M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt tr\u00ean Windows c\u00f3 “c\u1eeda h\u1eadu” cho ph\u00e9p \u0111\u0103ng nh\u1eadp b\u1eb1ng m\u1eadt kh\u1ea9u c\u0169.<\/p>\n\n\n\n
M\u1ed9t ph\u00e1t hi\u1ec7n \u0111\u00e1ng lo ng\u1ea1i v\u1eeba \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 b\u1edfi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt \u0111\u1ed9c l\u1eadp, khi giao th\u1ee9c Remote Desktop Protocol (RDP) t\u00edch h\u1ee3p s\u1eb5n trong Windows t\u1ed3n t\u1ea1i m\u1ed9t l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng, cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng v\u1eabn c\u00f3 th\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o m\u00e1y t\u00ednh t\u1eeb xa b\u1eb1ng m\u1eadt kh\u1ea9u c\u0169, ngay c\u1ea3 khi m\u1eadt kh\u1ea9u \u0111\u00f3 \u0111\u00e3 b\u1ecb thay \u0111\u1ed5i ho\u1eb7c thu h\u1ed3i<\/p>\n\n\n\n
\u0110i\u1ec1u g\u00e2y s\u1ed1c h\u01a1n n\u1eefa l\u00e0 Microsoft \u0111\u00e3 x\u00e1c nh\u1eadn h\u00e0nh vi n\u00e0y, nh\u01b0ng kh\u1eb3ng \u0111\u1ecbnh \u0111\u00f3 l\u00e0 m\u1ed9t “t\u00ednh n\u0103ng” \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf c\u00f3 ch\u1ee7 \u0111\u00edch v\u00e0 h\u00e3ng kh\u00f4ng c\u00f3 k\u1ebf ho\u1ea1ch “s\u1eeda l\u1ed7i” v\u00ec lo ng\u1ea1i ph\u00e1 v\u1ee1 t\u00ednh t\u01b0\u01a1ng th\u00edch h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n
L\u1ed7 h\u1ed5ng, hay “t\u00ednh n\u0103ng” theo c\u00e1ch g\u1ecdi c\u1ee7a Microsoft, n\u1eb1m \u1edf c\u00e1ch RDP x\u1eed l\u00fd vi\u1ec7c x\u00e1c th\u1ef1c. Giao th\u1ee9c n\u00e0y d\u01b0\u1eddng nh\u01b0 \u01b0u ti\u00ean ki\u1ec3m tra v\u00e0 ch\u1ea5p nh\u1eadn c\u00e1c m\u1eadt kh\u1ea9u \u0111\u00e3 t\u1eebng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng v\u00e0 l\u01b0u trong b\u1ed9 nh\u1edb \u0111\u1ec7m (cache) tr\u00ean m\u00e1y t\u00ednh c\u1ee5c b\u1ed9.<\/p>\n\n\n\n
\u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0, n\u1ebfu m\u1ed9t k\u1ebb t\u1ea5n c\u00f4ng bi\u1ebft \u0111\u01b0\u1ee3c m\u1eadt kh\u1ea9u c\u0169 c\u1ee7a b\u1ea1n, ho\u1eb7c n\u1ebfu m\u1ed9t m\u1eadt kh\u1ea9u b\u1ecb l\u1ed9 trong m\u1ed9t v\u1ee5 vi ph\u1ea1m tr\u01b0\u1edbc \u0111\u00f3, h\u1ecd v\u1eabn c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng n\u00f3 \u0111\u1ec3 truy c\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng qua RDP, b\u1ea5t ch\u1ea5p vi\u1ec7c b\u1ea1n \u0111\u00e3 \u0111\u1ed5i sang m\u1eadt kh\u1ea9u m\u1edbi m\u1ea1nh h\u01a1n.<\/p>\n\n\n\n
H\u00e0nh vi n\u00e0y ho\u00e0n to\u00e0n \u0111i ng\u01b0\u1ee3c l\u1ea1i c\u00e1c nguy\u00ean t\u1eafc b\u1ea3o m\u1eadt c\u01a1 b\u1ea3n v\u00e0 khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng l\u1ea7m t\u01b0\u1edfng r\u1eb1ng vi\u1ec7c \u0111\u1ed5i m\u1eadt kh\u1ea9u \u0111\u00e3 \u0111\u1ee7 \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u1ecd. \u0110\u00e1ng ch\u00fa \u00fd, c\u00e1c n\u1ec1n t\u1ea3ng b\u1ea3o m\u1eadt c\u1ee7a Microsoft nh\u01b0 Entra ID, Azure hay Defender c\u0169ng kh\u00f4ng h\u1ec1 c\u1ea3nh b\u00e1o v\u1ec1 nguy c\u01a1 n\u00e0y.<\/p>\n\n\n\n
V\u1ea5n \u0111\u1ec1 n\u00e0y kh\u00f4ng h\u1ec1 m\u1edbi. C\u00f4ng ngh\u1ec7 RDP (tr\u01b0\u1edbc \u0111\u00e2y l\u00e0 Terminal Services) \u0111\u00e3 t\u1ed3n t\u1ea1i t\u1eeb th\u1eddi Windows NT 4.0 (1998) v\u00e0 l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u01b0\u1ee3c cho l\u00e0 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn m\u1ecdi phi\u00ean b\u1ea3n Windows Professional v\u00e0 Server k\u1ec3 t\u1eeb Windows XP.<\/p>\n\n\n\n
\u0110i\u1ec1u \u0111\u00f3 \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c h\u00e0ng tri\u1ec7u m\u00e1y t\u00ednh c\u00e1 nh\u00e2n, doanh nghi\u1ec7p nh\u1ecf v\u00e0 h\u1ec7 th\u1ed1ng l\u1edbn tr\u00ean to\u00e0n c\u1ea7u \u0111\u1ec1u c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb \u1ea3nh h\u01b0\u1edfng. M\u1eb7c d\u00f9 nh\u00e0 ph\u00e2n t\u00edch Daniel Wade m\u1edbi b\u00e1o c\u00e1o l\u1ea1i v\u1ea5n \u0111\u1ec1 g\u1ea7n \u0111\u00e2y, Microsoft th\u1eeba nh\u1eadn \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u kh\u00e1c c\u1ea3nh b\u00e1o v\u1ec1 “c\u1eeda h\u1eadu” n\u00e0y t\u1eeb th\u00e1ng 8\/2023<\/p>\n\n\n\n
V\u1eady t\u1ea1i sao Microsoft l\u1ea1i kh\u00f4ng kh\u1eafc ph\u1ee5c m\u1ed9t r\u1ee7i ro r\u00f5 r\u00e0ng nh\u01b0 v\u1eady? G\u00e3 kh\u1ed5ng l\u1ed3 ph\u1ea7n m\u1ec1m gi\u1ea3i th\u00edch r\u1eb1ng \u0111\u00e2y l\u00e0 “quy\u1ebft \u0111\u1ecbnh thi\u1ebft k\u1ebf” nh\u1eb1m \u0111\u1ea3m b\u1ea3o lu\u00f4n c\u00f3 \u00edt nh\u1ea5t m\u1ed9t t\u00e0i kho\u1ea3n c\u00f3 th\u1ec3 \u0111\u0103ng nh\u1eadp \u0111\u01b0\u1ee3c v\u00e0o h\u1ec7 th\u1ed1ng, ph\u00f2ng tr\u01b0\u1eddng h\u1ee3p m\u00e1y t\u00ednh ngo\u1ea1i tuy\u1ebfn qu\u00e1 l\u00e2u kh\u00f4ng c\u1eadp nh\u1eadt \u0111\u01b0\u1ee3c th\u00f4ng tin m\u1eadt kh\u1ea9u m\u1edbi nh\u1ea5t.<\/p>\n\n\n\n
Microsoft c\u0169ng ti\u1ebft l\u1ed9 \u0111\u00e3 th\u1eed s\u1eeda \u0111\u1ed5i m\u00e3 ngu\u1ed3n RDP nh\u01b0ng ph\u1ea3i d\u1eebng l\u1ea1i v\u00ec nh\u1eefng thay \u0111\u1ed5i \u0111\u00f3 c\u00f3 th\u1ec3 l\u00e0m h\u1ecfng kh\u1ea3 n\u0103ng t\u01b0\u01a1ng th\u00edch v\u1edbi c\u00e1c \u1ee9ng d\u1ee5ng ho\u1eb7c t\u00ednh n\u0103ng c\u0169 h\u01a1n c\u1ee7a Windows m\u00e0 nhi\u1ec1u h\u1ec7 th\u1ed1ng v\u1eabn \u0111ang ph\u1ee5 thu\u1ed9c.<\/p>\n\n\n\n
D\u00f9 Microsoft c\u00f3 l\u00fd do c\u1ee7a h\u00e3ng, vi\u1ec7c duy tr\u00ec m\u1ed9t c\u01a1 ch\u1ebf cho ph\u00e9p s\u1eed d\u1ee5ng m\u1eadt kh\u1ea9u c\u0169 \u0111\u1ec3 \u0111\u0103ng nh\u1eadp r\u00f5 r\u00e0ng l\u00e0 m\u1ed9t r\u1ee7i ro b\u1ea3o m\u1eadt \u0111\u00e1ng k\u1ec3.<\/p>\n\n\n\n
Ng\u01b0\u1eddi d\u00f9ng v\u00e0 c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng c\u1ea7n ph\u1ea3i nh\u1eadn th\u1ee9c r\u00f5 v\u1ec1 “t\u00ednh n\u0103ng” n\u00e0y v\u00e0 kh\u00f4ng n\u00ean ho\u00e0n to\u00e0n tin t\u01b0\u1edfng v\u00e0o vi\u1ec7c ch\u1ec9 \u0111\u1ed5i m\u1eadt kh\u1ea9u l\u00e0 \u0111\u1ee7 an to\u00e0n khi s\u1eed d\u1ee5ng RDP.<\/p>\n\n\n\n
Vi\u1ec7c xem x\u00e9t c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt b\u1ed5 sung nh\u01b0 x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (n\u1ebfu c\u00f3 th\u1ec3), gi\u1edbi h\u1ea1n truy c\u1eadp RDP ho\u1eb7c t\u00ecm ki\u1ebfm c\u00e1c gi\u1ea3i ph\u00e1p truy c\u1eadp t\u1eeb xa thay th\u1ebf c\u00f3 th\u1ec3 l\u00e0 \u0111i\u1ec1u c\u1ea7n thi\u1ebft.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt tr\u00ean Windows c\u00f3 “c\u1eeda h\u1eadu” cho ph\u00e9p \u0111\u0103ng nh\u1eadp b\u1eb1ng m\u1eadt kh\u1ea9u c\u0169. M\u1ed9t ph\u00e1t […]<\/p>\n","protected":false},"author":6,"featured_media":9844,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-9842","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bao-mat"],"views":1429,"_links":{"self":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9842","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/comments?post=9842"}],"version-history":[{"count":1,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9842\/revisions"}],"predecessor-version":[{"id":9843,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9842\/revisions\/9843"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media\/9844"}],"wp:attachment":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media?parent=9842"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/categories?post=9842"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/tags?post=9842"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}