【要点】
◎Adobe CommerceやMagentoの脆弱性（CVE-2024-34102）とglibcのiconv機能のセキュリティ問題（CVE-2024-2961）を組み合わせることで、遠隔からコードを実行する手法
【ニュース】
◆Over 4,000 Adobe Commerce, Magento shops hacked in CosmicSting attacks (BleepingComputer, 2024/10/03 13:19)
[4,000以上のAdobe Commerce、MagentoショップがCosmicSting攻撃でハッキングされる]
https://www.bleepingcomputer.com/news/security/over-4-000-adobe-commerce-magento-shops-hacked-in-cosmicsting-attacks/
⇒ https://incidents.hatenablog.com/entry/2024/10/03/000000_7
【検索】
google: CosmicSting 攻撃
google: CosmicSting Attack
google:news: CosmicSting 攻撃
google:news: CosmicSting Attack
google: site:virustotal.com CosmicSting 攻撃
google: site:virustotal.com CosmicSting Attack
google: site:github.com CosmicSting 攻撃
google: site:github.com CosmicSting Attack
■Bing
https://www.bing.com/search?q=CosmicSting%20攻撃
https://www.bing.com/search?q=CosmicSting%20Attack
https://www.bing.com/news/search?q=CosmicSting%20攻撃
https://www.bing.com/news/search?q=CosmicSting%20Attack
https://twitter.com/search?q=%23CosmicSting%20攻撃
https://twitter.com/search?q=%23CosmicSting%20Attack
https://twitter.com/hashtag/CosmicSting%20攻撃
https://twitter.com/hashtag/CosmicSting%20Attack
