November 2024 - rwth-security - lists.rwth-aachen.de

PHP Patches Multi Flaws, Including CVE-2024-8932 (CVSS 9.8), Urges
by Bernd Kohler 26 Nov '24

26 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PHP Patches Multi Flaws, Including CVE-2024-8932 (CVSS 9.8), Urges Immediate Update" VG Bernd [0] https://securityonline.info/php-patches-multi-flaws-including-cve-2024-8932… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows security and resiliency: Protecting your business
by Bernd Kohler 24 Nov '24

24 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows security and resiliency: Protecting your business" u.a. - Administrator protection "... user is prompted to securely authorize the change using Windows Hello. Windows creates a temporary isolated admin token to get the job done. This temporary token is immediately destroyed once the task is complete, ensuring that admin privileges do not persist. Administrator protection helps ensure that users, and not malware, remain in control of system resources ..." - Safe Deployment Practices "... ensure any negative impact from updates is kept to a minimum ..." "... developing new Windows capabilities that will allow security product developers to build their products outside of kernel mode ..." - Hotpatch in Windows "... introduced for Windows 11 Enterprise 24H2 and Windows 365. This revolutionary feature allows businesses to apply critical security updates without requiring a system restart, ..." VG Bernd [0] https://blogs.windows.com/windowsexperience/2024/11/19/windows-security-and… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft testing Windows 11 support for third-party passkeys
by Bernd Kohler 24 Nov '24

24 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft testing Windows 11 support for third-party passkeys" --> "... add support for support for using third-party passkey providers for Windows 11 passwordless authentication. Passkeys use biometric authentication, such as fingerprints and facial recognition, to provide a more secure and convenient alternative to traditional passwords ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-testing-windows-11… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Malicious Update in Python Crypto Library Targets Private Keys via
by Bernd Kohler 24 Nov '24

24 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious Update in Python Crypto Library Targets Private Keys via Telegram" --> "... PyPI package aiocpa ..." VG Bernd [0] https://securityonline.info/malicious-update-in-python-crypto-library-targe… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-9511 (CVSS 9.8): Critical Flaw in FluentSMTP Plugin Exposes
by Bernd Kohler 24 Nov '24

24 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-9511 (CVSS 9.8): Critical Flaw in FluentSMTP Plugin Exposes Over 300,000 WordPress Sites to Potential Takeover" VG Bernd [0] https://securityonline.info/cve-2024-9511-cvss-9-8-critical-flaw-in-fluents… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby
by Bernd Kohler 24 Nov '24

24 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access" VG Bernd [0] https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Attacking Automotive RKE Security: How Smart are your ‘Smart’ Keys?
by Bernd Kohler 22 Nov '24

22 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Attacking Automotive RKE Security: How Smart are your ‘Smart’ Keys?" --> "... analyze the design, implementation, and security levels of 7 different cars manufactured by Honda, Maruti-Suzuki, Toyota, and Mahindra ..." VG Bernd [0] https://eprint.iacr.org/2024/1816 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-10220: Kubernetes Vulnerability Allows Arbitrary Command
by Bernd Kohler 21 Nov '24

21 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-10220: Kubernetes Vulnerability Allows Arbitrary Command Execution" The affected versions of kubelet include: v1.30.0 to v1.30.2 v1.29.0 to v1.29.6 <= v1.28.11 VG Bernd [0] https://securityonline.info/cve-2024-10220-kubernetes-vulnerability-allows-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Fortinet VPN design flaw hides successful brute-force attacks
by Bernd Kohler 21 Nov '24

21 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Fortinet VPN design flaw hides successful brute-force attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/fortinet-vpn-design-flaw-hid… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Malicious QR Codes: How big of a problem is it, really?
by Bernd Kohler 21 Nov '24

21 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious QR Codes: How big of a problem is it, really?" VG Bernd [0] https://blog.talosintelligence.com/malicious_qr_codes/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0