December 2024 - rwth-security - lists.rwth-aachen.de

Hackers Can Hijack Your Terminal Via Prompt Injection using LLM-powered Apps
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Can Hijack Your Terminal Via Prompt Injection using LLM-powered Apps" VG Bernd [0] https://gbhackers.com/hijack-your-terminal-via-prompt-injection-using-llm-p… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OpenWrt Sysupgrade flaw let hackers push malicious firmware images
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenWrt Sysupgrade flaw let hackers push malicious firmware images" VG Bernd [0] https://www.bleepingcomputer.com/news/security/openwrt-sysupgrade-flaw-let-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published" VG Bernd [0] https://securityonline.info/windows-zero-day-vulnerability-cve-2024-38193-e… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Open Sources Security Patch Validation Tool for Android
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Open Sources Security Patch Validation Tool for Android" VG Bernd [0] https://www.securityweek.com/google-open-sources-security-patch-validation-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Windows zero-day exposes NTLM credentials, gets unofficial patch
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows zero-day exposes NTLM credentials, gets unofficial patch" --> "... impacts all Windows versions from Windows 7 and Server 2008 R2 up to the latest Windows 11 24H2 and Server 202 ..." --> '... “We are investigating this report and will take action as needed to help keep customers protected.” - a Microsoft spokesperson' VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-windows-zero-day-exposes… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Phishing via OpenVPN/Wireguard
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI Phishing via OpenVPN/Wireguard --> hoffen wir mal, dass Nutzende sich melden, wenn bspw. MFA nicht abgefragt wird - was ja ALLE bei VPN machen, richtig? ;) --> habe ich so aber noch nicht gesehen, aktuell "nur" PoC (gefunden via [1])? VG Bernd [0] https://github.com/CICADA8-Research/Penetration/tree/main [1] https://x.com/CICADA8Research/status/1865676412444967384 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Black Basta Ransomware Leverages Microsoft Teams To Attack Windows Users
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Black Basta Ransomware Leverages Microsoft Teams To Attack Windows Users" VG Bernd [0] https://cybersecuritynews.com/black-basta-ransomware-microsoft/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents" --> ich hoffe auf [0] findet keiner Dokumente/Daten, die nicht ... VG Bernd [0] https://securityonline.info/ddosecrets-unveils-massive-library-of-leaks-sea… [1] https://search.libraryofleaks.org/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware" VG Bernd [0] https://thehackernews.com/2024/12/hackers-leveraging-cloudflare-tunnels.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Browser Isolation Bypassed: QR Codes Used in Novel C2 Attacks
by Bernd Kohler 06 Dec '24

06 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Browser Isolation Bypassed: QR Codes Used in Novel C2 Attacks" VG Bernd [0] https://securityonline.info/browser-isolation-bypassed-qr-codes-used-in-nov… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0