{"id":37054,"date":"2019-10-31T22:15:30","date_gmt":"2019-10-31T19:15:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\/"},"modified":"2019-10-31T22:15:30","modified_gmt":"2019-10-31T19:15:30","slug":"pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","title":{"rendered":"Pwnie Awards 2019: k\u00f5ige olulisemad haavatavused ja turvan\u00f5rkused","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nais Las Vegases toimunud Black Hat USA konverentsil <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/\">sai<\/a><\/noindex> auhindade jagamise tseremoonia <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\">Pwnie Awards 2019<\/a><\/noindex>, mille raames t\u00f5steti esile k\u00f5ige m\u00e4rkimisv\u00e4\u00e4rsemaid haavatavusi ja absurdseid eba\u00f5nnestumisi k\u00fcberjulgeoleku valdkonnas. Pwnie Awardsit peetakse k\u00fcberjulgeoleku alal Oscari ja Kuldse vaarika analoogiks ning seda korraldatakse igal aastal alates 2007. aastast. <\/p>\n<p>Peamised <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/winners\/\">v\u00f5itjad<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/nominations\">kategooriates<\/a><\/noindex>: <\/p>\n<ul>\n<li class=\"l\"> <b>Parim serveri t\u00f5rge<\/b>. Selle auhind antakse k\u00f5ige tehniliselt keerulisema ja huvitavama haavatavuse avastamise ja \u00e4rakasutamise eest v\u00f5rgu teenuses. V\u00f5itjateks tunnistati teadlased,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/us-19\/briefings\/schedule\/#infiltrating-corporate-intranet-like-nsa---pre-auth-rce-on-leading-ssl-vpns-15545\">kes avastasid<\/a><\/noindex> haavatavuse VPN-teenuse pakkujas Pulse Secure, mille VPN-teenust kasutavad Twitter, Uber, Microsoft, sla, SpaceX, Akamai, Intel, IBM, VMware, USA merev\u00e4gi, USA kodu- ja julgeolekuministeerium ning ilmselt pooled Fortune 500 ettev\u00f5tetest. Teadlaste poolt leiti tagauks, mis v\u00f5imaldab autentimata r\u00fcndajal vahetada igasuguse kasutaja parooli. N\u00e4idati, et probleemi saab \u00e4ra kasutada, et saada root-juurdep\u00e4\u00e4s VPN-serverisse, millel on avatud ainult HTTPS-port;\n<p>V\u00f5itmata j\u00e4\u00e4nud kandidaatide seas v\u00f5ib v\u00e4lja tuua: <\/p>\n<ul>\n<li class=\"l\"> Kasutatav autentimise eel <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orangetw\/awesome-jenkins-rce-2019\">haavatavus<\/a><\/noindex> kontinuurse integreerimise s\u00fcsteemis Jenkins, mis v\u00f5imaldab k\u00e4ivitada koodi serveris. Haavatavust kasutatakse aktiivselt robotite poolt kr\u00fcptoraha kaevandamise korraldamiseks serverites;\n<li class=\"l\"> Kriitiline <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50819\">haavatavus<\/a><\/noindex> Eximi meiliserveris, mis lubab k\u00e4ivitada koodi serveris root-\u00f5igustega;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/10\/millions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud\/\">Haavatavused<\/a><\/noindex> Xiongmai XMeye P2P IP-kaamerates, mis v\u00f5imaldavad seadmest kontrolli haarata. Kaamerad tarniti inseneriparooliga ega kasutanud kindla allkiri kontrollimiseks tarkvara uuendamisel;\n<li class=\"l\"> Kriitiline <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0708\">haavatavus<\/a><\/noindex> Windowsi RDP protokolli rakenduses, mis lubab kaugelt oma koodi k\u00e4ivitada;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50177\">Haavatavus<\/a><\/noindex> WordPressis, mis on seotud PHP-koodi \u00fcleslaadimisega piltide n\u00e4ol. Probleem v\u00f5imaldab k\u00e4ivitada suvalist koodi serveris, olles samal ajal autori\u00f5iguste omaniku (Author) \u00f5igustes saidil;\n<\/ul>\n<li class=\"l\"> <b>Parim t\u00f5rge klientrakenduses<\/b>. V\u00f5itjaks tunnistati kergesti \u00e4rakasutatav <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-6223\">haavatavus<\/a><\/noindex> Apple FaceTime grupik\u00f5nede s\u00fcsteem, mis lubab grupik\u00f5ne algatajal algatada sunniviisilise k\u00f5ne vastuv\u00f5tmise helistava osapoole poole (n\u00e4iteks kuulamiseks ja nuhkimiseks).\n<p>Preemia saamiseks kandideerisid ka: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50679\">Haavatavus<\/a><\/noindex> WhatsAppis, mis v\u00f5imaldab koodi t\u00e4itmist l\u00e4bi spetsiaalselt vormistatud h\u00e4\u00e4lteate saatmise;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=899689\">Haavatavus<\/a><\/noindex> graafika raamatukogus Skia, mida kasutatakse Chrome'i brauseris, mis v\u00f5ib p\u00f5hjustada m\u00e4lukahjustusi teatud geomeetriliste teisenduste t\u00f5ttu, tulenevalt ujuvpunkti tehete vigadest;\n<\/ul>\n<li class=\"l\"> <b>Parim haavatavus, mis viib privileegide t\u00f5stmiseni<\/b>. V\u00f5it anti avastamise eest <noindex><a rel=\"nofollow\" href=\"https:\/\/googleprojectzero.blogspot.com\/2019\/01\/voucherswap-exploiting-mig-reference.html\">haavatavuse<\/a><\/noindex> iOS-i tuumas, mida saab \u00e4ra kasutada ipc_voucher'i kaudu, mis on brauseri Safari kaudu kergesti k\u00e4ttesaadav.\n<p>Preemia saamiseks kandideerisid ka: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0859\">Haavatavus<\/a><\/noindex> Windowsis, mis v\u00f5imaldab s\u00fcsteemi t\u00e4ielikku kontrolli saavutamist CreateWindowEx (win32k.sys) funktsiooni manipuleerimise kaudu. Probleem avastati pahavara anal\u00fc\u00fcsi k\u00e4igus, mis kasutas haavatavust enne selle parandamist;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50130\">Haavatavus<\/a><\/noindex> runc ja LXC, mis m\u00f5jutab Dockerit ja teisi konteineri isoleerimisse s\u00fcsteeme ning v\u00f5imaldab kurjategijal isoleeritud konteinerist muuta runci t\u00e4itmisfaili ja saada host-s\u00fcsteemi root-priviligeerimised;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.zecops.com\/vulnerabilities\/exploit-of-cve-2019-7286\/\">Haavatavus<\/a><\/noindex> iOS-is (CFPrefsDaemon), mis v\u00f5imaldab isoleerimisre\u017eiime m\u00f6\u00f6da minna ja k\u00e4itada koodi root-\u00f5igustega;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2018-9568\">Haavatavus<\/a><\/noindex> Linuxi TCP-kihi redaktsioonis, mida kasutatakse Androidis, mis v\u00f5imaldab kohalikul kasutajal oma privileege seadmes t\u00f5sta;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49931\">Haavatavused<\/a><\/noindex> systemd-journaldis, mis v\u00f5imaldab saada root-\u00f5iguseid;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/usn.ubuntu.com\/4077-1\/\">Haavatavus<\/a><\/noindex> tmpreaperi utiliidis \/tmp puhastamiseks, mis v\u00f5imaldab hoida oma faili igas failis\u00fcsteemi osas;\n<\/ul>\n<li class=\"l\"> <b>Parim kr\u00fcptograafiline r\u00fcnnak<\/b>. Antakse suurimate haavatavuste avastamise eest reaalsetes s\u00fcsteemides, protokollides ja kr\u00fcpteerimisalgoritmides. Preemia anti <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">haavatavuste<\/a><\/noindex> WPA3 traadita v\u00f5rgukaitsetehnoloogias ning EAP-pwd-s, mis v\u00f5imaldavad taastada \u00fchendamise parooli ja p\u00e4\u00e4seda traadita v\u00f5rku ilma parooli teadmiseta.\n<p>Preemia saamiseks kandideerisid ka: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48597\">Meetod<\/a><\/noindex> PGP ja S\/MIME kr\u00fcptimist r\u00fcndamise meetod e-posti klientides;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.f-secure.com\/cold-boot-attacks\/\">Rakendamine<\/a><\/noindex> k\u00fclmalaadimise meetodit, et p\u00e4\u00e4seda ligi Bitlockeri kr\u00fcpteeritud sektsioonide sisule;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50213\">Haavatavus<\/a><\/noindex> OpenSSL-is, mis v\u00f5imaldab eraldada olukorrad vale lisamatriisi ja vale MAC saamisel. Probleem on p\u00f5hjustatud nullbittide valest t\u00f6\u00f6tlemisest lisamatriisis (padding oracle);\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/11\/my-name-is-johann-wolfgang-von-goethe-i-can-prove-it\/\">Probleemid<\/a><\/noindex> Saksamaal kasutatavate identifitseerimiskaartidega, mis kasutavad SAML;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.chromium.org\/chromium-os\/u2f-ecdsa-vulnerability\">Probleem<\/a><\/noindex> juhuslike numbrite entropia U2F tokenite toe rakenduses ChromeOS-is;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/monocypher.org\/quality-assurance\/disclosures\">Haavatavus<\/a><\/noindex> Monocypheris, mille t\u00f5ttu tunnustati null EdDSA allkirjade kehtivust.\n<\/ul>\n<li class=\"l\"> <b>K\u00f5ige innovaatilisem uuring.<\/b>  Auhind anti tehnika arendajale <noindex><a rel=\"nofollow\" href=\"https:\/\/gamozolabs.github.io\/fuzzing\/2018\/10\/14\/vectorized_emulation.html\">Vektoreeritud emulatsioon<\/a><\/noindex>, kasutades AVX-512 vektori juhiseid programmide t\u00e4itmise emuleerimiseks, v\u00f5imaldades oluliselt suurendada fuzz-testi kiirus (kuni 40-120 miljardit instruktsiooni sekundis). Tehnika v\u00f5imaldab iga CPU tuuma peal paralleelselt t\u00e4ita 8 64-bitist v\u00f5i 16 32-bitist virtuaalmasinat fuzz-testi rakendusena.\n<p>Auhinna saamiseks kandideerisid: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mimecast.com\/blog\/2019\/06\/exploit-using-microsoft-excel-power-query-for-remote-dde-execution-discovered\/\">Haavatavus<\/a><\/noindex> Power Query tehnoloogia MS Excelis, mis v\u00f5imaldab organiseerida koodi t\u00e4itmist ja m\u00f6\u00f6da minna rakenduste isolatsiooni meetoditest spetsiaalselt vormindatud elektrooniliste tabelite avamisel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50446\">Meetod<\/a><\/noindex> Tesla autodest autouuenduse petmine, et provotseerida s\u00f5itmist vastassuunas;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2019\/02\/reverse-engineering-architecture-pinout-plc\/\">T\u00f6\u00f6<\/a><\/noindex> Siemens S7-1200 ASICS kiibi tagasikatsumise inseneriteaduses;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/arxiv.org\/abs\/1808.10250\">SonarSnoop<\/a><\/noindex> \u2014 s\u00f5rmej\u00e4lgede j\u00e4lgimise tehnika telefonikoodi tuvastamiseks, mis p\u00f5hineb sonaritehnikal \u2014 nutitelefoni \u00fclemine ja alumine k\u00f5lar genereerib kuulmatuid v\u00e4rinaid, samas kui sisseehitatud mikrofonid p\u00fc\u00fcavad need kinni, et anal\u00fc\u00fcsida k\u00e4telt peegelduvaid v\u00e4rinaid;\n<li class=\"l\"> \t<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50260\">Arendus<\/a><\/noindex> Ameerika \u00dchendriikide riikliku julgeoleku agentuuri (NSA) tagasikatsumise t\u00f6\u00f6riistad Ghidra jaoks;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/@massarelli\/safe-self-attentive-function-embedding-d80abbfea794\">SAFE<\/a><\/noindex> \u2014 tehnika, mis m\u00e4\u00e4rab identsete funktsioonide koodi kasutamise mitmes teostuses l\u00e4bi binaarsete kogude anal\u00fc\u00fcsi;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/vulmon.com\/vulnerabilitydetails?qid=CVE-2019-11098&#038;scoretype=cvssv2\">Meetodi loomine<\/a><\/noindex> Intel Boot Guard mehhanismi \u00fcletamiseks, et laadida muudatud UEFI-firmware ilma digitaalse allkirja kontrollita.\n<\/ul>\n<li class=\"l\"> <b>K\u00f5ige naljakam reageering tarnijalt<\/b> (Naljakaim tarnija reageering). Nominatsioon k\u00f5ige mitteadekvaatsema reageeringu eest haavatavuse teate kohta oma tootes. V\u00f5itjateks osutusid BitFi kr\u00fcptovaluuta rahakoti arendajad, kes haarasid \u00fcle\u00fcldise turvalisuse ja see osutus vale v\u00e4lja ja korraldasid j\u00e4litust uurijatele, kes tuvastasid haavatavusi, ning ei maksnud lubatud auhindu probleemide tuvastamise eest;\n<p>Auhinna kandidaate arutleti ka j\u00e4rgmistelt: <\/p>\n<ul>\n<li class=\"l\"> Turbeediate eriteerimise spetsialist s\u00fc\u00fcdistas Atrienti direktoril r\u00fcnnaku korraldamises, et sundida eemaldama raport tuvastatud haavatavuse kohta, kuid direktor eitab intsidenti ja turvakaamerad ei registreerinud r\u00fcnnakut;\n<li class=\"l\"> Ettev\u00f5te Zoom viivitas kriitilise <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/bugbountywriteup\/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5\">haavatavuse<\/a><\/noindex> s\u00fcsteemi konverentsitoodetes parandamisega ja lahendas probleemi alles p\u00e4rast avalikku paljastust. Haavatavus v\u00f5imaldas v\u00e4lisel r\u00fcndajal saada andmeid macOS-i kasutajate veebikaameratest, kui avati brauseris spetsialist kujundatud leht (Zoom k\u00e4ivitas kliendipoolel HTTP-serveri, mis v\u00f5ttis k\u00e4ske kohalikult rakenduselt).\n<li class=\"l\"> \u00dcle 10 aasta p\u00fcsiv suutmatust lahendada <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51006\">probleem<\/a><\/noindex> OpenPGP kr\u00fcpteerimisv\u00f5tmete serveritega, p\u00f5hjendades seda sellega, et kood on kirjutatud spetsiifilises OCaml keeles ja j\u00e4\u00e4b ilma hoolduseta.\n<\/ul>\n<p><b>K\u00f5ige \u00fclepingutatud haavatavuse avalikustamine<\/b>. Antakse v\u00e4lja k\u00f5ige glamuurosema ja laiaulatuslikuma probleemide k\u00e4sitlemise eest internetis ja meedias, eriti juhul, kui haavatavus osutub praktikas mitte\u00e4ratavatuks. Auhind anti v\u00e4lja v\u00e4ljaandele Bloomberg <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49393\">avalduse<\/a><\/noindex> tuvastamisest spioonikomponente Super Micro emaplaatidel, mis ei leidnud kinnitust ning allikas osutas hoopis <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49417\">teisele teabele<\/a><\/noindex>.<\/p>\n<p>Nominatsioonides on mainitud: <\/p>\n<ul>\n<li class=\"l\"> Haavatavust libssh, mis <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49453\">m\u00f5jutas<\/a><\/noindex> \u00fcksikuid serverirakendusi (libssh ei ole serverites peaaegu kasutusel), kuid NCC Group esitles seda kui haavatavust, mis v\u00f5imaldab r\u00fcnnata igat OpenSSH serverit.\n<li class=\"l\"> DICOM-formaadis piltide r\u00fcnnak. Probleem seisneb selles, et saab ette valmistada Windowsi t\u00e4itmisfaili, mis n\u00e4eb v\u00e4lja nagu kehtiv DICOM-formaadis pilt. Seda faili saab \u00fcles laadida meditsiiniseadmest ja k\u00e4ivitada.\n<li class=\"l\"> Haavatavus <noindex><a rel=\"nofollow\" href=\"https:\/\/thrangrycat.com\/\">Thrangrycat<\/a><\/noindex>, mis v\u00f5imaldab k\u00f5rvale hoida Cisco seadmete turvalise k\u00e4ivitamise mehhanismi. Haavatavus klassifitseeriti \u00fclepingutatud probleemide kategooriasse, kuna r\u00fcnnaku jaoks on vajalik root-juurdep\u00e4\u00e4s, kuid kui r\u00fcndaja oleks juba saanud root-juurdep\u00e4\u00e4su, siis millest r\u00e4\u00e4kida turvalisuse osas. Haavatavus v\u00f5itis samal ajal ka k\u00f5ige alahinnatud probleemide kategooria, kuna see v\u00f5imaldab implantida p\u00fcsivat tagauks Flashi;\n<\/ul>\n<li class=\"l\"> <b>Suurim eba\u00f5nnestumine<\/b> (Most Epic FAIL). V\u00f5it l\u00e4heb v\u00e4ljaandele Bloomberg seeria sensatsiooniliste artiklite eest, millel on \u00fc\u00fcratud pealkirjad, kuid v\u00e4ljam\u00f5eldud faktid, allikate varjamine, vanden\u00f5uteooriate levitamine, selliste terminite kasutamine nagu \u201ek\u00fcberrelvad\u201c ja vastuv\u00f5etamatud \u00fcldistused. Muud kandidaadid:\n<ul>\n<li class=\"l\"> Shadowhammeri r\u00fcnnak Asus'i tarkvarauuenduste teenusele;\n<li class=\"l\"> BitFi rahakoti h\u00e4kkimine, mida reklaamiti kui \u201emurda ikkagi ei saa\u201c;\n<li class=\"l\"> Isikuandmete ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49366\">juurdep\u00e4\u00e4sutokenite<\/a><\/noindex> lekkeid Facebookis.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51267\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37054","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pwnie Awards 2019: k\u00f5ige olulisemad turvaaugud ja ebaedud | ProHoster","description":"Las Vegases toimunud Black Hat USA konverentsil toimus Pwnie auhindade jagamine.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:15:30+00:00","article:modified_time":"2019-10-31T19:15:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37054","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:53:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:34:24","updated":"2026-01-22 05:53:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37054"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37054\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}