August 2024 - rwth-security - lists.rwth-aachen.de

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy
by Bernd Kohler 13 Aug '24

13 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication" VG Bernd [0] https://thehackernews.com/2024/08/new-windows-backdoor-bitsloth-exploits.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

technische Details russische Desinformationskampagne "Doppelgänger" - Bayerischen Landesamt für Verfassungsschutz (BayLfV)
by Bernd Kohler 13 Aug '24

13 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Doppelgänger" - Teil [1] - Management Summary - Teil [2] - Vollanalyse VG Bernd [0] https://www.verfassungsschutz.bayern.de/ueberuns/medien/pressemitteilungen/… [1] https://www.verfassungsschutz.bayern.de/mam/anlagen/baylfv_management_summa… [2] https://www.verfassungsschutz.bayern.de/mam/anlagen/baylfv_vollanalyse_dopp… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical AWS Vulnerabilities Allow S3 Attack Bonanza
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical AWS Vulnerabilities Allow S3 Attack Bonanza" VG Bernd [0] https://www.darkreading.com/remote-workforce/critical-aws-vulnerabilities-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Windows Downdate: Downgrade Attacks Using Windows Updates
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Downdate: Downgrade Attacks Using Windows Updates" --> gefunden via [1] VG Bernd [0] https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/ [1] https://www.golem.de/news/windows-10-und-11-downgrade-angriff-reisst-alte-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Splitting the email atom: exploiting parsers to bypass access
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Splitting the email atom: exploiting parsers to bypass access controls" VG Bernd [0] https://portswigger.net/research/splitting-the-email-atom -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Vulnerabilities in Sogou Keyboard encryption expose keypresses to
by Bernd Kohler 07 Aug '24

07 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping" VG Bernd [0] https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Detect whether an audio clip was created using ElevenLabs
by Bernd Kohler 07 Aug '24

07 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Detect whether an audio clip was created using ElevenLabs" --> zu beachten ist aber was hochgeladen werden darf/sollte VG Bernd [0] https://elevenlabs.io/ai-speech-classifier -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Proxy Re-encryption (PRE) with CKKS Homomorphic Encryption using
by Bernd Kohler 07 Aug '24

07 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Proxy Re-encryption (PRE) with CKKS Homomorphic Encryption using OpenFHE and C++" --> "... With proxy re-encryption (PRE), we can convert ciphertext encrypted with Alice's public key into one that Bob can decrypt with his private key ..." VG Bernd [0] https://asecuritysite.com/openfhe/openfhe_21cpp -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Neue Taktik: Hacker missbrauchen Cloudflare-Tunnel
by Bernd Kohler 06 Aug '24

06 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Neue Taktik: Hacker missbrauchen Cloudflare-Tunnel" VG Bernd [0] https://www.it-daily.net/it-sicherheit/cybercrime/neue-taktik-hacker-missbr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Magniber ransomware targets home (office) users
by Bernd Kohler 06 Aug '24

06 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Magniber ransomware targets home users" --> "... new campaign does not limit itself to specific regions and uses tried and trusted methods to reach home users’ systems ..." VG Bernd [0] https://www.malwarebytes.com/blog/news/2024/08/magniber-ransomware-targets-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0