du-lieu-sau-khi-xam-nhap-he-thong","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/tin-tac-lan-dau-su-dung-ai-agent-de-tu-dong-danh-cap-du-lieu-sau-khi-xam-nhap-he-thong\/","title":{"rendered":"Tin t\u1eb7c l\u1ea7n \u0111\u1ea7u s\u1eed d\u1ee5ng AI Agent \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u sau khi x\u00e2m nh\u1eadp h\u1ec7 th\u1ed1ng"},"content":{"rendered":"
M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng m\u1edbi v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u ph\u00e1t hi\u1ec7n \u0111ang l\u00e0m d\u1ea5y l\u00ean lo ng\u1ea1i v\u1ec1 kh\u1ea3 n\u0103ng AI kh\u00f4ng c\u00f2n ch\u1ec9 h\u1ed7 tr\u1ee3 tin t\u1eb7c m\u00e0 \u0111\u00e3 b\u1eaft \u0111\u1ea7u tr\u1ef1c ti\u1ebfp tham gia v\u00e0o c\u00e1c giai \u0111o\u1ea1n h\u1eadu x\u00e2m nh\u1eadp trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf.<\/b>
\n\u200b<\/div>\n
\n
\"e6a0a235-4bbb-42f8-8899-9c3ba4ed7036.png\"<\/div>\n<\/div>\n
\nTheo b\u00e1o c\u00e1o t\u1eeb Sysdig, m\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda ch\u01b0a x\u00e1c \u0111\u1ecbnh \u0111\u00e3 s\u1eed d\u1ee5ng m\u1ed9t AI Agent d\u1ef1a tr\u00ean m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef l\u1edbn (LLM) \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng th\u1ef1c hi\u1ec7n h\u00e0ng lo\u1ea1t ho\u1ea1t \u0111\u1ed9ng sau khi chi\u1ebfm \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng m\u1ee5c ti\u00eau. \u0110\u00e2y \u0111\u01b0\u1ee3c xem l\u00e0 m\u1ed9t trong nh\u1eefng tr\u01b0\u1eddng h\u1ee3p \u0111\u1ea7u ti\u00ean ghi nh\u1eadn AI Agent \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong m\u00f4i tr\u01b0\u1eddng t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf thay v\u00ec ch\u1ec9 xu\u1ea5t hi\u1ec7n trong c\u00e1c th\u1eed nghi\u1ec7m ho\u1eb7c nghi\u00ean c\u1ee9u h\u1ecdc thu\u1eadt.\u200b<\/div>\n
Kh\u1edfi \u0111\u1ea7u t\u1eeb l\u1ed7 h\u1ed5ng RCE nghi\u00eam tr\u1ecdng tr\u00ean Marimo\u200b<\/div>\n
Chu\u1ed7i t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c khai th\u00e1c l\u1ed7 h\u1ed5ng CVE-2026-39987 tr\u00ean n\u1ec1n t\u1ea3ng Marimo, m\u1ed9t c\u00f4ng c\u1ee5 notebook m\u00e3 ngu\u1ed3n m\u1edf d\u00e0nh cho Python.<\/p>\n

L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng th\u1ef1c thi l\u1ec7nh t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c tr\u00ean c\u00e1c phi\u00ean b\u1ea3n Marimo t\u1eeb 0.20.4 tr\u1edf v\u1ec1 tr\u01b0\u1edbc. Sau khi gi\u00e0nh \u0111\u01b0\u1ee3c quy\u1ec1n th\u1ef1c thi m\u00e3 tr\u00ean m\u00e1y ch\u1ee7 c\u00f4ng khai, AI Agent ti\u1ebfp t\u1ee5c th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc trinh s\u00e1t v\u00e0 m\u1edf r\u1ed9ng ph\u1ea1m vi t\u1ea5n c\u00f4ng m\u1ed9t c\u00e1ch g\u1ea7n nh\u01b0 t\u1ef1 \u0111\u1ed9ng.\u200b<\/p><\/div>\n

AI t\u1ef1 t\u00ecm kh\u00f3a truy c\u1eadp v\u00e0 m\u1edf r\u1ed9ng quy\u1ec1n ki\u1ec3m so\u00e1t\u200b<\/div>\n
Theo Sysdig, sau khi x\u00e2m nh\u1eadp th\u00e0nh c\u00f4ng, AI Agent \u0111\u00e3 nhanh ch\u00f3ng thu th\u1eadp hai th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u00e1m m\u00e2y (cloud credentials) t\u1eeb m\u00e1y ch\u1ee7 b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n

Ti\u1ebfp \u0111\u00f3, h\u1ec7 th\u1ed1ng AI s\u1eed d\u1ee5ng c\u00e1c th\u00f4ng tin n\u00e0y \u0111\u1ec3 truy c\u1eadp v\u00e0o m\u00f4i tr\u01b0\u1eddng AWS c\u1ee7a n\u1ea1n nh\u00e2n, th\u1ef1c hi\u1ec7n ho\u1ea1t \u0111\u1ed9ng trinh s\u00e1t v\u00e0 ph\u00e1t hi\u1ec7n m\u1ed9t kh\u00f3a SSH \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef trong AWS Secrets Manager. Sau khi l\u1ea5y \u0111\u01b0\u1ee3c kh\u00f3a n\u00e0y, AI Agent t\u1ef1 \u0111\u1ed9ng s\u1eed d\u1ee5ng n\u00f3 \u0111\u1ec3 k\u1ebft n\u1ed1i t\u1edbi m\u00e1y ch\u1ee7 bastion n\u1ed9i b\u1ed9 c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u nh\u1eadn \u0111\u1ecbnh \u0111\u00e2y l\u00e0 \u0111i\u1ec3m \u0111\u1eb7c bi\u1ec7t c\u1ee7a v\u1ee5 vi\u1ec7c b\u1edfi AI kh\u00f4ng ch\u1ec9 th\u1ef1c hi\u1ec7n m\u1ed9t nhi\u1ec7m v\u1ee5 \u0111\u01a1n l\u1ebb m\u00e0 c\u00f2n c\u00f3 kh\u1ea3 n\u0103ng l\u1eadp k\u1ebf ho\u1ea1ch nhi\u1ec1u b\u01b0\u1edbc, \u0111\u00e1nh gi\u00e1 k\u1ebft qu\u1ea3 v\u00e0 t\u1ef1 \u0111\u1ed9ng chuy\u1ec3n sang giai \u0111o\u1ea1n ti\u1ebfp theo trong chu\u1ed7i t\u1ea5n c\u00f4ng.\u200b<\/p><\/div>\n

\u0110\u00e1nh c\u1eafp to\u00e0n b\u1ed9 c\u01a1 s\u1edf d\u1eef li\u1ec7u trong ch\u01b0a \u0111\u1ea7y 2 ph\u00fat\u200b<\/div>\n
Sau khi truy c\u1eadp \u0111\u01b0\u1ee3c m\u00e1y ch\u1ee7 bastion, AI Agent ti\u1ebfp t\u1ee5c thu th\u1eadp th\u00f4ng tin v\u1ec1 c\u01a1 s\u1edf d\u1eef li\u1ec7u PostgreSQL n\u1ed9i b\u1ed9.<\/p>\n

Theo b\u00e1o c\u00e1o, to\u00e0n b\u1ed9 c\u1ea5u tr\u00fac v\u00e0 d\u1eef li\u1ec7u c\u1ee7a c\u01a1 s\u1edf d\u1eef li\u1ec7u \u0111\u00e3 b\u1ecb tr\u00edch xu\u1ea5t trong th\u1eddi gian ch\u01b0a t\u1edbi hai ph\u00fat. \u0110i\u1ec1u n\u00e0y cho th\u1ea5y t\u1ed1c \u0111\u1ed9 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a AI Agent v\u01b0\u1ee3t xa nhi\u1ec1u chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng th\u1ee7 c\u00f4ng truy\u1ec1n th\u1ed1ng.<\/p>\n

D\u00f9 cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n tr\u01b0\u1edbc khi g\u00e2y h\u1eadu qu\u1ea3 nghi\u00eam tr\u1ecdng h\u01a1n, v\u1ee5 vi\u1ec7c \u0111\u00e3 ch\u1ee9ng minh r\u1eb1ng AI Agent hi\u1ec7n \u0111\u00e3 \u0111\u1ee7 kh\u1ea3 n\u0103ng th\u1ef1c hi\u1ec7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng h\u1eadu khai th\u00e1c v\u1ed1n tr\u01b0\u1edbc \u0111\u00e2y c\u1ea7n t\u1edbi s\u1ef1 can thi\u1ec7p li\u00ean t\u1ee5c c\u1ee7a con ng\u01b0\u1eddi.\u200b<\/p><\/div>\n

B\u01b0\u1edbc ngo\u1eb7t m\u1edbi c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng\u200b<\/div>\n
Trong nhi\u1ec1u n\u0103m qua, tin t\u1eb7c ch\u1ee7 y\u1ebfu s\u1eed d\u1ee5ng AI \u0111\u1ec3 h\u1ed7 tr\u1ee3 vi\u1ebft m\u00e3 \u0111\u1ed9c, t\u1ea1o email l\u1eeba \u0111\u1ea3o ho\u1eb7c nghi\u00ean c\u1ee9u l\u1ed7 h\u1ed5ng. Tuy nhi\u00ean, v\u1ee5 vi\u1ec7c l\u1ea7n n\u00e0y cho th\u1ea5y AI \u0111ang ti\u1ebfn th\u00eam m\u1ed9t b\u01b0\u1edbc m\u1edbi: tr\u1edf th\u00e0nh m\u1ed9t “t\u00e1c nh\u00e2n t\u1ef1 \u0111\u1ed9ng” c\u00f3 kh\u1ea3 n\u0103ng \u0111\u01b0a ra quy\u1ebft \u0111\u1ecbnh trong qu\u00e1 tr\u00ecnh t\u1ea5n c\u00f4ng.<\/p>\n

C\u00e1c chuy\u00ean gia c\u1ea3nh b\u00e1o r\u1eb1ng khi AI Agent ng\u00e0y c\u00e0ng \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p th\u00eam c\u00f4ng c\u1ee5, quy\u1ec1n truy c\u1eadp v\u00e0 kh\u1ea3 n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a, c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng trong t\u01b0\u01a1ng lai c\u00f3 th\u1ec3 di\u1ec5n ra nhanh h\u01a1n, quy m\u00f4 l\u1edbn h\u01a1n v\u00e0 kh\u00f3 ph\u00e1t hi\u1ec7n h\u01a1n.<\/p>\n

Thay v\u00ec ph\u1ea3i tr\u1ef1c ti\u1ebfp \u0111i\u1ec1u khi\u1ec3n t\u1eebng b\u01b0\u1edbc, k\u1ebb t\u1ea5n c\u00f4ng ch\u1ec9 c\u1ea7n \u0111\u01b0a ra m\u1ee5c ti\u00eau ban \u0111\u1ea7u, c\u00f2n AI s\u1ebd t\u1ef1 th\u1ef1c hi\u1ec7n qu\u00e1 tr\u00ecnh thu th\u1eadp th\u00f4ng tin, leo thang \u0111\u1eb7c quy\u1ec1n, di chuy\u1ec3n ngang trong h\u1ec7 th\u1ed1ng v\u00e0 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u.\u200b<\/p><\/div>\n

Doanh nghi\u1ec7p c\u1ea7n chu\u1ea9n b\u1ecb g\u00ec?\u200b<\/div>\n
C\u00e1c chuy\u00ean gia khuy\u1ebfn ngh\u1ecb c\u00e1c t\u1ed5 ch\u1ee9c c\u1ea7n xem x\u00e9t l\u1ea1i chi\u1ebfn l\u01b0\u1ee3c ph\u00f2ng th\u1ee7 tr\u01b0\u1edbc c\u00e1c m\u1ed1i \u0111e d\u1ecda s\u1eed d\u1ee5ng AI, bao g\u1ed3m:\u200b<\/div>\n
    \n
  • \n
    Kh\u1ea9n tr\u01b0\u01a1ng c\u1eadp nh\u1eadt c\u00e1c b\u1ea3n v\u00e1 cho Marimo v\u00e0 c\u00e1c \u1ee9ng d\u1ee5ng c\u00f4ng khai tr\u00ean Internet.\u200b<\/div>\n<\/li>\n
  • \n
    H\u1ea1n ch\u1ebf l\u01b0u tr\u1eef kh\u00f3a truy c\u1eadp, m\u1eadt kh\u1ea9u v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c d\u01b0\u1edbi d\u1ea1ng d\u1ec5 truy c\u1eadp.\u200b<\/div>\n<\/li>\n
  • \n
    Gi\u00e1m s\u00e1t b\u1ea5t th\u01b0\u1eddng \u0111\u1ed1i v\u1edbi AWS Secrets Manager v\u00e0 c\u00e1c kho l\u01b0u tr\u1eef b\u00ed m\u1eadt kh\u00e1c.\u200b<\/div>\n<\/li>\n
  • \n
    Tri\u1ec3n khai c\u01a1 ch\u1ebf ph\u00e1t hi\u1ec7n h\u00e0nh vi thay v\u00ec ch\u1ec9 d\u1ef1a v\u00e0o ch\u1eef k\u00fd nh\u1eadn di\u1ec7n.\u200b<\/div>\n<\/li>\n
  • \n
    Theo d\u00f5i c\u00e1c ho\u1ea1t \u0111\u1ed9ng SSH, truy c\u1eadp c\u01a1 s\u1edf d\u1eef li\u1ec7u v\u00e0 h\u00e0nh vi tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u b\u1ea5t th\u01b0\u1eddng.\u200b<\/div>\n<\/li>\n<\/ul>\n
    S\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a AI Agent trong c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf \u0111ang \u0111\u00e1nh d\u1ea5u m\u1ed9t giai \u0111o\u1ea1n m\u1edbi c\u1ee7a an ninh m\u1ea1ng, n\u01a1i c\u00e1c h\u1ec7 th\u1ed1ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o kh\u00f4ng c\u00f2n ch\u1ec9 l\u00e0 c\u00f4ng c\u1ee5 h\u1ed7 tr\u1ee3 m\u00e0 \u0111ang d\u1ea7n tr\u1edf th\u00e0nh m\u1ed9t ph\u1ea7n tr\u1ef1c ti\u1ebfp trong chu\u1ed7i t\u1ea5n c\u00f4ng c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng.\u200b<\/div>\n","protected":false},"excerpt":{"rendered":"

    M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng m\u1edbi v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u ph\u00e1t hi\u1ec7n \u0111ang l\u00e0m d\u1ea5y l\u00ean lo ng\u1ea1i v\u1ec1 kh\u1ea3 n\u0103ng AI kh\u00f4ng c\u00f2n ch\u1ec9 h\u1ed7 tr\u1ee3 tin t\u1eb7c m\u00e0 \u0111\u00e3 b\u1eaft \u0111\u1ea7u tr\u1ef1c ti\u1ebfp tham gia v\u00e0o c\u00e1c giai \u0111o\u1ea1n h\u1eadu x\u00e2m nh\u1eadp trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng th\u1ef1c t\u1ebf. \u200b […]<\/p>\n","protected":false},"author":20,"featured_media":47985,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47984","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47984","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47984"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47984\/revisions"}],"predecessor-version":[{"id":47986,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47984\/revisions\/47986"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47985"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}