April 2022 - rwth-security - lists.rwth-aachen.de

Bypassing LDAP Channel Binding with StartTLS (Active Directory)
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing LDAP Channel Binding with StartTLS" VG Bernd [0] https://offsec.almond.consulting/bypassing-ldap-channel-binding-with-startt… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Cert-EU: Hardening Signal
by Bernd Kohler 20 Sep '23

20 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hardening Signal" VG Bernd [0] https://media.cert.europa.eu/static/WhitePapers/TLP-WHITE-CERT-EU_Security_… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Log4Shell-Rex
by Bernd Kohler 01 Jun '22

01 Jun '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Log4Shell-Rex" --> nutzbar z.B. via "find /var/log -name "*.log" | xargs grep -P ${Log4ShellRex}" VG Bernd [0] https://github.com/back2root/log4shell-rex -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Microsoft finds new elevation of privilege Linux vulnerability,
by Bernd Kohler 30 Apr '22

30 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft finds new elevation of privilege Linux vulnerability, Nimbuspwn" VG Bernd [0] https://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elev… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Kubernetes Goat
by Bernd Kohler 30 Apr '22

30 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Kubernetes Goat" --> Interactive Kubernetes Security Learning Playground VG Bernd [0] https://madhuakula.com/kubernetes-goat/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Kostenloses Live-Webinar "Microsoft 365 Hardening & DSGVO
by Bernd Kohler 28 Apr '22

28 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Kostenloses Live-Webinar "Microsoft 365 Hardening & DSGVO" --> "... 16:00 Uhr Live-Stream auf Youtube mit dem Microsoft-Experten Aaron Siller ..." VG Bernd [0] https://www.golem.de/news/in-eigener-sache-microsoft-365-hardening-dsgvo-li… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

RFC 9116 - A File Format to Aid in Security Vulnerability Disclosure
by Bernd Kohler 28 Apr '22

28 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "A File Format to Aid in Security Vulnerability Disclosure" --> es geht um die location /.well-known/security.txt VG Bernd [0] https://www.rfc-editor.org/rfc/rfc9116 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NIST Requests Public Comment on Draft Guidance for 5G Cybersecurity
by Bernd Kohler 27 Apr '22

27 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NIST Requests Public Comment on Draft Guidance for 5G Cybersecurity" VG Bernd [0] https://www.nist.gov/news-events/news/2022/04/nist-requests-public-comment-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Git security vulnerability announced
by Bernd Kohler 13 Apr '22

13 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Git security vulnerability announced" VG Bernd [0] https://github.blog/2022-04-12-git-security-vulnerability-announced/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft - CVE-2022-26809 - Remote Procedure Call Runtime Remote
by Bernd Kohler 12 Apr '22

12 Apr '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Remote Procedure Call Runtime Remote Code Execution Vulnerability" --> "... Blocking this port at the network perimeter firewall ... systems could still be vulnerable to attacks from within their enterprise perimeter. ..." VG Bernd [0] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26809 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0