September 2020 - rwth-security - lists.rwth-aachen.de

safety - checks your installed dependencies for known security vulnerabilities
by Bernd Kohler 14 Sep '20

14 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "safety" VG Bernd [0] https://github.com/pyupio/safety -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

DockerENT (activE ruNtime application security scanning Tool - RAST tool)
by Bernd Kohler 14 Sep '20

14 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DockerENT" VG Bernd [0] https://github.com/r0hi7/DockerENT -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Who is calling? CDRThief targets Linux VoIP softswitches
by Bernd Kohler 11 Sep '20

11 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Who is calling? CDRThief targets Linux VoIP softswitches" --> "target a very specific VoIP platform, used by two China-produced softswitches (software switches): Linknat VOS2009 and VOS3000" --> "including call detail records (CDR)" VG Bernd [0] https://www.welivesecurity.com/2020/09/10/who-callin-cdrthief-linux-voip-so… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

RFC 8894 - Simple Certificate Enrolment Protocol (SCEP)
by Bernd Kohler 11 Sep '20

11 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI RFC 8894 - "Simple Certificate Enrolment Protocol" (SCEP) VG Bernd [0] https://tools.ietf.org/rfc/rfc8894.txt -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Secure Your Zoom Account with Two-Factor Authentication
by Bernd Kohler 11 Sep '20

11 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Secure Your Zoom Account with Two-Factor Authentication" VG Bernd [0] https://blog.zoom.us/secure-your-zoom-account-with-two-factor-authenticatio… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Introducing CloudBrute, wild hunt on the clouds
by Bernd Kohler 11 Sep '20

11 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Introducing CloudBrute, wild hunt on the clouds" Bernd [0] https://0xsha.io/posts/introducing-cloudbrute-wild-hunt-on-the-clouds -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Building a Secure Amazon S3 Bucket (AWS)
by Bernd Kohler 10 Sep '20

10 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Building a Secure Amazon S3 Bucket (AWS)" VG Bernd [0] https://www.fugue.co/blog/building-a-secure-amazon-s3-bucket-aws -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Uncovering bad guys hiding behind CloudFlare
by Bernd Kohler 10 Sep '20

10 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Uncovering bad guys hiding behind CloudFlare" VG Bernd [0] http://www.crimeflare.org:82/cfs.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

openssl - Raccoon Attack (CVE-2020-1968)
by Bernd Kohler 10 Sep '20

10 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Raccoon Attack (CVE-2020-1968)" (weitere Infos siehe auch [1]) Das gute ist: - Severity: Low - really hard to exploit - conditions as "rare." VG Bernd [0] https://www.openssl.org/news/secadv/20200909.txt [1] https://www.zdnet.com/article/raccoon-attack-allows-hackers-to-break-tls-en… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

BLURtooth - Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite
by Bernd Kohler 10 Sep '20

10 Sep '20

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite" VG Bernd [0] https://kb.cert.org/vuls/id/589825 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0