2026年7月4日の
セキュリティ情報

Subject: [Alert] Supply Chain Attack by North Korean Actors (PolinRider)

Dear Team,

This is a technical alert regarding a supply chain campaign known as PolinRider, attributed to the North Korean threat actor "Contagious Interview."

■ Overview
Attackers have published 108 malicious artifacts across multiple registries by compromising maintainer accounts and modifying legitimate repositories. This activity targets developers and the cryptocurrency sector.

■ Scope
- npm libraries (19)
- Composer packages (10)
- Go modules (61)
- Google Chrome extension (1)

■ Recommended Actions
1. Audit project dependencies (npm, Composer, Go) for unexpected or suspicious version updates.
2. Review installed browser extensions on developer workstations for unauthorized additions.
3. Enforce Multi-Factor Authentication (MFA) for all registry and repository maintainer accounts.

■ Reference
- Socket Security Analysis

Priority: High
Deadline: Immediate

Subject: [Security Advisory] Vulnerabilities in FatFs Filesystem Library

Dear Team,

We are sharing information regarding seven vulnerabilities discovered in the FatFs library, which is integrated into millions of embedded devices.

■ Overview
FatFs, used for FAT/exFAT support, contains flaws that allow an attacker with physical access to execute arbitrary code via malformed USB drives or SD cards. Many affected devices lack modern memory protections, increasing the risk of a full system compromise.

■ Scope
- Embedded devices utilizing the FatFs library (e.g., security cameras, drones, industrial controllers, hardware wallets).

■ Recommended Actions
1. Restrict physical access to USB and SD card slots on critical embedded hardware.
2. Contact device vendors to verify if patches for FatFs are available or planned.
3. Enforce policies against connecting untrusted storage media to embedded systems.

■ Reference
- runZero Disclosure Report

Priority: Medium
Deadline: As soon as possible

Subject: [Security Advisory] Linux Kernel CVE-2026-46242 (Bad Epoll) Mitigation

Dear IT/Security Team,

We are sharing information regarding a critical privilege escalation vulnerability in the Linux kernel.

■ Overview
A use-after-free vulnerability known as 'Bad Epoll' (CVE-2026-46242) has been identified. This flaw allows an unprivileged local user to gain full root access to the system.

■ Scope
- Linux-based desktops and servers
- Android OS

■ Mitigation Steps
1. Check for the latest security updates for your specific Linux distribution and Android devices.
2. Apply the kernel patches and reboot the affected systems to ensure the fix is active.

■ Reference
- CVE-2026-46242

Priority: High
Deadline: Immediate