2026年4月21日の
セキュリティ情報

Subject: [Security Notice] Please Update Your Google Chrome Browser

Hi everyone,

It has been reported that AI is being used to accelerate the discovery of vulnerabilities in Google Chrome, increasing the risk of potential attacks.

Requested Actions:
1. Please update your Google Chrome browser to the latest version.
2. Check for updates via 'Settings' -> 'About Chrome' and restart the browser to apply them.

Please prioritize this update to ensure your system remains secure.

件名: 【共有】AI（Claude Opus）を用いたChrome V8エンジン向けエクスプロイト開発事例について

お疲れさまです。標記の件に関する情報共有です。

■ 概要
Hacktron社のCTOが、AIモデル「Claude Opus」を活用してGoogle ChromeのV8エンジンにおける境界外アクセス（Out-of-bounds）の脆弱性を悪用するエクスプロイトを開発した事例が報告されました。API費用と少量の人的介入により、短期間で実効性のある攻撃コードが作成されており、AIによる脆弱性発見およびエクスプロイト開発の高速化・低コスト化という新たな脅威が顕在化しています。

■ 影響範囲
- Google Chrome ブラウザ（特にV8エンジンを搭載するバージョン）

■ 対応手順
1. 組織内の全端末において、Chromeが最新バージョンにアップデートされているか確認し、強制適用を検討してください。
2. AIによるゼロデイ攻撃の増加を想定し、EDRの監視強化や多層防御策の再点検を実施してください。

■ 参考情報
- xakep (Source article)

対応優先度: 高（速やかなアップデート適用と監視体制の強化を推奨）

Subject: [FYI] AI-Driven Exploit Development for Chrome V8 Engine

Dear IT Administration Team,

We are sharing information regarding a recent case where an exploit for the Google Chrome V8 engine was developed using the AI model "Claude Opus."

■ Overview
Mohan Pedhapati (CTO of Hacktron) demonstrated that a functional exploit targeting an out-of-bounds vulnerability in the V8 engine could be created with minimal human intervention and relatively low cost via AI API usage. This highlights a significant shift in the threat landscape, where AI drastically reduces the time and expertise required to develop sophisticated 0-day exploits.

■ Scope
- Google Chrome Browser (V8 Engine)

■ Recommended Actions
1. Ensure all corporate endpoints are running the latest version of Google Chrome; consider enforcing updates via group policy.
2. Review and strengthen multi-layered defense strategies and EDR monitoring to mitigate the risk of AI-accelerated zero-day attacks.

■ Reference
- xakep (Source article)

Priority: High (Prompt update deployment and security posture review recommended)

Subject: [Security Advisory] Prompt Injection Vulnerability in GitHub AI Agents (Comment and Control)

Dear IT Administrator,

We are sharing critical information regarding a prompt injection vulnerability affecting several AI programming agents integrated with GitHub.

■ Overview
Researchers have identified a new attack vector called "Comment and Control." This vulnerability allows attackers to hijack AI agents via malicious GitHub PR titles, issue bodies, or comments. By exploiting these, attackers can exfiltrate sensitive API keys and access tokens directly from CI/CD environments. The vulnerability in Claude Code Security Review has been rated as critical with a CVSS score of 9.4.

■ Affected Products
- Anthropic Claude Code Security Review
- Google Gemini CLI Action
- GitHub Copilot Agent (SWE Agent)

■ Recommended Actions
1. Implement strict sanitization of all input data passed to AI agents.
2. Restrict access to privileged environment variables by using flags such as --disallowed-tools or --allowed-tools where applicable.
3. Review and tighten GitHub Actions trigger conditions (e.g., pull_request, issues, issue_comment) to prevent automatic execution by untrusted users.

■ Reference
- freebuf / HackerOne (#3387969)

Priority: High (Prompt action is recommended)

Subject: [Action Required] Emergency Updates for Windows Server Issues

Hi all,

This is a security advisory regarding critical issues identified in the April 2026 Windows Server security updates.

■ Overview
Microsoft has released out-of-band (OOB) updates to address failures in installing KB5082063 on Windows Server 2025 and a critical issue where domain controllers enter a restart loop due to Local Security Authority Subsystem Service (LSASS) crashes.

■ Affected Scope
- Windows Server versions: 2016, 2019, 2022, and 2025
- Specifically high risk for servers with Domain Controller roles.

■ Remediation Steps
1. Identify affected Windows Server instances in your environment.
2. Promptly apply the corresponding emergency update based on the OS version:
- Windows Server 2025: KB5091157
- Windows Server 2023H2: KB5091571
- Windows Server 2022: KB5091575
- Windows Server 2019: KB5091573
- Windows Server 2016: KB5091572

■ Reference
- Microsoft Official Advisory / BleepingComputer

Priority: High (Prompt application is recommended)

Subject: [Action Required] Critical RCE Vulnerability in SGLang (CVE-2026-5760)

Hi all,

This is a security advisory regarding a critical vulnerability identified in the SGLang framework.

■ Overview
A critical remote code execution (RCE) vulnerability (CVE-2026-5760, CVSS 9.8) has been discovered in SGLang. The flaw stems from the use of an unsandboxed jinja2.Environment(), allowing attackers to execute arbitrary Python code via a specially crafted GGUF model file containing a Jinja2 Server-Side Template Injection (SSTI) payload when the "/v1/rerank" endpoint is accessed.

■ Scope
- Systems running the SGLang framework for LLM or multimodal model serving.
- Environments that load GGUF model files from untrusted sources.

■ Mitigation Steps
1. Update SGLang to the latest version to apply the security patch.
2. Implement strict policies against loading unverified model files from public repositories (e.g., Hugging Face) without prior security validation.

■ Reference
- CERT/CC Advisory
- CVE-2026-5760

Priority: High (Prompt action is recommended)

Subject: [Action Required] Exploited Vulnerabilities in Cisco, Kentico, and Zimbra Products

Hi all,

This is a security advisory regarding recently updated vulnerabilities added to the CISA Known Exploited Vulnerabilities (KEV) catalog.

■ Overview
CISA has flagged several high-severity vulnerabilities that are currently being exploited in the wild. These include information disclosure flaws in Cisco Catalyst SD-WAN Manager and Remote Code Execution (RCE) vulnerabilities in Kentico Xperience and Zimbra Collaboration Suite (ZCS).

■ Affected Scope
- Cisco Catalyst SD-WAN Manager (CVE-2026-20133, CVE-2026-20122, CVE-2026-20128)
- Kentico Xperience (CVE-2025-2749)
- Zimbra Collaboration Suite (ZCS)

■ Required Actions
1. Identify if the affected products and versions are deployed within our infrastructure.
2. Promptly apply the latest security patches provided by the respective vendors.
3. Review system logs for any signs of unauthorized access or anomalous behavior associated with these CVEs.

■ Reference
- CISA KEV Catalog
- Official Vendor Security Advisories

Priority: High (Prompt remediation is recommended as these flaws are actively exploited).