June 2020 - rwth-security - lists.rwth-aachen.de

GTP Mobile Internet Protocol Bugs Let Hackers Attack 4G and 5G Networks Mobile via Internet
by Bernd Kohler 18 Jun '20

18 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GTP Mobile Internet Protocol Bugs Let Hackers Attack 4G and 5G Networks Mobile via Internet" VG Bernd [0] https://cybersecuritynews.com/gtp-mobile-internet-protocol-bugs/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

UEFI scanner brings Microsoft Defender ATP protection to a new level
by Bernd Kohler 18 Jun '20

18 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "UEFI scanner brings Microsoft Defender ATP protection to a new level" VG Bernd [0] https://www.microsoft.com/security/blog/2020/06/17/uefi-scanner-brings-micr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

saferwall - a hackable malware sandbox for the 21st Century
by Bernd Kohler 18 Jun '20

18 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "https://github.com/saferwall/saferwall" siehe dazu auch [1] VG Bernd [0] https://github.com/saferwall/saferwall [1] https://saferwall.com/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Ripple20: Flaws in Treck TCP/IP Stack Expose Millions of IoT Devices to Attacks
by Bernd Kohler 16 Jun '20

16 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Ripple20: Flaws in Treck TCP/IP Stack Expose Millions of IoT Devices to Attacks" weitere Infos siehe [1] VG Bernd [0] https://www.securityweek.com/ripple20-flaws-treck-tcpip-stack-expose-millio… [1] https://www.jsof-tech.com/ripple20/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Intel CET Answers Call to Protect Against Common Malware Threats
by Bernd Kohler 16 Jun '20

16 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intel CET Answers Call to Protect Against Common Malware Threats" "... Intel Control-Flow Enforcement Technology Available in 'Tiger Lake' Adds CPU-Level Protection Against a Common Class of Malware ..." VG Bernd [0] https://newsroom.intel.com/editorials/intel-cet-answers-call-protect-common… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

sn1per + Sc0pe Templates
by Bernd Kohler 16 Jun '20

16 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] bzw. [1] FYI "Sn1per" (automated scanner ...to enumerate and scan for vulnerabilities) --> ergänzend zur Greenbone bzw. nmap mit [2], [3] et al. VG Bernd [0] https://github.com/1N3/Sn1per [1] https://github.com/1N3/Sn1per/wiki/Sc0pe-Templates [2] https://github.com/scipag/vulscan [3] https://nmap.org/nsedoc/scripts/vulners.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

BYOB (Build Your Own Botnet)
by Bernd Kohler 16 Jun '20

16 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BYOB (Build Your Own Botnet)" --> "should be used for authorized testing or educational purposes only" dem gibt es nichts mehr hinzuzufügen!!! VG Bernd [0] https://github.com/malwaredllc/byob -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vulnerabilities in LTEand 5G networks 2020
by Bernd Kohler 15 Jun '20

15 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerabilities in LTEand 5G networks 2020" VG Bernd [0] https://positive-tech.com/storage/articles/gtp-2020/threat-vector-gtp-2020-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Postbank forced to replace 12-million bank cards after employees steal master key
by Bernd Kohler 14 Jun '20

14 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Postbank forced to replace 12-million bank cards after employees steal master key" --> falls jemand Kunde/betroffen ist ;) VG Bernd [0] https://savannanews.com/postbank-forced-to-replace-12-million-bank-cards-af… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Let’s Bypass CSRF Protection & Password Confirmation to Takeover Victim Accounts :D
by Bernd Kohler 14 Jun '20

14 Jun '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Let’s Bypass CSRF Protection & Password Confirmation to Takeover Victim Accounts :D" VG Bernd [0] https://medium.com/bugbountywriteup/lets-bypass-csrf-protection-password-co… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0