December 2024 - rwth-security - lists.rwth-aachen.de

APNIC - Post-Quantum Cryptography
by Bernd Kohler 03 Dec '24

03 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Post-Quantum Cryptography" VG Bernd [0] https://blog.apnic.net/2024/11/29/post-quantum-cryptography/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Another CA Fails the Turing Test?
by Bernd Kohler 03 Dec '24

03 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Another CA Fails the Turing Test?" --> es geht um: ICP-Brasil --> "... Certificate Authority (CA) has issued what is likely a man-in-the-middle (MITM) certificate—something strictly prohibited by all root programs. ..." --> weitere Details, siehe [1] --> siehe dazu auch "Government CAs and the WebPKI: Trust is Often the Opposite of Security" [2] VG Bernd [0] https://unmitigatedrisk.com/?p=908 [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1934361 [2] https://unmitigatedrisk.com/?p=911 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

OtterRoot: Netfilter Universal Root 1-day
by Bernd Kohler 03 Dec '24

03 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OtterRoot: Netfilter Universal Root 1-day" VG Bernd [0] https://osec.io/blog/2024-11-25-netfilter-universal-root-1-day -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Zero-Day Exploit Code Released for Windows Task Scheduler Flaw
by Bernd Kohler 03 Dec '24

03 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zero-Day Exploit Code Released for Windows Task Scheduler Flaw (CVE-2024-49039), Actively Exploited by RomCom Group" VG Bernd [0] https://securityonline.info/zero-day-exploit-code-released-for-windows-task… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Update on Exchange Server ADFS Modern Authentication support
by Bernd Kohler 03 Dec '24

03 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Update on Exchange Server ADFS Modern Authentication support" VG Bernd [0] https://techcommunity.microsoft.com/blog/exchange/update-on-exchange-server… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google
by Bernd Kohler 02 Dec '24

02 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "8 Million Android Users Hit by SpyLoan Malware in Loan Apps on Google Play" VG Bernd [0] https://thehackernews.com/2024/12/8-million-android-users-hit-by-spyloan.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Bootkitty: Analyzing the first UEFI bootkit for Linux
by Bernd Kohler 02 Dec '24

02 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bootkitty: Analyzing the first UEFI bootkit for Linux" VG Bernd [0] https://www.welivesecurity.com/en/eset-research/bootkitty-analyzing-first-u… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 1

CVE-2024-52336 & CVE-2024-52337: Vulnerabilities in Linux Tuned
by Bernd Kohler 02 Dec '24

02 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-52336 & CVE-2024-52337: Vulnerabilities in Linux Tuned Daemon" --> "critical tool for runtime hardware and kernel optimization" --> "could allow attackers to escalate privileges or manipulate logs" VG Bernd [0] https://securityonline.info/cve-2024-52336-cve-2024-52337-vulnerabilities-i… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Announcing the Public Preview of OpenID Connect external identity
by Bernd Kohler 02 Dec '24

02 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Announcing the Public Preview of OpenID Connect external identity provider support for Microsoft Entra External ID" VG Bernd [0] https://devblogs.microsoft.com/identity/openid-connect-external-identity-pr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

BSI - Securing Tomorrow, Today: Transitioning to Post-Quantum
by Bernd Kohler 02 Dec '24

02 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Securing Tomorrow, Today: Transitioning to Post-Quantum Cryptography" VG Bernd [0] https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Crypto/PQC-joint-statem… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0