February 2025 - rwth-security - lists.rwth-aachen.de

GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code" - CVE-2025-0475: "versions from 15.10 through 17.9.0" - CVE-2025-0555: "versions 16.6 through 17.9.0" --> "... patched versions 17.9.1, 17.8.4, and 17.7.6 ..." VG Bernd [0] https://cybersecuritynews.com/gitlab-vulnerabilities-bypass-security-contro… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training" VG Bernd [0] https://thehackernews.com/2025/02/12000-api-keys-and-passwords-found-in.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems" VG Bernd [0] https://thehackernews.com/2025/02/new-linux-malware-auto-color-grants.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

IIS Crypto 4.0 Released
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "IIS Crypto 4.0 Released" --> Windows Server 2025 support --> HTTP/3 with QUIC [1] --> ... - Changelog siehe [2] VG Bernd [0] https://blog.nartac.com/2025/02/13/iis-crypto-4-0-released/ [1] https://www.nartac.com/Products/IISCrypto/FAQ/How-do-I-get-http3-quic-to-wo… [2] https://www.nartac.com/Products/IISCrypto/Download -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks
by Bernd Kohler 26 Feb '25

26 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks" VG Bernd [0] https://securityonline.info/grub2-bootloader-vulnerabilities-expose-million… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Exim Mail Transfer Agent Vulnerable to Remote SQL Injection (CVE-2025-26794), PoC Published
by Bernd Kohler 24 Feb '25

24 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Exim Mail Transfer Agent Vulnerable to Remote SQL Injection (CVE-2025-26794), PoC Published" VG Bernd [0] https://securityonline.info/exim-mail-transfer-agent-vulnerable-to-remote-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

adauth - Go library for active directory authentication
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "adauth" --> "... Go library for active directory authentication ..." VG Bernd [0] https://github.com/RedTeamPentesting/adauth -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

NSA FOXACID servers used to drive the hack into target systems
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NSA FOXACID servers used to drive the hack into target systems" VG Bernd [0] https://securityaffairs.com/18601/hacking/nsa-foxacid-servers.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

DeepSeek found to be sharing user data with TikTok parent company ByteDance
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DeepSeek found to be sharing user data with TikTok parent company ByteDance" VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/02/deepseek-found-to-be-sharing… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Postfix 3.10 MTA Arrives with OpenSSL 3.5 Support
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Postfix 3.10 MTA Arrives with OpenSSL 3.5 Support" --> "... OpenSSL 3.5 support, TLSRPT protocol, enhanced logging, and privacy improvements ..." VG Bernd [0] https://linuxiac.com/postfix-3-10-mta-arrives-with-openssl-3-5-support/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0