{"id":37054,"date":"2019-10-31T22:15:30","date_gmt":"2019-10-31T19:15:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\/"},"modified":"2019-10-31T22:15:30","modified_gmt":"2019-10-31T19:15:30","slug":"pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","title":{"rendered":"Pwnie Awards 2019: cele mai semnificative vulnerabilit\u0103\u021bi \u0219i e\u0219ecuri \u00een securitate","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La conferin\u021ba Black Hat USA care a avut loc \u00een Las Vegas <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/\">a avut loc<\/a><\/noindex> ceremonia de decernare a premiilor <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\">Pwnie Awards 2019<\/a><\/noindex>, \u00een cadrul c\u0103reia sunt eviden\u021biate cele mai semnificative vulnerabilit\u0103\u021bi \u0219i e\u0219ecuri absurde \u00een domeniul securit\u0103\u021bii cibernetice. Pwnie Awards este considerat echivalentul Oscarurilor \u0219i Zmeului de Aur \u00een domeniul securit\u0103\u021bii cibernetice \u0219i se desf\u0103\u0219oar\u0103 anual, \u00eencep\u00e2nd din 2007. <\/p>\n<p>Principalele <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/winners\/\">c\u00e2\u0219tig\u0103torii<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/pwnies.com\/nominations\">categorii<\/a><\/noindex>: <\/p>\n<ul>\n<li class=\"l\"> <b>Cea mai bun\u0103 eroare de server<\/b>. Se acord\u0103 pentru descoperirea \u0219i exploatarea celei mai tehnic complexe \u0219i interesante erori \u00eentr-un serviciu de re\u021bea. C\u00e2\u0219tig\u0103torii au fost cercet\u0103torii  <noindex><a rel=\"nofollow\" href=\"https:\/\/www.blackhat.com\/us-19\/briefings\/schedule\/#infiltrating-corporate-intranet-like-nsa---pre-auth-rce-on-leading-ssl-vpns-15545\">care au identificat<\/a><\/noindex> o vulnerabilitate la furnizorul de VPN Pulse Secure, serviciul VPN utilizat de Twitter, Uber, Microsoft, sla, SpaceX, Akamai, Intel, IBM, VMware, For\u021bele Navale ale Statelor Unite, Departamentul de Securitate Na\u021bional\u0103 (DHS) al Statelor Unite \u0219i probabil \u00een jum\u0103tate din companiile din lista Fortune 500. Cercet\u0103torii au descoperit un backdoor care permite unui atacator neautentificat s\u0103 schimbe parola oric\u0103rui utilizator. S-a demonstrat posibilitatea exploat\u0103rii problemei pentru a ob\u021bine acces root la serverul VPN, care are deschis doar portul HTTPS;\n<p>Dintre candida\u021bii care nu au c\u00e2\u0219tigat premiul, se pot men\u021biona: <\/p>\n<ul>\n<li class=\"l\"> Exploatabil\u0103 \u00eenainte de autentificare <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/orangetw\/awesome-jenkins-rce-2019\">vulnerabilitatea<\/a><\/noindex> \u00een sistemul de integrare continu\u0103 Jenkins, care permite execu\u021bia de cod pe server. Vulnerabilitatea este utilizat\u0103 activ de bot-uri pentru a organiza mineritul de criptomoned\u0103 pe servere;\n<li class=\"l\"> Critic\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50819\">vulnerabilitatea<\/a><\/noindex> \u00een serverul de e-mail Exim, care permite execu\u021bia de cod pe server cu drepturi root;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/10\/millions-of-xiongmai-video-surveillance-devices-can-be-hacked-via-cloud-feature-xmeye-p2p-cloud\/\">Vulnerabilit\u0103\u021bi<\/a><\/noindex> \u00een camerele IP Xiongmai XMeye P2P, care permit preluarea controlului asupra dispozitivului. Camerele au fost livrate cu o parol\u0103 de inginerie \u0219i nu au utilizat verificarea prin semn\u0103tur\u0103 digital\u0103 la actualizarea firmware-ului;\n<li class=\"l\"> Critic\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0708\">vulnerabilitatea<\/a><\/noindex> \u00een implementarea protocolului RDP \u00een Windows, care permite executarea de la distan\u021b\u0103 a propriului cod;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50177\">Vulnerabilitatea<\/a><\/noindex> \u00een WordPress, legat\u0103 de \u00eenc\u0103rcarea codului PHP sub form\u0103 de imagine. Problema permite executarea de cod arbitrar pe server, av\u00e2nd privilegii de autor (Author) pe site;\n<\/ul>\n<li class=\"l\"> <b>Cea mai bun\u0103 eroare \u00een software-ul client<\/b>. C\u00e2\u0219tig\u0103toare a fost u\u0219or exploatabila <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-6223\">vulnerabilitatea<\/a><\/noindex> \u00een sistemul de apeluri de grup Apple FaceTime, care permite ini\u021biatorului apelului de grup s\u0103 ini\u021bieze o acceptare for\u021bat\u0103 a apelului pe partea persoanei apelate (de exemplu, pentru a asculta \u0219i a spiona).\n<p>Candidatul pentru premiu a fost: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50679\">Vulnerabilitatea<\/a><\/noindex> \u00een WhatsApp, care permite executarea codului printr-un apel vocal special format;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/chromium\/issues\/detail?id=899689\">Vulnerabilitatea<\/a><\/noindex> \u00een biblioteca grafic\u0103 Skia, utilizat\u0103 \u00een browserul Chrome, care poate duce la coruperea memoriei din cauza erorilor \u00een opera\u021biunile cu numere \u00een virgul\u0103 mobil\u0103 \u00een anumite transform\u0103ri geometrice;\n<\/ul>\n<li class=\"l\"> <b>Cea mai bun\u0103 vulnerabilitate care duce la cre\u0219terea privilegiilor<\/b>. Premiul a fost acordat pentru identificarea <noindex><a rel=\"nofollow\" href=\"https:\/\/googleprojectzero.blogspot.com\/2019\/01\/voucherswap-exploiting-mig-reference.html\">vulnerabilit\u0103\u021bi<\/a><\/noindex> \u00een nucleul iOS, care poate fi exploatat\u0103 prin ipc_voucher, accesibil prin browserul Safari.\n<p>Candidatul pentru premiu a fost: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-0859\">Vulnerabilitatea<\/a><\/noindex> \u00een Windows, care permite ob\u021binerea controlului total al sistemului prin manipularea func\u021biei CreateWindowEx (win32k.sys). Problema a fost descoperit\u0103 \u00een timpul analizei malware-ului care a exploatat vulnerabilitatea \u00eenainte de remediere;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50130\">Vulnerabilitatea<\/a><\/noindex> \u00een runc \u0219i LXC, care afecteaz\u0103 Docker \u0219i alte sisteme de izolare a containerelor, permi\u021b\u00e2nd unui container izolat controlat de un atacator s\u0103 schimbe fi\u0219ierul executabil runc \u0219i s\u0103 ob\u021bin\u0103 privilegii root pe sistemul gazd\u0103;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.zecops.com\/vulnerabilities\/exploit-of-cve-2019-7286\/\">Vulnerabilitatea<\/a><\/noindex> \u00een iOS (CFPrefsDaemon), care permite ocolirea modurilor de izolare \u0219i executarea codului cu privilegii root;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2018-9568\">Vulnerabilitatea<\/a><\/noindex> \u00een edi\u021bia TCP a stivei Linux utilizat\u0103 \u00een Android, care permite unui utilizator local s\u0103 \u00ee\u0219i creasc\u0103 privilegiile pe dispozitiv;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49931\">Vulnerabilit\u0103\u021bi<\/a><\/noindex> \u00een systemd-journald, care permit ob\u021binerea privilegiilor root;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/usn.ubuntu.com\/4077-1\/\">Vulnerabilitatea<\/a><\/noindex> \u00een utilitarul tmpreaper pentru cur\u0103\u021barea \/tmp, care permite p\u0103strarea fi\u0219ierului \u00een orice parte a FS;\n<\/ul>\n<li class=\"l\"> <b>Atacul criptografic cel mai bun<\/b>. Se acord\u0103 pentru identificarea celor mai semnificative bre\u0219e \u00een sistemele reale, protocoale \u0219i algoritmi de criptare. Premiul a fost acordat pentru identificarea <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">vulnerabilit\u0103\u021bi<\/a><\/noindex> \u00een tehnologia de protec\u021bie a re\u021belelor wireless WPA3 \u0219i \u00een EAP-pwd, care permit recrearea parolei de conectare \u0219i ob\u021binerea accesului la re\u021beaua wireless f\u0103r\u0103 a cunoa\u0219te parola.\n<p>Candidatii pentru premiu au fost de asemenea: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48597\">Metoda<\/a><\/noindex> atacuri asupra cript\u0103rii PGP \u0219i S\/MIME \u00een clien\u021bii de po\u0219t\u0103 electronic\u0103;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.f-secure.com\/cold-boot-attacks\/\">Aplicare<\/a><\/noindex> metoda de re\u00eenc\u0103rcare rece pentru a ob\u021bine acces la con\u021binutul parti\u021biilor Bitlocker criptate;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50213\">Vulnerabilitatea<\/a><\/noindex> \u00een OpenSSL, care permite separarea situa\u021biilor \u00een care se ob\u021bine completare ad\u0103ugat\u0103 incorect\u0103 \u0219i MAC incorect. Problema este cauzat\u0103 de procesarea incorect\u0103 a octe\u021bilor nuli \u00een completarea ad\u0103ugat\u0103 (padding oracle);\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2018\/11\/my-name-is-johann-wolfgang-von-goethe-i-can-prove-it\/\">Probleme<\/a><\/noindex> cu informa\u021biile de identificare utilizate \u00een Germania care folosesc SAML;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.chromium.org\/chromium-os\/u2f-ecdsa-vulnerability\">Problema<\/a><\/noindex> cu entropia num\u0103rului aleator \u00een implementarea suportului pentru token-uri U2F \u00een ChromeOS;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/monocypher.org\/quality-assurance\/disclosures\">Vulnerabilitatea<\/a><\/noindex> \u00cen Monocypher, din cauza c\u0103reia au fost acceptate semn\u0103turile EdDSA nule.\n<\/ul>\n<li class=\"l\"> <b>Cea mai inovatoare cercetare.<\/b>  Premiul a fost acordat dezvoltatorului tehnicii <noindex><a rel=\"nofollow\" href=\"https:\/\/gamozolabs.github.io\/fuzzing\/2018\/10\/14\/vectorized_emulation.html\">Emulare vectorizat\u0103<\/a><\/noindex>, care utilizeaz\u0103 instruc\u021biuni vectoriale AVX-512 pentru a emula execu\u021bia programelor, permi\u021b\u00e2nd o cre\u0219tere semnificativ\u0103 a vitezei test\u0103rii fuzzing (\u00eentre 40-120 de miliarde de instruc\u021biuni pe secund\u0103). Tehnica permite executarea paralel\u0103 a 8 ma\u0219ini virtuale de 64 de bi\u021bi sau 16 ma\u0219ini virtuale de 32 de bi\u021bi pe fiecare nucleu CPU, cu instruc\u021biuni pentru testarea fuzzing a aplica\u021biei.\n<p>Candida\u021bii pentru premiu au fost: <\/p>\n<ul>\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mimecast.com\/blog\/2019\/06\/exploit-using-microsoft-excel-power-query-for-remote-dde-execution-discovered\/\">Vulnerabilitatea<\/a><\/noindex> \u00een tehnologia Power Query din MS Excel, care permite organizarea execu\u021biei codului \u0219i ocolirea metodelor de izolare a aplica\u021biilor la deschiderea de foi de calcul formatate special;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50446\">Metoda<\/a><\/noindex> manipularea pilotului automat al ma\u0219inilor Tesla pentru a provoca ie\u0219irea pe contrasens;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/sec-consult.com\/en\/blog\/2019\/02\/reverse-engineering-architecture-pinout-plc\/\">Lucr\u0103ri<\/a><\/noindex> de inginerie invers\u0103 a chipului ASICS Siemens S7-1200;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/arxiv.org\/abs\/1808.10250\">SonarSnoop<\/a><\/noindex> \u2014 tehnica de urm\u0103rire a mi\u0219c\u0103rii degetelor pentru a determina codul de deblocare al telefonului, bazat\u0103 pe principiul sonarului \u2014 difuzoarele superioare \u0219i inferioare ale smartphone-ului genereaz\u0103 vibra\u021bii invizibile, iar microfoanele integrate le capteaz\u0103 pentru a analiza prezen\u021ba vibra\u021biilor reflectate de m\u00e2n\u0103;\n<li class=\"l\"> \t<noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50260\">Dezvoltare<\/a><\/noindex> \u00een instrumentele ANB pentru inginerie invers\u0103 Ghidra;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/@massarelli\/safe-self-attentive-function-embedding-d80abbfea794\">SAFE<\/a><\/noindex> \u2014 tehnica de determinare a utiliz\u0103rii codului unor func\u021bii identice \u00een mai multe fi\u0219iere executabile, bazat\u0103 pe analiza construc\u021biilor binare;\n<li class=\"l\"> <noindex><a rel=\"nofollow\" href=\"https:\/\/vulmon.com\/vulnerabilitydetails?qid=CVE-2019-11098&#038;scoretype=cvssv2\">Crearea<\/a><\/noindex> metoda ocolirii mecanismului Intel Boot Guard pentru a \u00eenc\u0103rca firmware-uri UEFI modificate f\u0103r\u0103 verificarea semn\u0103turii digitale.\n<\/ul>\n<li class=\"l\"> <b>Ceva foarte dezam\u0103gitor din partea vendorului<\/b> (Lamest Vendor Response). Nominare pentru cea mai inadecvat\u0103 reac\u021bie la raportarea unei vulnerabilit\u0103\u021bi \u00een propriul produs. C\u00e2\u0219tig\u0103torii sunt dezvoltatorii portofelului criptografic BitFi, care strig\u0103 despre securitatea extrem\u0103 a produsului lor, care s-a dovedit a fi iluzorie, organiz\u00e2nd o v\u00e2n\u0103toare de vr\u0103jitoare asupra cercet\u0103torilor care au descoperit vulnerabilit\u0103\u021bi \u0219i nepl\u0103tind premiile promise pentru identificarea problemelor;\n<p>Printre candida\u021bii pentru premiu au fost considera\u021bi \u0219i: <\/p>\n<ul>\n<li class=\"l\"> Un cercet\u0103tor \u00een securitate l-a acuzat pe directorul Atrient de atac pentru a-l for\u021ba s\u0103 elimine raportul despre vulnerabilitatea pe care a descoperit-o, dar directorul neag\u0103 incidentul \u0219i camerele de supraveghere nu au \u00eenregistrat acest atac;\n<li class=\"l\"> Compania Zoom a am\u00e2nat corectarea unei probleme critice <noindex><a rel=\"nofollow\" href=\"https:\/\/medium.com\/bugbountywriteup\/zoom-zero-day-4-million-webcams-maybe-an-rce-just-get-them-to-visit-your-website-ac75c83f4ef5\">vulnerabilit\u0103\u021bi<\/a><\/noindex> \u00cen sistemul s\u0103u de conferin\u021be, a remediat problema doar dup\u0103 ce a fost expus public. Vulnerabilitatea permitea unui atacator extern s\u0103 ob\u021bin\u0103 date de pe camerele web ale utilizatorilor macOS atunci c\u00e2nd se deschidea \u00een browser o pagin\u0103 special conceput\u0103 (Zoom lansa pe partea clientului un server HTTP care accepta comenzi de la aplica\u021bia local\u0103).\n<li class=\"l\"> Imposibilitatea de a remedia timp de mai bine de 10 ani <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51006\">problema<\/a><\/noindex> cu serverele de chei criptografice OpenPGP, motiv\u00e2nd c\u0103 codul este scris \u00eentr-un limbaj specific OCaml \u0219i r\u0103m\u00e2ne f\u0103r\u0103 \u00eentre\u021binere.\n<\/ul>\n<p><b>Cea mai exagerat\u0103 notificare de vulnerabilitate<\/b>. Se decerneaz\u0103 pentru cea mai pompoas\u0103 \u0219i ampl\u0103 acoperire a problemei pe internet \u0219i \u00een mass-media, mai ales dac\u0103 vulnerabilitatea se dovede\u0219te a fi inoperabil\u0103 \u00een practic\u0103. Premiul a fost acordat publica\u021biei Bloomberg pentru <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49393\">, c\u0103 echipa Cyberpunk 2077 lucreaz\u0103 \u0219ase zile pe s\u0103pt\u0103m\u00e2n\u0103, \u00eencerc\u00e2nd s\u0103 se \u00eencadreze \u00een data de lansare stabilit\u0103. Studioul a ie\u0219it la ramp\u0103 \u0219i a publicat<\/a><\/noindex> \u00eempreun\u0103 cu identificarea cipurilor spion \u00een pl\u0103cile Super Micro, ceea ce nu s-a confirmat, iar sursa a oferit informa\u021bii complet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49417\">diferite<\/a><\/noindex>.<\/p>\n<p>\u00cen nominaliz\u0103ri se men\u021bioneaz\u0103: <\/p>\n<ul>\n<li class=\"l\"> Vulnerabilitatea din libssh, care <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49453\">afecta<\/a><\/noindex> aplica\u021bii server individuale (libssh aproape c\u0103 nu este folosit pentru servere), dar a fost prezentat\u0103 de NCC Group ca o vulnerabilitate care permite atacarea oric\u0103rui server OpenSSH.\n<li class=\"l\"> Atacul folosind imagini \u00een format DICOM. Esen\u021ba este c\u0103 se poate preg\u0103ti un fi\u0219ier executabil pentru Windows, care va ar\u0103ta ca o imagine valid\u0103 \u00een format DICOM. Acest fi\u0219ier poate fi \u00eenc\u0103rcat pe un dispozitiv medical \u0219i executat.\n<li class=\"l\"> Vulnerabilitatea <noindex><a rel=\"nofollow\" href=\"https:\/\/thrangrycat.com\/\">Thrangrycat<\/a><\/noindex>, care permite ocolirea mecanismului de bootare sigur pe dispozitivele Cisco. Vulnerabilitatea este catalogat\u0103 ca o problem\u0103 exagerat\u0103 deoarece necesit\u0103 privilegii root pentru atac, dar dac\u0103 atacatorul a reu\u0219it deja s\u0103 ob\u021bin\u0103 acces root, despre ce securitate vorbim. Vulnerabilitatea a c\u00e2\u0219tigat simultan \u0219i categoria celor mai subevaluate probleme, deoarece permite implantarea unei u\u0219i din spate permanente \u00een Flash;\n<\/ul>\n<li class=\"l\"> <b>Cel mai mare e\u0219ec<\/b> (Most Epic FAIL). Premiul a fost acordat publica\u021biei Bloomberg pentru o serie de articole senza\u021bionale cu titluri bombastice, dar cu fapte inventate, ascunderea surselor, alunecarea \u00een teoria conspira\u021biei, utilizarea unor termeni precum \u201earmament cibernetic\u201d, \u0219i generaliz\u0103ri inacceptabile. Printre ceilal\u021bi nominaliza\u021bi:\n<ul>\n<li class=\"l\"> Atacul Shadowhammer asupra serviciului de actualizare a firmware-ului Asus;\n<li class=\"l\"> Spargerea depozitului BitFi, promovat ca \u201einsurmontabil\u201d;\n<li class=\"l\"> Scurgeri de date personale \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49366\">tokenurilor<\/a><\/noindex> acces \u00een Facebook.\n<\/ul>\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51267\">opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie Awards 2019, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0430\u0431\u0441\u0443\u0440\u0434\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Pwnie Awards \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u043b\u043e\u0433\u043e\u043c \u041e\u0441\u043a\u0430\u0440\u0430 \u0438 \u0417\u043e\u043b\u043e\u0442\u043e\u0439 \u043c\u0430\u043b\u0438\u043d\u044b \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0435\u0436\u0435\u0433\u043e\u0434\u043d\u043e, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 2007 \u0433\u043e\u0434\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0431\u0435\u0434\u0438\u0442\u0435\u043b\u0438 \u0438 \u043d\u043e\u043c\u0438\u043d\u0430\u0446\u0438\u0438: \u041b\u0443\u0447\u0448\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0430\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37054","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:15:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Premiile Pwnie 2019: cele mai semnificative vulnerabilit\u0103\u021bi \u0219i e\u0219ecuri \u00een securitate | ProHoster","description":"La conferin\u021ba Black Hat USA care a avut loc la Las Vegas a fost organizat\u0103 ceremonia de decernare a premiilor Pwnie.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Pwnie Awards 2019: \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u043e\u0432\u0430\u043b\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 \u041b\u0430\u0441 \u0412\u0435\u0433\u0430\u0441\u0435 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat USA \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0430\u0441\u044c \u0446\u0435\u0440\u0435\u043c\u043e\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u043c\u0438\u0438 Pwnie.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/pwnie-awards-2019-naibolee-sushhestvennye-uyazvimosti-i-provaly-v-bezopasnosti","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:15:30+00:00","article:modified_time":"2019-10-31T19:15:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37054","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:53:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:34:24","updated":"2026-01-22 05:53:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37054"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37054\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}