May 2024 - rwth-security - lists.rwth-aachen.de

PyPi package backdoors Macs using the Sliver pen-testing suite
by Bernd Kohler 14 May '24

14 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PyPi package backdoors Macs using the Sliver pen-testing suite" --> "... mimicked the popular 'requests' library on the Python Package Index (PyPI) ..." --> "... several steps and obfuscation layers, including using steganography in a PNG image file to covertly install the Sliver payload on the target ..." --> malicious Python package for macOS named 'requests-darwin-lite,' VG Bernd [0] https://www.bleepingcomputer.com/news/security/pypi-package-backdoors-macs-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Having fun with GPT-4o
by Bernd Kohler 14 May '24

14 May '24

allo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenAI zeigt OmnAimodel: Keine Suche, kein GPT-5, aber GPT-4o für ChatGPT" --> Details siehe [1] --> wie in dem Video in [0] bzw. [2] zu sehen ist, gibt es auch eine Verbesserung der "natural, real-time voice conversation and the ability to converse with ChatGPT via real-time video." --> was das aus Security Sicht bedeutet, demonstriert [3], baer auch [2] ist mit Blick auf die real time translation interresant --> wenn jetzt noch die Möglichkeit implementiert wird, eigene Sprach- muster bzw. die des Lehrstuhlinhabers zu hinterlegen ... VG Bernd [0] https://heise.de/-9716626 [1] https://openai.com/index/gpt-4o-and-more-tools-to-chatgpt-free/ [2] https://twitter.com/tomwarren/status/1790074556981403997?t=PL04XuZcbLhglYW7… [3] https://twitter.com/Mr_AllenT/status/1790081245008789771 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Debian OpenSSL Bug - Breaking DKIM and BIMI in 2024
by Bernd Kohler 13 May '24

13 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Debian OpenSSL Bug - Breaking DKIM and BIMI in 2024" VG Bernd [0] https://16years.secvuln.info/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Microsoft Incident Response guide helps simplify cyberthreat
by Bernd Kohler 07 May '24

07 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Microsoft Incident Response guide helps simplify cyberthreat investigations" --> download via [1] VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2024/04/23/new-microsoft-inci… [1] https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/fin… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Novel attack against virtually all VPN apps neuters their entire
by Bernd Kohler 07 May '24

07 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Novel attack against virtually all VPN apps neuters their entire purpose" VG Bernd [0] https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft - Announcing Zero Trust DNS Private Preview
by Bernd Kohler 06 May '24

06 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Announcing Zero Trust DNS Private Preview" --> siehe dazu auch "Deployment Considerations for Windows ZTDNS Client" [1] VG Bernd [0] https://techcommunity.microsoft.com/t5/networking-blog/announcing-zero-trus… [1] https://techcommunity.microsoft.com/t5/networking-blog/deployment-considera… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-4439: Unauthenticated Stored Cross-Site Scripting
by Bernd Kohler 03 May '24

03 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-4439: Unauthenticated Stored Cross-Site Scripting Vulnerability in WordPress Core" --> sofern nicht bereits am 09.04.2024 geschehen, Update auf Version 6.5.2 VG Bernd [0] https://securityonline.info/cve-2024-4439-unauthenticated-stored-cross-site… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft Researcher to Unveil 4 OpenVPN Zero-Day Vulnerabilities at
by Bernd Kohler 03 May '24

03 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Researcher to Unveil 4 OpenVPN Zero-Day Vulnerabilities at Black Hat USA 2024" --> es geht um "OVPNX" --> bis zu 08.2024 sollten das aber keine 0-day mehr und gefixt sein ;) VG Bernd [0] https://securityonline.info/microsoft-researcher-to-unveil-4-openvpn-zero-d… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-32962 (CVSS 10): Critical Vulnerability in XML-Crypto
by Bernd Kohler 02 May '24

02 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-32962 (CVSS 10): Critical Vulnerability in XML-Crypto Affects Millions" --> CVSS score 10 wg. "a fundamental oversight in the package’s default configuration, which fails to properly verify the authenticity of digital signatures, thereby allowing signature spoofing ..." VG Bernd [0] https://securityonline.info/cve-2024-32962-cvss-10-critical-vulnerability-i… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

A recent security incident involving Dropbox Sign
by Bernd Kohler 02 May '24

02 May '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "A recent security incident involving Dropbox Sign" VG Bernd [0] https://sign.dropbox.com/blog/a-recent-security-incident-involving-dropbox-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0