February 2025 - rwth-security - lists.rwth-aachen.de

New FinalDraft malware abuses Outlook mail service for stealthy comms
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New FinalDraft malware abuses Outlook mail service for stealthy comms" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-finaldraft-malware-abuse… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks" VG Bernd [0] https://securityonline.info/cve-2022-31631-cvss-9-1-critical-php-flaw-expos… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts" VG Bernd [0] https://hackread.com/astaroth-phishing-kit-bypasses-2fa-hijack-gmail-micros… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)" VG Bernd [0] https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-postgresql-psql-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux" VG Bernd [0] https://thehackernews.com/2025/02/finaldraft-malware-exploits-microsoft.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-24016 (CVSS 9.9): Critical RCE Vulnerability Discovered in Wazuh Server
by Bernd Kohler 12 Feb '25

12 Feb '25

allo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-24016 (CVSS 9.9): Critical RCE Vulnerability Discovered in Wazuh Server" VG Bernd [0] https://securityonline.info/cve-2025-24016-cvss-9-9-critical-rce-vulnerabil… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Being Overlord on the Steam Deck with 1 Byte
by Bernd Kohler 12 Feb '25

12 Feb '25

allo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "lord on the Steam Deck with 1 Byte" --> "... Involves a couple of vulnerabilities, limited primitives, challenging exploitation ..." VG Bernd [0] https://blog.quarkslab.com/being-overlord-on-the-steam-deck-with-1-byte.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft Patches ‘Wormable’ Windows Flaw and File-Deleting Zero-Day
by Bernd Kohler 12 Feb '25

12 Feb '25

allo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Patches ‘Wormable’ Windows Flaw and File-Deleting Zero-Day" --> Patchday ;) VG Bernd [0] https://www.securityweek.com/microsoft-patches-wormable-windows-flaw-and-fi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-12797 - High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks
by Bernd Kohler 12 Feb '25

12 Feb '25

allo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks" --> siehe dazu auch u.a. [1] VG Bernd [0] https://www.securityweek.com/high-severity-openssl-vulnerability-found-by-a… [1] https://securityonline.info/cve-2024-12797-high-severity-openssl-flaw-updat… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks
by Bernd Kohler 11 Feb '25

11 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks" VG Bernd [0] https://thehackernews.com/2025/02/gcore-ddos-radar-reveals-56-yoy.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0