January 2024 - rwth-security - lists.rwth-aachen.de

CISA: Critical Microsoft SharePoint bug now actively exploited
by Bernd Kohler 12 Jan '24

12 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CISA: Critical Microsoft SharePoint bug now actively exploited" VG Bernd [0] https://www.bleepingcomputer.com/news/security/cisa-critical-microsoft-shar… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mailgoose - SPF, DMARC and DKIM configuration is set up correctly
by Bernd Kohler 10 Jan '24

10 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "mailgoose" --> von CERT-Polska --> "... allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly ..." VG Bernd [0] https://github.com/CERT-Polska/mailgoose -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2023-49647: A High-Risk Zoom Vulnerability
by Bernd Kohler 10 Jan '24

10 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2023-49647: A High-Risk Zoom Vulnerability" --> CVS SCORE 8.8 "... authenticated user to escalate privileges via local access, potentially leading to unauthorized actions and access within the system .." --> "... Zoom has addressed the issue in its latest versions, ..." also Update einspielen VG Bernd [0] https://securityonline.info/cve-2023-49647-a-high-risk-zoom-vulnerability/?… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

China claims it cracked Apple's AirDrop to find numbers, email
by Bernd Kohler 10 Jan '24

10 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "China claims it cracked Apple's AirDrop to find numbers, email addresses" --> Zugriff auf das Gerät vorausgesetzt: "... The research institute says the sender's device name, email address, and mobile phone number are hashed in the iOS device logs. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/china-claims-it-cracked-appl… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Hackers target Microsoft SQL servers in Mimic ransomware attacks
by Bernd Kohler 10 Jan '24

10 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers target Microsoft SQL servers in Mimic ransomware attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-sql… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Bypassing LDAP Channel Binding with StartTLS (Active Directory)
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing LDAP Channel Binding with StartTLS" VG Bernd [0] https://offsec.almond.consulting/bypassing-ldap-channel-binding-with-startt… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

LDAP Watchdog
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LDAP Watchdog" VG Bernd [0] https://github.com/MegaManSec/LDAP-Monitoring-Watchdog -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Unpatched NGINX ingress controller bugs can be abused to steal
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets" VG Bernd [0] https://www.theregister.com/2023/10/30/unpatched_nginx_ingress_controller_b… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

SMTP Smuggling - Spoofing E-Mails Worldwide
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SMTP Smuggling - Spoofing E-Mails Worldwide" --> Postfix remediation and workaround [1] --> die Verwendung von DKIM/DMARC soll hier Abhilfe schaffen VG Bernd [0] https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwi… [1] https://www.postfix.org/smtp-smuggling.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 2

BSI - SiSyPHuS - Analyseergebnisse zum Treibermanagement in Windows
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BSI veröffentlicht Analyseergebnisse zum Treibermanagement in Windows 10" VG Bernd [0] https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldungen-News/Meldunge… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0