January 2025 - rwth-security - lists.rwth-aachen.de

Changes to SMB Signing Enforcement Defaults in Windows 24H2
by Bernd Kohler 27 Jan '25

27 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Changes to SMB Signing Enforcement Defaults in Windows 24H2" VG Bernd [0] https://www.dsinternals.com/en/smb-signing-windows-server-2025-client-11-24… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Let'S Encrypt - Ending Support for Expiration Notification Emails
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Ending Support for Expiration Notification Emails" VG Bernd [0] https://letsencrypt.org/2025/01/22/ending-expiration-emails/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-50050: Critical Vulnerability in meta-llama/llama-stack
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-50050: Critical Vulnerability in meta-llama/llama-stack" VG Bernd [0] https://www.oligo.security/blog/cve-2024-50050-critical-vulnerability-in-me… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

QakBot-Linked BC Malware Adds Enhanced Remote Access and Data Gathering Features
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "QakBot-Linked BC Malware Adds Enhanced Remote Access and Data Gathering Features" VG Bernd [0] https://thehackernews.com/2025/01/qakbot-linked-bc-malware-adds-enhanced.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Cellular Security
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cellular Security" --> laut archive.org schon etwas älter 11.2024 --> LTE implementations (Open5GS, Magma, OpenAirInterface, Athonet, SD-Core, NextEPC, srsRAN) 5G implementations (Open5GS, Magma, OpenAirInterface) VG Bernd [0] https://cellularsecurity.org/ransacked -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Supply chain attack hits Chrome extensions, could expose millions
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Supply chain attack hits Chrome extensions, could expose millions" --> Liste der Erweiterungen und IoC's auf [1] VG Bernd [0] https://www.theregister.com/2025/01/22/supply_chain_attack_chrome_extension/ [1] https://cdn.prod.website-files.com/64deefeac57fbbefc32df53d/678690faf3f050d… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

ClamAV - Cisco warns of denial of service flaw with PoC exploit code
by Bernd Kohler 23 Jan '25

23 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cisco warns of denial of service flaw with PoC exploit code" VG Bernd [0] https://www.bleepingcomputer.com/news/security/cisco-warns-of-denial-of-ser… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Browser Extensions: The Infostealers Nobody is Watching Out For
by Bernd Kohler 20 Jan '25

20 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Browser Extensions: The Infostealers Nobody is Watching Out For" --> es geht um Browser Detection-Response (BDR) und konkret um die Extension von SquareX um problematische Browser-Erweiterungen zu detektieren --> Alternative zu dem oben genannten Tool ([1] scheint nicht mehr gepflegt zu werden)? VG Bernd [0] https://medium.com/@squarex/browser-extensions-the-infostealers-nobody-is-w… [1] https://www.weaklayer.com/2020/10/17/Why-Browser-Detection-and-Response/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass
by Bernd Kohler 17 Jan '25

17 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass" VG Bernd [0] https://thehackernews.com/2025/01/new-sneaky-2fa-phishing-kit-targets.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws
by Bernd Kohler 17 Jan '25

17 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Millions of Internet Hosts Vulnerable to Attacks Due to Tunneling Protocol Flaws" - "technical details" [1] - "academic paper" [2] VG Bernd [0] https://www.securityweek.com/millions-of-internet-hosts-vulnerable-to-attac… [1] https://www.top10vpn.com/research/tunneling-protocol-vulnerability/ [2] https://papers.mathyvanhoef.com/usenix2025-tunnels.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0