December 2024 - rwth-security - lists.rwth-aachen.de

New Android spyware found on phone seized by Russian FSB
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Android spyware found on phone seized by Russian FSB" --> "... impersonated a legitimate and popular Android app 'Cube Call Recorder,' ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-android-spyware-found-on… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

VMware vCenter Sudo Privilege Escalation
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VMware vCenter Sudo Privilege Escalation" --> vorab Terms of Service aktzeptieren --> Metasploit-Module VG Bernd [0] https://packetstorm.news/files/id/182981 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers can wirelessly watch your display by HDMI radiation
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers can wirelessly watch your display by HDMI radiation" VG Bernd [0] https://www.pcworld.com/article/2413156/hackers-can-wirelessly-watch-your-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

AirBugCatcher: Automated Wireless Reproduction of IoT Bugs
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AirBugCatcher: Automated Wireless Reproduction of IoT Bugs" --> das dazugehörige Paper [1] VG Bernd [0] https://github.com/asset-group/air-bug-catcher/ [1] https://asset-group.github.io/papers/airbugcatcher.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Cloudflare’s developer domains increasingly abused by threat actors
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cloudflare’s developer domains increasingly abused by threat actors" --> "... pages.dev' and 'workers.dev' domains, used for deploying web pages and facilitating serverless computing, are being increasingly abused by cybercriminals for phishing and other malicious activities. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/cloudflares-developer-domain… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Six password takeaways from the updated NIST cybersecurity framework
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Six password takeaways from the updated NIST cybersecurity framework" VG Bernd [0] https://www.bleepingcomputer.com/news/security/six-password-takeaways-from-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

iDRAC to Domain Admin
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "iDRAC to Domain Admin" --> default Credentials wie "root:calvin" verwendet aber keiner mehr,richtig? ;) VG Bernd [0] https://infosecwriteups.com/idrac-to-domain-admin-4acb89391070 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution" VG Bernd [0] https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2024-11… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Malicious Ads in Search Results Are Driving New Generations of Scams
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious Ads in Search Results Are Driving New Generations of Scams" VG Bernd [0] https://www.wired.com/story/malicious-ads-in-search-results-are-driving-new… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

The Complete Active Directory Security Handbook
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The Complete Active Directory Security Handbook" --> was auch immer komplett heißt VG Bernd [0] https://karim-ashraf.gitbook.io/karim_ashraf_space/writeups/the-complete-ac… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0