December 2024 - rwth-security - lists.rwth-aachen.de

Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign
by Bernd Kohler 18 Dec '24

18 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Exploiting Linux eBPF to Spread Malware in Ongoing Campaign" VG Bernd [0] https://hackread.com/hackers-exploit-linux-ebpf-malware-ongoing-campaign/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Malicious Microsoft VSCode extensions target devs, crypto community
by Bernd Kohler 18 Dec '24

18 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious Microsoft VSCode extensions target devs, crypto community" VG Bernd [0] https://www.bleepingcomputer.com/news/security/malicious-microsoft-vscode-e… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Short-Lived Certificates Coming to Let’s Encrypt
by Bernd Kohler 18 Dec '24

18 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Short-Lived Certificates Coming to Let’s Encrypt" --> "... lifetime of six days ..." VG Bernd [0] https://www.schneier.com/blog/archives/2024/12/short-lived-certificates-com… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CISA Issues Best Practices to Secure Microsoft 365 Cloud Environments
by Bernd Kohler 18 Dec '24

18 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CISA Issues Best Practices to Secure Microsoft 365 Cloud Environments" VG Bernd [0] https://cybersecuritynews.com/cisa-practices-secure-microsoft-365-cloud/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Malicious ads push Lumma infostealer via fake CAPTCHA pages
by Bernd Kohler 17 Dec '24

17 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious ads push Lumma infostealer via fake CAPTCHA pages" VG Bernd [0] https://www.bleepingcomputer.com/news/security/malicious-ads-push-lumma-inf… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows kernel bug now exploited in attacks to gain SYSTEM privileges
by Bernd Kohler 17 Dec '24

17 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows kernel bug now exploited in attacks to gain SYSTEM privileges" VG Bernd [0] https://www.bleepingcomputer.com/news/security/windows-kernel-bug-now-explo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NIST Deprecates RSA-2048 and ECC 256
by Bernd Kohler 16 Dec '24

16 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Root Causes 447: NIST Deprecates RSA-2048 and ECC 256" VG Bernd [0] https://www.sectigo.com/resource-library/root-causes-447-nist-deprecates-rs… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Android NoviSpy spyware linked to Qualcomm zero-day bugs
by Bernd Kohler 16 Dec '24

16 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Android NoviSpy spyware linked to Qualcomm zero-day bugs" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-android-novispy-spyware-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers Exploiting Microsoft Teams to Gain Remote Access to User’s System
by Bernd Kohler 16 Dec '24

16 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Exploiting Microsoft Teams to Gain Remote Access to User’s System" VG Bernd [0] https://cybersecuritynews.com/microsoft-teams-to-gain-remote-access/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Curl Vulnerability Let Attackers Access Sensitive Information
by Bernd Kohler 16 Dec '24

16 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Curl Vulnerability Let Attackers Access Sensitive Information" VG Bernd [0] https://cybersecuritynews.com/curl-vulnerability-attackers-sensitive-inform… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0