February 2025 - rwth-security - lists.rwth-aachen.de

Chinese hackers abuse Microsoft APP-v tool to evade antivirus
by Bernd Kohler 19 Feb '25

19 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chinese hackers abuse Microsoft APP-v tool to evade antivirus" VG Bernd [0] https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-micros… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

OpenSSH Flaws CVE-2025-26465 & CVE-2025-26466 Expose Clients and Servers to Attacks
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenSSH Flaws CVE-2025-26465 & CVE-2025-26466 Expose Clients and Servers to Attacks" --> original Report [1] VG Bernd [0] https://securityonline.info/openssh-flaws-cve-2025-26465-cve-2025-26466-exp… [1] https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

VPS Security Audit Script
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VPS Security Audit Script" --> "... comprehensive Bash script for auditing the security and performance of your VPS (Virtual Private Server) ..." VG Bernd [0] https://github.com/vernu/vps-audit -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

LibreOffice Vulnerabilities (CVE-2024-12425 & CVE-2024-12426): PoCs Released, Patch ASAP
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LibreOffice Vulnerabilities (CVE-2024-12425 & CVE-2024-12426): PoCs Released, Patch ASAP" --> "... to version 24.8.4 or later ..." VG Bernd [0] https://securityonline.info/libreoffice-vulnerabilities-cve-2024-12425-cve-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Protecting Exchange Server with TLS 1.3
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Protecting Exchange Server with TLS 1.3" VG Bernd [0] https://practical365.com/protecting-exchange-server-with-tls-1-3/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Massive IoT Data Breach Exposes 2.7 Billion Records, Including Wi-Fi Passwords
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Massive IoT Data Breach Exposes 2.7 Billion Records, Including Wi-Fi Passwords" "... Mars Hydro’s Mars Pro app, used to control IoT grow lights and climate systems, reportedly collected this data despite its privacy policy claiming no user data collection. ..." VG Bernd [0] https://cybersecuritynews.com/massive-iot-data-breach/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Storm-2372 conducts device code phishing campaign
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Storm-2372 conducts device code phishing campaign" VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conduct… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Windows Zero-Day Exploited by Chinese APT: Security Firm
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows Zero-Day Exploited by Chinese APT: Security Firm" VG Bernd [0] https://www.securityweek.com/new-windows-zero-day-exploited-by-chinese-apt-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Chrome's AI-powered security feature rolls out to everyone
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Chrome's AI-powered security feature rolls out to everyone" VG Bernd [0] https://www.bleepingcomputer.com/news/google/google-chromes-ai-powered-secu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Astaroth Phishing Kit Bypasses 2FA, Steals Accounts" VG Bernd [0] https://securityonline.info/astaroth-phishing-kit-bypasses-2fa-steals-accou… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0