January 2025 - rwth-security - lists.rwth-aachen.de

No need to RSVP: a closer look at the Tria stealer campaign
by Bernd Kohler 31 Jan '25

31 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "No need to RSVP: a closer look at the Tria stealer campaign" --> "... collects victims’ SMS data, tracks call logs, messages ..." --> "... exfiltrates the data by sending it to various Telegram bots ..." --> "... exploits this data to hijack personal messaging accounts ..." VG Bernd [0] https://securelist.com/tria-stealer-collects-sms-data-from-android-devices/… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft - Boost Security with API Security Posture Management
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Boost Security with API Security Posture Management" VG Bernd [0] https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/boost-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Time Bandit ChatGPT jailbreak bypasses safeguards on sensitive topics" VG Bernd [0] https://www.bleepingcomputer.com/news/security/time-bandit-chatgpt-jailbrea… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-0065: TeamViewer Patches Privilege Escalation Vulnerability in Windows Clients
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-0065: TeamViewer Patches Privilege Escalation Vulnerability in Windows Clients" VG Bernd [0] https://securityonline.info/cve-2025-0065-teamviewer-patches-privilege-esca… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Evolving the Windows User Model – Introducing Administrator Protection
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Evolving the Windows User Model – Introducing Administrator Protection" VG Bernd [0] https://techcommunity.microsoft.com/blog/microsoft-security-blog/evolving-t… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-56614 & CVE-2024-56615: PoC Exploits Released for Severe eBPF Vulnerabilities in Linux Kernel
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-56614 & CVE-2024-56615: PoC Exploits Released for Severe eBPF Vulnerabilities in Linux Kernel" VG Bernd [0] https://securityonline.info/cve-2024-56614-cve-2024-56615-poc-exploits-rele… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Password Management at Risk: Vaultwarden Vulnerabilities Expose Millions
by Bernd Kohler 30 Jan '25

30 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Password Management at Risk: Vaultwarden Vulnerabilities Expose Millions" VG Bernd [0] https://securityonline.info/password-management-at-risk-vaultwarden-vulnera… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Letsencrypt stellt Benachrichtigungsmails für ablaufende Zertifikate ein
by Böckmann, Bernd 29 Jan '25

29 Jan '25

Ob das[1] so eine gute Idee ist? Finanziell lohnt es sich wahrscheinlich für sie. Immerhin machen sie im gleichen Atemzug Werbung für externe Dienstleister, die das Übernehmen können... [1]: https://letsencrypt.org/2025/01/22/ending-expiration-emails/

1 0

SLAP und FLOP - Apple CPU side-channel attack
by Bernd Kohler 29 Jan '25

29 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SLAP (Speculation Attacks via Load Address Prediction) and FLOP (False Load Output Predictions)" --> Paper bzgl. SLAP [1] --> Paper bzgl. FLOP [2] VG Bernd [0] https://predictors.fail/ [1] https://predictors.fail/files/SLAP.pdf [2] https://predictors.fail/files/FLOP.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New TorNet backdoor seen in widespread campaign
by Bernd Kohler 29 Jan '25

29 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New TorNet backdoor seen in widespread campaign" --> "... targeting users, predominantly in Poland and Germany, based on the phishing email language ..." VG Bernd [0] https://blog.talosintelligence.com/new-tornet-backdoor-campaign/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0