October 2024 - rwth-security - lists.rwth-aachen.de

GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of
by Bernd Kohler 12 Oct '24

12 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitHub, Telegram Bots, and ASCII QR Codes Abused in New Wave of Phishing Attacks" VG Bernd [0] https://thehackernews.com/2024/10/github-telegram-bots-and-qr-codes.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers Hide Remcos RAT in GitHub Repository Comments
by Bernd Kohler 10 Oct '24

10 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Hide Remcos RAT in GitHub Repository Comments" VG Bernd [0] https://www.darkreading.com/vulnerabilities-threats/hackers-hide-remcos-rat… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Publication of Red Teaming Methodology Guide for AI Safety
by Bernd Kohler 10 Oct '24

10 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Publication of Red Teaming Methodology Guide for AI Safety" --> von AISI (Japan AI Safety Institute) VG Bernd [0] https://aisi-go-jp.translate.goog/effort/effort_information/240925/?_x_tr_s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mozilla issued an urgent Firefox update to fix an actively exploited
by Bernd Kohler 10 Oct '24

10 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mozilla issued an urgent Firefox update to fix an actively exploited flaw" VG Bernd [0] https://securityaffairs.com/169590/security/mozilla-firefox-actively-exploi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Venator - Threat Detection Platform (Kubernetes CronJob and Helm)
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Venator" --> "... flexible (detection system that simplifies rule management and deployment with K8s CronJob and Helm ..." --> fork [1] mit "new features and bug fixes" --> gefunden via [2] VG Bernd [0] https://github.com/nianticlabs/venator [1] https://github.com/0x4D31/venator [2] https://medium.com/@0x4d31/open-sourcing-venator-b94374e30a55 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Videos des Linux Security Summit Europe 2024 online
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Linux Security Summit Europe 2024" VG Bernd [0] https://www.youtube.com/watch?v=S1r94G8yJMs&list=PLbzoR-pLrL6pXwGwbAmhi3Dgs… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Gmail Hackers Have Control Of 2FA, Email & Number? Here’s What To Do
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Gmail Hackers Have Control Of 2FA, Email & Number? Here’s What To Do" --> "Google has also advised me that when it comes to users whose accounts have already been hacked and whose second-factor and recovery factors have changed, it’s possible to use the original information in certain cases. “Our automated account recovery process allows a user to use their original recovery factors for up to 7 days after it changes" --> "also wise to consider using passkeys" VG Bernd [0] https://www.forbes.com/sites/daveywinder/2024/10/08/gmail-hackers-take-cont… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

We hacked a robot vacuum — and could watch live through its camera
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "We hacked a robot vacuum — and could watch live through its camera" VG Bernd [0] https://www.abc.net.au/news/2024-10-04/robot-vacuum-hacked-photos-camera-au… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits" --> "... Patches for the issue affecting FASTRPC driver have been made available to OEMs ..." VG Bernd [0] https://thehackernews.com/2024/10/qualcomm-urges-oems-to-patch-critical.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Your Smart TV is Watching You: New Research Reveals the Extent of ACR
by Bernd Kohler 08 Oct '24

08 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Your Smart TV is Watching You: New Research Reveals the Extent of ACR Tracking" --> Paper [1] "Watching TV with the Second-Party: A First Look at Automatic Content Recognition Tracking in Smart TVs" VG Bernd [0] https://securityonline.info/your-smart-tv-is-watching-you-new-research-reve… [1] https://arxiv.org/pdf/2409.06203v1 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0