February 2021 - rwth-security - lists.rwth-aachen.de

Microsoft Remote Desktop Web Access Authentication Timing Attack
by Bernd Kohler 08 Feb '21

08 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Remote Desktop Web Access Authentication Timing Attack" VG Bernd [0] https://raxis.com/blog/rd-web-access-vulnerability -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware
by Bernd Kohler 08 Feb '21

08 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware" VG Bernd [0] https://thehackernews.com/2021/02/warning-hugely-popular-great-suspender.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Nearly One-Third of Attack Targets Weren’t Running SolarWinds
by Bernd Kohler 04 Feb '21

04 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Nearly One-Third of Attack Targets Weren’t Running SolarWinds" VG Bernd [0] https://www.cybereason.com/blog/nearly-one-third-of-attack-targets-werent-r… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vulnerabilities in Realtek Wi-Fi Module Expose Many Devices to Remote Attacks
by Bernd Kohler 04 Feb '21

04 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerabilities in Realtek Wi-Fi Module Expose Many Devices to Remote Attacks" VG Bernd [0] https://www.securityweek.com/vulnerabilities-realtek-wi-fi-module-expose-ma… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests
by Bernd Kohler 03 Feb '21

03 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests" Siehe dazu auch [1] (inkl. Link zu IoC) --> "... All the backdoored browser add-ons have been taken down by Google and Microsoft as of December 18, 2020, ..." --> lokal auch deinstaliiert? VG Bernd [0] https://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-mali… [1] https://thehackernews.com/2021/02/over-dozen-chrome-extensions-caught.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Designing Actively Secure, Highly Available Industrial Automation Applications
by Bernd Kohler 01 Feb '21

01 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Designing Actively Secure, Highly Available Industrial Automation Applications" "... Security mechanisms are achieved using IEC 61499 Service-Interface Function Blocks (SIFBs) embedding Intrusion Detection and Prevention System (IDPS), added to the application at compile time. This method is more amenable to providing active security protection from attacks on previously unknown (zero-day) vulnerabilities ..." VG Bernd [0] https://arxiv.org/abs/2101.01856 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0