{"id":174377,"date":"2026-07-15T11:56:15","date_gmt":"2026-07-15T04:56:15","guid":{"rendered":"https:\/\/phongvu.vn\/cong-nghe\/?p=174377"},"modified":"2026-07-15T11:56:19","modified_gmt":"2026-07-15T04:56:19","slug":"microsoft-va-ky-luc-622-lo-hong","status":"publish","type":"post","link":"https:\/\/phongvu.vn\/cong-nghe\/microsoft-va-ky-luc-622-lo-hong\/","title":{"rendered":"Microsoft v\u00e1 k\u1ef7 l\u1ee5c 622 l\u1ed7 h\u1ed5ng trong b\u1ea3n c\u1eadp nh\u1eadt th\u00e1ng 7\/2026, c\u1ea3nh b\u00e1o 2 l\u1ed7i \u0111ang b\u1ecb t\u1ea5n c\u00f4ng"},"content":{"rendered":"\n

PV Tech News \u2013 Microsoft v\u1eeba ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt l\u1edbn nh\u1ea5t t\u1eeb tr\u01b0\u1edbc \u0111\u1ebfn nay v\u1edbi 622 CVE trong \u0111\u1ee3t Patch Tuesday th\u00e1ng 7\/2026, g\u1ea5p h\u01a1n 3 l\u1ea7n k\u1ef7 l\u1ee5c 206 l\u1ed7i \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp ch\u1ec9 m\u1ed9t th\u00e1ng tr\u01b0\u1edbc \u0111\u00f3. \u0110\u00e1ng ch\u00fa \u00fd, 2 trong s\u1ed1 n\u00e0y \u0111ang b\u1ecb tin t\u1eb7c khai th\u00e1c th\u1ef1c t\u1ebf tr\u00ean SharePoint Server v\u00e0 Active Directory Federation Services.<\/strong><\/p>\n\n\n\n

Theo c\u00f4ng b\u1ed1 ch\u00ednh th\u1ee9c t\u1eeb Microsoft Security Update Guide, b\u1ea3n c\u1eadp nh\u1eadt Patch Tuesday ng\u00e0y 14\/7\/2026 x\u1eed l\u00fd t\u1ed5ng c\u1ed9ng 622 l\u1ed7 h\u1ed5ng thu\u1ed9c h\u1ec7 sinh th\u00e1i s\u1ea3n ph\u1ea9m c\u1ee7a h\u00e3ng. T\u1ed5 ch\u1ee9c nghi\u00ean c\u1ee9u \u0111\u1ed9c l\u1eadp Zero Day Initiative (ZDI) c\u1ee7a Trend Micro ghi nh\u1eadn con s\u1ed1 t\u01b0\u01a1ng t\u1ef1 l\u00e0 621. \u0110\u00e2y l\u00e0 m\u1ee9c cao ch\u01b0a t\u1eebng c\u00f3 trong l\u1ecbch s\u1eed ch\u01b0\u01a1ng tr\u00ecnh v\u00e1 l\u1ed7i h\u00e0ng th\u00e1ng c\u1ee7a Microsoft, v\u01b0\u1ee3t xa k\u1ef7 l\u1ee5c c\u0169 kho\u1ea3ng 200-206 CVE c\u1ee7a th\u00e1ng 6\/2026. Theo ph\u00e2n t\u00edch c\u1ee7a Rapid7, ri\u00eang h\u1ec7 \u0111i\u1ec1u h\u00e0nh Windows \u0111\u00e3 chi\u1ebfm t\u1edbi 416 l\u1ed7 h\u1ed5ng, c\u0169ng l\u00e0 con s\u1ed1 k\u1ef7 l\u1ee5c.<\/p>\n\n\n\n

\"Microsoft
Microsoft v\u00e1 k\u1ef7 l\u1ee5c 622 l\u1ed7 h\u1ed5ng trong b\u1ea3n c\u1eadp nh\u1eadt th\u00e1ng 7\/2026 (Ngu\u1ed3n: Internet)<\/figcaption><\/figure>\n\n\n\n

Trong s\u1ed1 n\u00e0y, 3 l\u1ed7 h\u1ed5ng zero-day \u0111\u01b0\u1ee3c \u0111\u1eb7c bi\u1ec7t ch\u00fa \u00fd, 2 l\u1ed7i \u0111ang b\u1ecb khai th\u00e1c ngo\u00e0i th\u1ef1c t\u1ebf g\u1ed3m CVE-2026-56164<\/strong>, l\u1ed7i leo thang \u0111\u1eb7c quy\u1ec1n tr\u00ean SharePoint Server cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c v\u1eabn c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n qua m\u1ea1ng, v\u00e0 CVE-2026-56155<\/strong>, l\u1ed7i t\u01b0\u01a1ng t\u1ef1 tr\u00ean Active Directory Federation Services (AD FS), h\u1ec7 th\u1ed1ng ch\u1ecbu tr\u00e1ch nhi\u1ec7m x\u00e1c th\u1ef1c \u0111\u0103ng nh\u1eadp c\u1ee7a doanh nghi\u1ec7p. L\u1ed7i th\u1ee9 ba, CVE-2026-50661<\/strong>, l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng b\u1ecf qua t\u00ednh n\u0103ng b\u1ea3o m\u1eadt BitLocker, \u0111\u00e3 b\u1ecb c\u00f4ng b\u1ed1 c\u00f4ng khai tr\u01b0\u1edbc khi c\u00f3 b\u1ea3n v\u00e1 nh\u01b0ng ch\u01b0a ghi nh\u1eadn b\u1ecb khai th\u00e1c. Ngo\u00e0i ra, b\u1ea3n c\u1eadp nh\u1eadt c\u00f2n kh\u1eafc ph\u1ee5c h\u01a1n 60 l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng (Critical).<\/p>\n\n\n\n

V\u1ec1 nguy\u00ean nh\u00e2n \u0111\u1eb1ng sau s\u1ef1 b\u00f9ng n\u1ed5 s\u1ed1 l\u01b0\u1ee3ng l\u1ed7 h\u1ed5ng, Microsoft cho bi\u1ebft AI \u0111ang \u0111\u00f3ng vai tr\u00f2 ng\u00e0y c\u00e0ng l\u1edbn trong vi\u1ec7c ph\u00e1t hi\u1ec7n l\u1ed7i. H\u00e3ng v\u1eadn h\u00e0nh h\u1ec7 th\u1ed1ng qu\u00e9t l\u1ed7 h\u1ed5ng \u0111a m\u00f4 h\u00ecnh mang t\u00ean MDASH (multi-model agentic scanning harness), c\u00f4ng c\u1ee5 t\u1eebng m\u1ed9t m\u00ecnh t\u00ecm ra 16 l\u1ed7i trong \u0111\u1ee3t Patch Tuesday th\u00e1ng 5\/2026. “Ch\u00fang t\u00f4i ti\u1ebfp t\u1ee5c ho\u00e0n thi\u1ec7n h\u1ec7 th\u1ed1ng v\u00e0 quy tr\u00ecnh n\u1ed9i b\u1ed9 \u0111\u1ec3 vi\u1ec7c ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng kh\u00f4ng c\u00f2n l\u00e0 m\u1ed9t ho\u1ea1t \u0111\u1ed9ng t\u00e1ch bi\u1ec7t, m\u00e0 tr\u1edf th\u00e0nh m\u1ed9t ph\u1ea7n trong c\u00e1ch ch\u00fang t\u00f4i x\u00e2y d\u1ef1ng, \u0111\u00e1nh gi\u00e1 v\u00e0 c\u1ea3i ti\u1ebfn Windows tr\u01b0\u1edbc khi ph\u00e1t h\u00e0nh t\u00ednh n\u0103ng hay b\u1ea3n c\u1eadp nh\u1eadt m\u1edbi”<\/em> –  \u00f4ng Pavan Davuluri, Ph\u00f3 ch\u1ee7 t\u1ecbch \u0111i\u1ec1u h\u00e0nh m\u1ea3ng Windows c\u1ee7a Microsoft, chia s\u1ebb.<\/p>\n\n\n\n

\"\"
Doanh nghi\u1ec7p c\u1ea7n \u01b0u ti\u00ean v\u00e1 l\u1ed7i SharePoint v\u00e0 Active Directory (Ngu\u1ed3n: Internet)<\/em><\/figcaption><\/figure>\n\n\n\n

\u00d4ng Dustin Childs, ph\u1ee5 tr\u00e1ch nh\u1eadn th\u1ee9c v\u1ec1 m\u1ed1i \u0111e d\u1ecda t\u1ea1i Zero Day Initiative (Trend Micro), m\u00f4 t\u1ea3 \u0111\u00e2y l\u00e0 “m\u1eb9 c\u1ee7a m\u1ecdi \u0111\u1ee3t ph\u00e1t h\u00e0nh”<\/em> v\u00e0 nh\u1ea5n m\u1ea1nh: “G\u1ecdi \u0111\u00e2y l\u00e0 m\u1ed9t k\u1ef7 l\u1ee5c v\u1eabn c\u00f2n l\u00e0 c\u00e1ch n\u00f3i gi\u1ea3m nh\u1eb9. T\u1ed5ng s\u1ed1 CVE t\u00ednh t\u1eeb \u0111\u1ea7u n\u0103m \u0111\u1ebfn nay c\u1ee7a Microsoft \u0111\u00e3 v\u01b0\u1ee3t qua t\u1ed5ng s\u1ed1 c\u1ee7a b\u1ea5t k\u1ef3 n\u0103m n\u00e0o tr\u01b0\u1edbc \u0111\u00f3.” <\/em>C\u00f9ng ng\u00e0y, Adobe c\u0169ng ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 cho 88 l\u1ed7 h\u1ed5ng, bao g\u1ed3m c\u00e1c l\u1ed7i nghi\u00eam tr\u1ecdng tr\u00ean ColdFusion, Commerce, Experience Manager v\u00e0 Illustrator. SAP \u0111\u1ed3ng th\u1eddi x\u1eed l\u00fd c\u00e1c l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng tr\u00ean NetWeaver Application Server v\u00e0 Approuter.<\/p>\n\n\n\n

Gi\u1edbi chuy\u00ean gia b\u1ea3o m\u1eadt khuy\u1ebfn ngh\u1ecb c\u00e1c qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng n\u00ean \u01b0u ti\u00ean v\u00e1 ngay 2 l\u1ed7i \u0111ang b\u1ecb khai th\u00e1c tr\u00ean SharePoint Server v\u00e0 AD FS tr\u01b0\u1edbc, do \u0111\u00e2y l\u00e0 2 h\u1ec7 th\u1ed1ng l\u01b0u tr\u1eef t\u00e0i li\u1ec7u v\u00e0 x\u00e1c th\u1ef1c \u0111\u0103ng nh\u1eadp c\u1ed1t l\u00f5i c\u1ee7a doanh nghi\u1ec7p. Vi\u1ec7c s\u1ed1 l\u01b0\u1ee3ng b\u1ea3n v\u00e1 t\u0103ng \u0111\u1ed9t bi\u1ebfn c\u0169ng \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c “c\u1eeda s\u1ed5 an to\u00e0n” gi\u1eefa l\u00fac b\u1ea3n v\u00e1 ph\u00e1t h\u00e0nh v\u00e0 l\u00fac tin t\u1eb7c d\u1ef1ng \u0111\u01b0\u1ee3c m\u00e3 khai th\u00e1c (exploit) ng\u00e0y c\u00e0ng b\u1ecb thu h\u1eb9p, khi k\u1ebb x\u1ea5u c\u00f3 th\u1ec3 so s\u00e1nh tr\u1ef1c ti\u1ebfp b\u1ea3n v\u00e1 v\u1edbi phi\u00ean b\u1ea3n c\u0169 \u0111\u1ec3 t\u00ecm ra l\u1ed7 h\u1ed5ng \u0111\u00e3 \u0111\u01b0\u1ee3c s\u1eeda.<\/p>\n\n\n\n

\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n v\u00e0 doanh nghi\u1ec7p nh\u1ecf \u0111ang s\u1eed d\u1ee5ng m\u00e1y t\u00ednh, laptop ch\u1ea1y Windows, vi\u1ec7c c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111\u1ea7y \u0111\u1ee7 v\u00e0 \u0111\u00fang th\u1eddi \u0111i\u1ec3m l\u00e0 b\u01b0\u1edbc b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u01a1 b\u1ea3n nh\u01b0ng quan tr\u1ecdng nh\u1ea5t trong giai \u0111o\u1ea1n n\u00e0y. \u0110\u1eebng qu\u00ean theo d\u00f5i Phong V\u0169 Tech News \u0111\u1ec3 c\u1eadp nh\u1eadt nhanh nh\u1eefng tin t\u1ee9c c\u00f4ng ngh\u1ec7 m\u1edbi nh\u1ea5t m\u1ed7i ng\u00e0y nh\u00e9!<\/p>\n\n\n\n

Ngu\u1ed3n: The Register<\/em><\/p>\n\n\n\n

B\u00e0i vi\u1ebft li\u00ean quan:<\/strong><\/p>\n\n\n\n