{"id":37054,"date":"2019-10-31T22:15:30","date_gmt":"2019-10-31T19:15:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\/"},"modified":"2019-10-31T22:15:30","modified_gmt":"2019-10-31T19:15:30","slug":"pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","title":{"rendered":"Pwnie Awards 2019: k\u00f5ige olulisemad haavatavused ja turvalisuse eba\u00f5nnestumised","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Las Vegases toimunud Black Hat USA konverentsil <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/\">leidis aset<\/a><\/noindex> auhinnatseremonia <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\">Pwnie Awards 2019<\/a><\/noindex>, mille raames tunnustatakse k\u00f5ige olulisemaid haavatavusi ja absurdseid eba\u00f5nnestumisi arvutiturbe valdkonnas. Pwnie Awards on tuntud kui Oscar ja Kuldne vaarikas arvutiturbe alal ning seda toimub igal aastal alates 2007. aastast. <\/p>\n<p>Peamised <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/winners\/\">v\u00f5itjad<\/a><\/noindex> ja <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/nominations\">kategooriad<\/a><\/noindex>: <\/p>\n<ul>\n<li class=\"l\"> <b>Parim serveri viga<\/b>. Auhind antakse k\u00f5ige tehniliselt keeruka ja huvitava vea tuvastamise ja \u00e4rakasutamise eest v\u00f5rguteenuses. V\u00f5itjateks on kuulutatud teadlased,  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/us-19\/briefings\/schedule\/#infiltrating-corporate-intranet-like-nsa---pre-auth-rce-on-leading-ssl-vpns-15545\">kes tuvastasid<\/a><\/noindex> Pulse Secure VPN-teenuse haavatavus, mida kasutavad Twitter, Uber, Microsoft, sla, SpaceX, Akamai, Intel, IBM, VMware, USA merev\u00e4gi, USA siseministeerium ja t\u00f5en\u00e4oliselt pooled Fortune 500 nimekirjas olevatest ettev\u00f5tetest. Uurijad avastasid tahvelarvutisse tagap\u00e4\u00e4su, mis v\u00f5imaldab mitteautentitud r\u00fcndajal muuta igasuguse kasutaja parooli. Probleemi \u00e4rakasutamise v\u00f5imalust demonstreeriti, et saada juur-juurdep\u00e4\u00e4s VPN-serverile, kus on avatud ainult HTTPS-port;\n<p>Auhinda mitte saanud kandidaatide seas tasub mainida: <\/p>\n<ul>\n<li class=\"l\"> Auhinnataotlus, mis on kasutatud autentimise eel <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orangetw\/awesome-jenkins-rce-2019\">haavatavus<\/a><\/noindex> Jenkins\u2019i pideva integreerimise s\u00fcsteemis, mis v\u00f5imaldab koodi t\u00e4itmist serveris. Haavatavust kasutatakse aktiivselt robotite poolt kr\u00fcptovaluuta kaevandamiseks serverites;\n<li class=\"l\"> Kriitiline <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50819\">haavatavus<\/a><\/noindex> haavatavus Exim e-posti serveris, mis v\u00f5imaldab koodi t\u00e4itmist serveris juur\u00f5igustega;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/10\/millions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud\/\">Haavatavused<\/a><\/noindex> Xiongmai XMeye P2P IP-kaamerates, mis v\u00f5imaldab seadme \u00fcle kontrolli haarata. Kaamerad tarniti tehaseparooliga ja ei kasutanud tarkvara uuendamisel digitaalallkirjade kontrollimist;\n<li class=\"l\"> Kriitiline <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0708\">haavatavus<\/a><\/noindex> Windowsi RDP protokolli rakenduses, mis v\u00f5imaldab kaugelt oma koodi k\u00e4itada;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50177\">Haavatavus<\/a><\/noindex> WordPressis, mis on seotud PHP-koodi \u00fcleslaadimisega pildi vormis. Probleem v\u00f5imaldab k\u00e4ivitada suvalist koodi serveris, omades autori (Author) \u00f5igusi veebisaidil;\n<\/ul>\n<li class=\"l\"> <b>Parim viga kliendi tarkvaras<\/b>. V\u00f5itjaks tunnistati kergesti \u00e4ra kasutatav <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-6223\">haavatavus<\/a><\/noindex> Apple FaceTime'i grupik\u00f5nede s\u00fcsteemis, mis v\u00f5imaldab grupik\u00f5ne algatajal sundida k\u00f5ne vastuv\u00f5tjat vastu v\u00f5tma (n\u00e4iteks kuulamiseks ja pealtkuulamiseks).\n<p>Preemiale pretendeerisid ka: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50679\">Haavatavus<\/a><\/noindex> WhatsAppis, mis v\u00f5imaldab suvalise koodi t\u00e4itmist, kui saata spetsiaalset vormindatud h\u00e4\u00e4lk\u00f5net;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=899689\">Haavatavus<\/a><\/noindex> Chrome'i brauseris kasutatavas Skia graafikakogus, mis v\u00f5ib p\u00f5hjustada m\u00e4lukahjustusi, kuna ujuki t\u00e4psuse operatsioonide t\u00f5ttu teatud geomeetriliste teisenduste korral;\n<\/ul>\n<li class=\"l\"> <b>Parim haavatavus, mis viib \u00f5iguste t\u00f5usuni<\/b>. V\u00f5it anti rikka avastamise eest <noindex><a rel=\"nofollow\" href=\"https:\/\/googleprojectzero.blogspot.com\/2019\/01\/voucherswap-exploiting-mig-reference.html\">haavatavusest<\/a><\/noindex> iOS-i tuumas, mida saab \u00e4ra kasutada ipc_voucher kaudu, mis on saadaval Safari brauseri kaudu.\n<p>Preemiale pretendeerisid ka: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0859\">Haavatavus<\/a><\/noindex> Windowsis, mis v\u00f5imaldab saada t\u00e4ielikku kontrolli s\u00fcsteemi \u00fcle, manipuleerides CreateWindowEx funktsiooniga (win32k.sys). Probleem tuvastati pahavara anal\u00fc\u00fcsi k\u00e4igus, mis kasutas haavatavust enne selle parandamist;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50130\">Haavatavus<\/a><\/noindex> runc ja LXC, mis m\u00f5jutavad Dockerit ning teisi konteinerit isolatsiooni s\u00fcsteeme, v\u00f5imaldades r\u00fcndajal, kes kontrollib isoleeritud konteinerit, muuta runci t\u00e4itmisfaili ja saada root-privileegid host-s\u00fcsteemi poolel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.zecops.com\/vulnerabilities\/exploit-of-cve-2019-7286\/\">Haavatavus<\/a><\/noindex> iOS-is (CFPrefsDaemon), mis v\u00f5imaldab \u00fcletada isolatsiooni re\u017eiime ja k\u00e4ivitada koodi root-\u00f5igustega;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2018-9568\">Haavatavus<\/a><\/noindex> Linuxi TCP-steki redigeerimises, mida kasutatakse Androidis, mis v\u00f5imaldab kohalikul kasutajal t\u00f5sta oma \u00f5igusi seadmes;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49931\">Haavatavused<\/a><\/noindex> systemd-journalis, mis v\u00f5imaldab saada root-\u00f5igused;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/usn.ubuntu.com\/4077-1\/\">Haavatavus<\/a><\/noindex> tmpreaper utiliidis, mis on m\u00f5eldud \/tmp puhastamiseks, v\u00f5imaldades hoida oma faili igas FS-i osas;\n<\/ul>\n<li class=\"l\"> <b>Parim kr\u00fcptograafiline r\u00fcnnak<\/b>. Autasustatakse k\u00f5ige olulisemate haavatavuste avastamise eest reaalses s\u00fcsteemides, protokollides ja \u0161ifreerimisalgoritmides. Auhind anti v\u00e4lja avastamise eest <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">haavatavuste<\/a><\/noindex> WPA3 ja EAP-pwd tehnoloogias, mis v\u00f5imaldavad taastada \u00fchenduse parool ja p\u00e4\u00e4seda ligi traadita v\u00f5rgule ilma parooli teadmata.\n<p>Preemia saajate hulka kuulusid: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48597\">Meetod<\/a><\/noindex> PGP ja S\/MIME kr\u00fcpteerimisr\u00fcnnakud e-posti klientides;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.f-secure.com\/cold-boot-attacks\/\">Kasutamine<\/a><\/noindex> k\u00fclma taask\u00e4ivitamise meetodi rakendamine Bitlockeri \u0161ifreeritud sektsioonide sisu k\u00e4tte saamiseks;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50213\">Haavatavus<\/a><\/noindex> OpenSSL-is, mis v\u00f5imaldab eristada olukordi vale t\u00e4iendava t\u00e4idise ja vale MAC-i saamisel. Probleem tuleneb ebakorrektsetest nullbittide t\u00f6\u00f6tlusest t\u00e4iendavas t\u00e4idisemas (padding oracle);\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/11\/my-name-is-johann-wolfgang-von-goethe-i-can-prove-it\/\">Probleemid<\/a><\/noindex> Saksamaal kasutusele v\u00f5etud SAML-i kasutavate isikutuvastustkaartide rakendamine;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.chromium.org\/chromium-os\/u2f-ecdsa-vulnerability\">Probleem<\/a><\/noindex> juhuslike arvude entropiast U2F tokenite toetuse rakenduses ChromeOS;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/monocypher.org\/quality-assurance\/disclosures\">Haavatavus<\/a><\/noindex> Monocypher-is, mille t\u00f5ttu tunnistati kehtivateks null EdDSA allkirjad.\n<\/ul>\n<li class=\"l\"> <b>K\u00f5ige innovaatilisem uurimus.<\/b>  Preemia anti tehnika arendajale <noindex><a rel=\"nofollow\" href=\"https:\/\/gamozolabs.github.io\/fuzzing\/2018\/10\/14\/vectorized_emulation.html\">Vektoriseeritud emulatsioon<\/a><\/noindex>, kasutades AVX-512 vektork\u00e4ske programmide k\u00e4itamise emuleerimiseks, v\u00f5imaldades oluliselt suurendada fuzzing-testeerimise kiirus (kuni 40-120 miljardit k\u00e4sku sekundis). Tehnika v\u00f5imaldab igal CPU tuumal samal ajal k\u00e4ivitada 8 64-bitist v\u00f5i 16 32-bitist virtuaalmasinat, mis on m\u00f5eldud rakenduste fuzzing-testeerimiseks.\n<p>Preemia saamiseks kandideerisid: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mimecast.com\/blog\/2019\/06\/exploit-using-microsoft-excel-power-query-for-remote-dde-execution-discovered\/\">Haavatavus<\/a><\/noindex> Power Query tehnologia MS Excelis, mis v\u00f5imaldab korraldada koodi k\u00e4ivitamist ja \u00fcletada rakenduste isoleerimise meetodeid spetsiaalselt vormistatud elektrooniliste tabelite avamisel;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50446\">Meetod<\/a><\/noindex> Tesla autode autopiloodi petmine, et provotseerida vastassuunas s\u00f5itmist;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2019\/02\/reverse-engineering-architecture-pinout-plc\/\">T\u00f6\u00f6<\/a><\/noindex> Siemens S7-1200 ASICS-kiibi tagasiv\u00f5tmine;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/arxiv.org\/abs\/1808.10250\">SonarSnoop<\/a><\/noindex> \u2014 s\u00f5rmej\u00e4lgede j\u00e4lgimise tehnika telefonide lukustuskoodide m\u00e4\u00e4ramiseks, mis p\u00f5hineb sonari t\u00f6\u00f6p\u00f5him\u00f5ttel \u2014 nutitelefoni \u00fclemine ja alumine k\u00f5lar genereerivad kuulmatuid vibratsioone, samas kui sisse ehitatud mikrofonid need \u00fcles v\u00f5tavad, et anal\u00fc\u00fcsida k\u00e4e peegeldatud vibratsioonide olemasolu;\n<li class=\"l\"> \t<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50260\">Arendus<\/a><\/noindex> Ghidra tagasiv\u00f5tmise t\u00f6\u00f6riistade ANB;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/@massarelli\/safe-self-attentive-function-embedding-d80abbfea794\">SAFE<\/a><\/noindex> \u2014 tehnika, mis m\u00e4\u00e4rab sama funktsioonikoodi kasutamist mitmes t\u00e4idetavas failis, tuginedes binaarsete kogumite anal\u00fc\u00fcsile;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/vulmon.com\/vulnerabilitydetails?qid=CVE-2019-11098&#038;scoretype=cvssv2\">Loomine<\/a><\/noindex> meetodi leidmine Intel Boot Guard mehhanismi v\u00e4ltimiseks muudetud UEFI-firmware'de laadimiseks ilma digitaalsete allkirjade kontrollimiseta.\n<\/ul>\n<li class=\"l\"> <b>K\u00f5ige lameram reageering m\u00fc\u00fcjalt<\/b> (Lame Vendor Response). Auhind k\u00f5ige ebaadekvaatse reageeringu eest oma toote haavatavuse teatega. V\u00f5itjateks osutusid BitFi kr\u00fcptorahakoti arendajad, kes h\u00fc\u00fcdsid oma toote erakordsest turvalisusest, mis osutus tegelikult valeinformatsiooniks, ja korraldasid jahtimist uurijatele, kes tuvastasid haavatavusi, ning ei maksnud lubatud preemiaid probleemide tuvastamise eest;\n<p>Preemia saamise kandidaatide seas kaaluti ka: <\/p>\n<ul>\n<li class=\"l\"> Turvaspetsialist s\u00fc\u00fcdistas Atrienti direktorit r\u00fcnnaku korraldamises, et sundida eemaldama tema tuvastatud haavatavuse raport, kuid direktor eitab intsidenti ja j\u00e4lgimiskaamerad ei ole seda r\u00fcnnakut registreerinud;\n<li class=\"l\"> Ettev\u00f5te Zoom venitas kriitilise vea parandamist <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/bugbountywriteup\/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5\">haavatavusest<\/a><\/noindex> oma konverentsi s\u00fcsteemis ja lahendas probleemi alles p\u00e4rast avalikku t\u00e4helepanu. Turvan\u00f5rkuse t\u00f5ttu sai v\u00e4line r\u00fcndaja ligip\u00e4\u00e4su macOS kasutajate veebikaamerate andmetele, kui avati spetsiaalselt kujundatud leht (Zoom k\u00e4ivitas kliendi poolel HTTP-serveri, mis vastu v\u00f5ttis k\u00e4ske kohalikule rakendusele).\n<li class=\"l\"> \u00fcle 10 aasta edutuks j\u00e4\u00e4nud <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51006\">probleem<\/a><\/noindex> OpenPGP kr\u00fcptograafiliste v\u00f5tmete serveritega, p\u00f5hjendades seda sellega, et kood on kirjutatud spetsiifilises OCaml keeles ja j\u00e4\u00e4b hoolduseta.\n<\/ul>\n<p><b>K\u00f5ige ebatavam v\u00e4ide turvan\u00f5rkuse kohta<\/b>. Antakse k\u00f5ige \u00fcleolevama ja ulatuslikuma probleemide kajastuse eest internetis ja meedias, eriti kui turvan\u00f5rkus osutub l\u00f5puks mittekasutatavaks. Auhind anti v\u00e4lja v\u00e4ljaandele Bloomberg <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49393\">teade<\/a><\/noindex> Super Micro plaatide spionaa\u017eikiipide avastamisest, mis ei leidnud kinnitust, n\u00fc\u00fcd allika andmed viitavad hoopis <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49417\">teistsugusele teabele<\/a><\/noindex>.<\/p>\n<p>Kategoorias on mainitud: <\/p>\n<ul>\n<li class=\"l\"> Turvan\u00f5rkust libssh, mis <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49453\">puudutas<\/a><\/noindex> \u00fcksikuid serverirakendusi (libssh ei kasutata serverites peaaegu kunagi), kuid NCC Group esitles seda kui turvan\u00f5rkust, mis v\u00f5imaldab r\u00fcnnata iga serverit OpenSSH.\n<li class=\"l\"> DICOM-formaadiga pilte kasutavad r\u00fcnnakud. Idee on selles, et saate luua Windowsi t\u00e4itevfaili, mis n\u00e4eb v\u00e4lja nagu kehtiv DICOM-formaadis pilt. Seda faili saab \u00fcles laadida meditsiiniseadmestikku ja k\u00e4ivitada.\n<li class=\"l\"> Haavatavus <noindex><a rel=\"nofollow\" href=\"https:\/\/thrangrycat.com\/\">Thrangrycat<\/a><\/noindex>, mis v\u00f5imaldab \u00fcletada Cisco seadmete turvalise laadimise mehhanismi. Haavatavus on klassifitseeritud \u00e4\u00e4rmuslikuks probleemiks, kuna n\u00f5uab r\u00fcnnaku jaoks root-\u00f5igusi, kuid kui r\u00fcndaja on juba root-juurdep\u00e4\u00e4su saanud, siis millest turvalisusest saame r\u00e4\u00e4kida. Haavatavus on samal ajal v\u00f5itnud k\u00f5ige alahinnatud probleemide kategoorias, kuna see v\u00f5imaldab Flashi sisse viia alalise tagaukse;\n<\/ul>\n<li class=\"l\"> <b>Suurim eba\u00f5nnestumine<\/b> (Most Epic FAIL). V\u00f5it anti v\u00e4lja v\u00e4ljaandele Bloomberg mitmete sensatsiooniliste artiklite eest, millel on k\u00f5lavad pealkirjad, kuid v\u00e4ljam\u00f5eldud faktid, allikate varjamine, vanden\u00f5uteooriate k\u00e4sitlemine ja selliste terminite kasutamine nagu \u201ek\u00fcberrelv\u201d, samuti lubamatud \u00fcldistused. Teiste nominentide hulgas:\n<ul>\n<li class=\"l\"> Shadowhammeri r\u00fcnnak Asus'i p\u00fcsivara v\u00e4rskendusteenusele;\n<li class=\"l\"> BitFi hoidla h\u00e4kkimine, mida reklaamiti kui \u201emurda mitte lubatut\u201d;\n<li class=\"l\"> Isikuandmete lekked ja <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49366\">tokenid<\/a><\/noindex> Facebooki juurdep\u00e4\u00e4se.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51267\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37054","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pwnie Awards 2019: k\u00fcberjulgeoleku k\u00f5ige olulisemad haavatavused ja eba\u00f5nnestumised | ProHoster","description":"Las Vegases toimunud Black Hat USA konverentsil anti \u00fcle 2019. aasta Pwnie Awards auhinnad, mille raames tunnustati silmapaistvamaid haavatavusi ja absurdseid eba\u00f5nnestumisi k\u00fcberjulgeoleku valdkonnas. Pwnie Awards tunnuseks peetakse Oscarite ja Kuldmaliinide analooge k\u00fcberjulgeoleku osas ning neid korraldatakse igal aastal alates 2007. aastast. Peamised v\u00f5itjad ja nominatsioonid: Parim serveri","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:15:30+00:00","article:modified_time":"2019-10-31T19:15:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37054","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:53:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:34:24","updated":"2026-01-22 05:53:22"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37054"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37054\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}