{"id":10349,"date":"2025-11-07T19:48:47","date_gmt":"2025-11-07T12:48:47","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10349"},"modified":"2026-02-03T20:26:10","modified_gmt":"2026-02-03T13:26:10","slug":"lo-hong-trong-tien-ich-claude-desktop-bien-tro-ly-ai-thanh-moi-de-doa","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/11\/07\/lo-hong-trong-tien-ich-claude-desktop-bien-tro-ly-ai-thanh-moi-de-doa\/","title":{"rendered":"L\u1ed7 h\u1ed5ng trong ti\u1ec7n \u00edch Claude Desktop bi\u1ebfn tr\u1ee3 l\u00fd AI th\u00e0nh m\u1ed1i \u0111e d\u1ecda"},"content":{"rendered":"

S\u1ef1 ph\u00e1t tri\u1ec3n nhanh ch\u00f3ng c\u1ee7a c\u00e1c c\u00f4ng c\u1ee5 tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o nh\u01b0 Claude, ChatGPT hay Copilot \u0111ang bi\u1ebfn ch\u00fang th\u00e0nh nh\u1eefng \u201ctr\u1ee3 l\u00fd k\u1ef9 thu\u1eadt s\u1ed1\u201d quen thu\u1ed9c tr\u00ean m\u00e1y t\u00ednh c\u00e1 nh\u00e2n v\u00e0 trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p. Tuy nhi\u00ean, m\u1ed9t s\u1ef1 c\u1ed1 b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n t\u1ea1i Anthropic \u2013 c\u00f4ng ty ph\u00e1t tri\u1ec3n Claude \u2013 \u0111\u00e3 cho th\u1ea5y ngay c\u1ea3 c\u00e1c ph\u1ea7n m\u1ec1m AI ch\u00ednh ch\u1ee7 c\u0169ng c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m y\u1ebfu nguy hi\u1ec3m n\u1ebfu t\u1ed3n t\u1ea1i sai s\u00f3t trong thi\u1ebft k\u1ebf b\u1ea3o m\u1eadt.<\/p>\n

\"\"<\/p>\n

Theo th\u00f4ng tin c\u00f4ng b\u1ed1, ba ti\u1ec7n \u00edch m\u1edf r\u1ed9ng ch\u00ednh th\u1ee9c c\u1ee7a Claude Desktop g\u1ed3m Chrome, iMessage v\u00e0 Apple Notes, v\u1edbi t\u1ed5ng c\u1ed9ng h\u01a1n 350.000 l\u01b0\u1ee3t t\u1ea3i, \u0111\u00e3 b\u1ecb ph\u00e1t hi\u1ec7n ch\u1ee9a l\u1ed7 h\u1ed5ng th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) \u1edf m\u1ee9c nghi\u00eam tr\u1ecdng cao. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n m\u00e1y t\u00ednh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 th\u00f4ng qua m\u1ed9t t\u01b0\u01a1ng t\u00e1c tr\u00f2 chuy\u1ec7n t\u01b0\u1edfng ch\u1eebng v\u00f4 h\u1ea1i, m\u00e0 kh\u00f4ng c\u1ea7n ng\u01b0\u1eddi d\u00f9ng t\u1ea3i hay ch\u1ea1y m\u00e3 \u0111\u1ed9c theo c\u00e1ch truy\u1ec1n th\u1ed1ng.<\/p>\n

Nguy\u00ean nh\u00e2n c\u1ee7a s\u1ef1 c\u1ed1 b\u1eaft ngu\u1ed3n t\u1eeb m\u1ed9t l\u1ed7i ch\u00e8n l\u1ec7nh \u2013 d\u1ea1ng l\u1ed7i \u0111\u00e3 \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn t\u1eeb l\u00e2u trong l\u1eadp tr\u00ecnh. Trong tr\u01b0\u1eddng h\u1ee3p n\u00e0y, c\u00e1c ti\u1ec7n \u00edch Claude Desktop x\u1eed l\u00fd \u0111\u1ea7u v\u00e0o ng\u01b0\u1eddi d\u00f9ng th\u00f4ng qua AppleScript nh\u01b0ng kh\u00f4ng th\u1ef1c hi\u1ec7n vi\u1ec7c l\u1ecdc ho\u1eb7c \u201cescape\u201d c\u00e1c k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t. Do c\u00e1c ti\u1ec7n \u00edch n\u00e0y ch\u1ea1y v\u1edbi quy\u1ec1n h\u1ec7 th\u1ed1ng \u0111\u1ea7y \u0111\u1ee7, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng vi\u1ec7c \u201ctho\u00e1t chu\u1ed7i\u201d \u0111\u1ec3 ch\u00e8n v\u00e0 th\u1ef1c thi l\u1ec7nh tr\u00e1i ph\u00e9p tr\u1ef1c ti\u1ebfp tr\u00ean m\u00e1y c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n

K\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m \u1edf ch\u1ed7 n\u00f3 kh\u00f4ng \u0111\u00f2i h\u1ecfi h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng t\u1eeb ng\u01b0\u1eddi d\u00f9ng. Ch\u1ec9 c\u1ea7n Claude truy c\u1eadp v\u00e0o m\u1ed9t trang web ch\u1ee9a payload \u0111\u1ed9c h\u1ea1i trong qu\u00e1 tr\u00ecnh tr\u1ea3 l\u1eddi c\u00e2u h\u1ecfi th\u00f4ng th\u01b0\u1eddng, m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c th\u1ef1c thi ngay l\u1eadp t\u1ee9c. H\u1eadu qu\u1ea3 ti\u1ec1m \u1ea9n bao g\u1ed3m vi\u1ec7c \u0111\u00e1nh c\u1eafp kh\u00f3a SSH, m\u1eadt kh\u1ea9u tr\u00ecnh duy\u1ec7t, th\u00f4ng tin \u0111\u00e1m m\u00e2y nh\u01b0 AWS, ho\u1eb7c m\u1edf \u0111\u01b0\u1eddng cho c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng s\u00e2u h\u01a1n v\u00e0o h\u1ec7 th\u1ed1ng.<\/p>\n

Anthropic \u0111\u00e3 \u0111\u00e1nh gi\u00e1 l\u1ed7 h\u1ed5ng n\u00e0y \u1edf m\u1ee9c CVSS 8.9 v\u00e0 nhanh ch\u00f3ng ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 kh\u1ea9n c\u1ea5p. Tuy nhi\u00ean, m\u1ed1i lo ng\u1ea1i kh\u00f4ng ch\u1ec9 d\u1eebng l\u1ea1i \u1edf ba ti\u1ec7n \u00edch ch\u00ednh th\u1ee9c. H\u1ec7 sinh th\u00e1i Model Context Protocol (MCP) \u0111ang m\u1edf r\u1ed9ng nhanh, v\u1edbi nhi\u1ec1u ti\u1ec7n \u00edch \u0111\u01b0\u1ee3c t\u1ea1o ra nh\u1edd AI h\u1ed7 tr\u1ee3 l\u1eadp tr\u00ecnh nh\u01b0ng ch\u01b0a tr\u1ea3i qua quy tr\u00ecnh ki\u1ec3m tra b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t. Do nhi\u1ec1u ti\u1ec7n \u00edch MCP c\u0169ng c\u00f3 quy\u1ec1n truy c\u1eadp h\u1ec7 th\u1ed1ng t\u01b0\u01a1ng t\u1ef1, ch\u00fang tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau h\u1ea5p d\u1eabn cho tin t\u1eb7c.<\/p>\n

C\u00e1c chuy\u00ean gia khuy\u1ebfn c\u00e1o ng\u01b0\u1eddi d\u00f9ng c\u1ea7n c\u1eadp nh\u1eadt ngay c\u00e1c b\u1ea3n v\u00e1 m\u1edbi nh\u1ea5t, h\u1ea1n ch\u1ebf c\u00e0i \u0111\u1eb7t ti\u1ec7n \u00edch AI t\u1eeb ngu\u1ed3n kh\u00f4ng r\u00f5 r\u00e0ng, v\u00e0 tri\u1ec3n khai c\u00e1c gi\u1ea3i ph\u00e1p gi\u00e1m s\u00e1t h\u00e0nh vi nh\u01b0 EDR \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c ho\u1ea1t \u0111\u1ed9ng b\u1ea5t th\u01b0\u1eddng. S\u1ef1 c\u1ed1 n\u00e0y l\u00e0 l\u1eddi c\u1ea3nh b\u00e1o r\u00f5 r\u00e0ng r\u1eb1ng trong k\u1ef7 nguy\u00ean AI desktop, m\u1ed9t l\u1ed7i nh\u1ecf c\u0169ng c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn h\u1eadu qu\u1ea3 nghi\u00eam tr\u1ecdng n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t ch\u1eb7t ch\u1ebd.<\/p>\n","protected":false},"excerpt":{"rendered":"

S\u1ef1 ph\u00e1t tri\u1ec3n nhanh ch\u00f3ng c\u1ee7a c\u00e1c c\u00f4ng c\u1ee5 tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o nh\u01b0 Claude, ChatGPT hay Copilot \u0111ang bi\u1ebfn ch\u00fang th\u00e0nh nh\u1eefng \u201ctr\u1ee3 l\u00fd k\u1ef9 thu\u1eadt s\u1ed1\u201d quen thu\u1ed9c tr\u00ean m\u00e1y t\u00ednh c\u00e1 nh\u00e2n v\u00e0 trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p. Tuy nhi\u00ean, m\u1ed9t s\u1ef1 c\u1ed1 b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng v\u1eeba \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n t\u1ea1i […]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10349","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10349"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10349\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}