May 2022 - rwth-security - lists.rwth-aachen.de

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA
by Bernd Kohler 10 May '22

10 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI 'A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor' VG Bernd [0] https://github.com/FlaviuPopescu/CVE-2022-28601 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Researchers Warn of 'Raspberry Robin' Malware Spreading via External
by Bernd Kohler 07 May '22

07 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives" VG Bernd [0] https://thehackernews.com/2022/05/researchers-warn-of-raspberry-robin.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

10-Year-Old Flaws With Avast and AVG Antivirus Let Attacker to
by Bernd Kohler 06 May '22

06 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "10-Year-Old Flaws With Avast and AVG Antivirus Let Attacker to Escalate Privileges" VG Bernd [0] https://cybersecuritynews.com/10-year-old-flaws-with-avast-and-avg/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NIST updates guidance for defending against supply-chain attacks
by Bernd Kohler 06 May '22

06 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NIST updates guidance for defending against supply-chain attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/nist-updates-guidance-for-de… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Key Overwriting (KO) Attacks against OpenPGP
by Bernd Kohler 05 May '22

05 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Key Overwriting (KO) Attacks against OpenPGP" VG Bernd [0] https://www.kopenpgp.com/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

badkeys.info - Checking cryptographic public keys for known
by Bernd Kohler 05 May '22

05 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "badkeys.info" --> Checking cryptographic public keys for known vulnerabilities VG Bernd [0] https://badkeys.info/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

How to Install Nginx with ModSecurity 3 on Ubuntu 22.04 LTS
by Bernd Kohler 02 May '22

02 May '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] und [1] FYI "How to Install Nginx with ModSecurity 3 on Ubuntu 22.04 LTS" VG Bernd [0] https://www.linuxcapable.com/how-to-install-nginx-with-modsecurity-3-on-ubu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0