2026年7月3日の
セキュリティ情報

Subject: [Security Advisory] WatchGuard Fireware OS / Mobile VPN Vulnerabilities

Dear IT Team,

We are sharing information regarding security vulnerabilities identified in WatchGuard products.

■ Overview
Multiple vulnerabilities, including race conditions, Use-After-Free, and local privilege escalation, have been reported in WatchGuard Firebox and Mobile VPN. These could potentially lead to unauthorized access or privilege escalation.

■ Affected Scope
- Fireware OS 2025.1 (v2026.2 and prior)
- Fireware OS 11.x (v11.12.4_Update1 and prior)
- Fireware OS 12.0 (v12.12 and prior)
- Fireware OS 12.5 (v12.5.18 and prior)
- Mobile VPN with SSL client for Windows (v2026.2 and prior)

■ Remediation Steps
1. Verify the current version of Fireware OS and VPN clients in your environment.
2. Apply the latest security updates provided by the vendor.

■ Reference
- WatchGuard Security Advisories

Priority: High
Deadline: Immediate

Subject: [Info] Exchange Online Privilege Escalation Vulnerability (CVE-2026-54998)

Dear Team,

We are sharing information regarding a vulnerability in Exchange Online.

■ Overview
A privilege escalation vulnerability (CVE-2026-54998) has been disclosed in the Exchange Online authorization mechanism. With a CVSS score of 8.8, it allows authenticated attackers to elevate privileges via the network and potentially access unauthorized data.

■ Scope
- Exchange Online

■ Action Plan
1. No manual patching is required as Microsoft has already applied the fix to the cloud service platform.
2. It is recommended to review audit logs for any suspicious activity involving privileged accounts or unauthorized data access.

■ Reference
- Microsoft Security Update Guide

Priority: Medium
Deadline: N/A (Already patched by vendor)

Subject: [Alert] Malicious npm Packages Linked to North Korean Actors

Dear IT/Security Team,

We are sharing information regarding a supply chain attack involving malicious npm packages linked to North Korean threat actors.

■ Overview
Malicious packages masquerading as Rollup polyfill tooling have been identified. These packages are designed to steal developer secrets and establish remote access to compromised environments.

■ Scope
- Development environments utilizing npm packages.
- Specifically, projects that have installed:
- rollup-packages-polyfill-core
- rollup-runtime-polyfill-core
- quirky-token
- react-icon-svgs
- rollup-plugin-polyfill-connect
- swift-parse-stream

■ Action Plan
1. Audit package.json and lock files across all projects to identify the presence of the listed malicious packages.
2. If found, immediately remove the packages and rotate any potentially compromised API keys or credentials.
3. Educate development teams on the risks of typosquatting and the importance of verifying package metadata.

■ Reference
- JFrog Technical Write-up

Priority: High
Deadline: Immediate

Subject: [Security Alert] Beware of Phishing and Spoofing Emails

Hi everyone,
We are seeing an increase in sophisticated phishing attacks that impersonate government and healthcare organizations.

What we need from you:
1. Do not click on suspicious links or attachments, even if the sender's address looks legitimate.
2. Report any suspicious emails to the IT security team immediately.

Deadline: Please remain vigilant starting today.