February 2020 - rwth-security - lists.rwth-aachen.de

The Dever Ransomware Experience
by Bernd Kohler 19 Feb '20

19 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The Dever Ransomware Experience" (incl. IoC) VG Bernd [0] https://www.wilbursecurity.com/2020/02/the-dever-ransomware-experience/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Bypass Windows 10 User Group Policy (and more) with this One Weird Trick
by Bernd Kohler 19 Feb '20

19 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypass Windows 10 User Group Policy (and more) with this One Weird Trick" VG Bernd [0] https://medium.com/tenable-techblog/bypass-windows-10-user-group-policy-and… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

SSH server that knows who you are
by Bernd Kohler 18 Feb '20

18 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SSH server that knows who you are" Nach [1] "warn you if you have agent forwarding or X11 forwarding globally enabled" ... " VG Bernd [0] https://blog.filippo.io/ssh-whoami-filippo-io/ [1] https://mobile.twitter.com/FiloSottile/status/1229513452877688832 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

VTSCAN - scan file via VirusTotal AP
by Bernd Kohler 17 Feb '20

17 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VTSCAN" "... Scan a file directly from your terminal using VirusTotal API ..." VG Bernd [0] https://github.com/TheSecondSun/VTSCAN -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

2 1

Limit the impact of a security intrusion with systemd security directives
by Bernd Kohler 11 Feb '20

11 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Limit the impact of a security intrusion with systemd security directives" VG Bernd [0] https://www.ctrl.blog/entry/systemd-opensmtpd-hardening.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Docker Registries Expose Hundreds of Orgs to Malware, Data Theft
by Bernd Kohler 11 Feb '20

11 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Docker Registries Expose Hundreds of Orgs to Malware, Data Theft" VG Bernd [0] https://threatpost.com/docker-registries-malware-data-theft/152734/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlignweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de

1 0

Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library
by Bernd Kohler 06 Feb '20

06 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Deploying TLS 1.3 at scale with Fizz, a performant open source TLS library" VG Bernd [0] https://engineering.fb.com/security/fizz/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

FOSDEM - HTTP/3 for everyone
by Bernd Kohler 04 Feb '20

04 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "HTTP/3 for everyone" --> inkl. Vortragsvideo und -folien VG Bernd [0] https://daniel.haxx.se/blog/2020/02/02/http-3-for-everyone/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Google launches open-source security key project, OpenSK
by Bernd Kohler 03 Feb '20

03 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google launches open-source security key project, OpenSK" "... a piece of firmware that you can install on a USB dongle of your own, turning it into a usable FIDO or U2F key ..." VG Bernd [0] https://nakedsecurity.sophos.com/2020/02/03/google-launches-open-source-sec… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Buffer overflow when pwfeedback is set in sudoers
by Bernd Kohler 03 Feb '20

03 Feb '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Buffer overflow when pwfeedback is set in sudoers" --> "... While pwfeedback is not enabled by default in the upstream version of sudo, some systems, such as Linux Mint and Elementary OS ..." VG Bernd [0] https://www.sudo.ws/alerts/pwfeedback.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0