March 2025 - rwth-security - lists.rwth-aachen.de

Microsoft - StilachiRAT analysis: From system reconnaissance to cryptocurrency theft
by Bernd Kohler 18 Mar '25

18 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "StilachiRAT analysis: From system reconnaissance to cryptocurrency theft" VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analys… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Privacy-Preserving Large Language Model Inference,via GPU-Accelerated Fully Homomorphic Encryption
by Bernd Kohler 18 Mar '25

18 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Privacy-Preserving Large Language Model Inference,via GPU-Accelerated Fully Homomorphic Encryption" VG Bernd [0] https://openreview.net/pdf?id=Rs7h1od6ov -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-27564: Attackers Exploit OpenAI Vulnerability in the Wild
by Bernd Kohler 18 Mar '25

18 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-27564: Attackers Exploit OpenAI Vulnerability in the Wild" VG Bernd [0] https://securityonline.info/cve-2024-27564-attackers-exploit-openai-vulnera… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories
by Bernd Kohler 17 Mar '25

17 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories" VG Bernd [0] https://thehackernews.com/2025/03/github-action-compromise-puts-cicd.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-24016: Unsafe Deserialization Vulnerability in Wazuh Leading to Remote Code Execution
by Bernd Kohler 17 Mar '25

17 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-24016: Unsafe Deserialization Vulnerability in Wazuh Leading to Remote Code Execution" VG Bernd [0] https://cvereports.com/cve-2025-24016-unsafe-deserialization-vulnerability-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Critical RCE flaw in Apache Tomcat actively exploited in attacks
by Bernd Kohler 17 Mar '25

17 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical RCE flaw in Apache Tomcat actively exploited in attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/critical-rce-flaw-in-apache-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”
by Bernd Kohler 13 Mar '25

13 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI 'Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”' --> "... update is available for: iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later. ..." VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/03/update-your-iphone-now-apple… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GitLab Urgently Patches Critical Authentication Bypass Flaws – CVE-2025-25291 & CVE-2025-25292
by Bernd Kohler 13 Mar '25

13 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitLab Urgently Patches Critical Authentication Bypass Flaws – CVE-2025-25291 & CVE-2025-25292" --> "... new versions 17.9.2, 17.8.5, and 17.7.7 ..." VG Bernd [0] https://securityonline.info/gitlab-urgently-patches-critical-authentication… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

BSI - Analyse der Zufallszahlenerzeugung in Browsern
by Bernd Kohler 12 Mar '25

12 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Analyse der Zufallszahlenerzeugung in Browsern" --> zum PDF [1] VG Bernd [0] https://www.bsi.bund.de/DE/Service-Navi/Publikationen/Studien/Zufallszahlen… [1] https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Publications/Studies/Zu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mozilla warns users to update Firefox before certificate expires
by Bernd Kohler 12 Mar '25

12 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mozilla warns users to update Firefox before certificate expires" VG Bernd [0] https://www.bleepingcomputer.com/news/software/mozilla-warns-users-to-updat… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0