March 2025 - rwth-security - lists.rwth-aachen.de

Using RDP without leaving traces: the MSTSC public mode
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Using RDP without leaving traces: the MSTSC public mode" VG Bernd [0] https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-m… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana" VG Bernd [0] https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Zen and the Art of Microcode Hacking - CVE-2024-55161 (AMD-SB-3019)
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zen and the Art of Microcode Hacking" VG Bernd [0] https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-micr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Detecting Hotkey- Based Keyloggers Using an Undocumented Kernel Data Structure
by Bernd Kohler 05 Mar '25

05 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Detecting Hotkey- Based Keyloggers Using an Undocumented Kernel Data Structure" VG Bernd [0] https://www.elastic.co/security-labs/detecting-hotkey-based-keyloggers -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

How Google tracks Android device users before they've even opened an app
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "How Google tracks Android device users before they've even opened an app" VG Bernd [0] https://www.theregister.com/2025/03/04/google_android/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

JavaGhost’s Persistent Phishing Attacks From the Cloud
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "JavaGhost’s Persistent Phishing Attacks From the Cloud" VG Bernd [0] https://unit42.paloaltonetworks.com/javaghost-cloud-phishing/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited" --> siehe dazu auch [1] --> "... Broadcom has explicitly stated that no workarounds exist for these vulnerabilities. Users and organizations must apply the necessary patches as soon as possible ..." VG Bernd [0] https://securityonline.info/cve-2025-22224-cve-2025-22225-cve-2025-22226-cr… [1] https://support.broadcom.com/web/ecx/support-content-notification/-/externa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft Threat Intelligence - key to securing Active Directory
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI key to securing Active Directory --> "Total Identity Compromise: Microsoft Incident Response lessons on securing Active Directory" [1] --> "Services Hub On-Demand Assessments - Health" [2] - Active Directory - Active Directory Operational Survey - Active Directory Security --> "adhardening" [3] VG Bernd [0] https://x.com/MsftSecIntel/status/1895534434037710921 [1] https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/total-ide… [2] https://learn.microsoft.com/en-us/services-hub/health/ [3] https://techcommunity.microsoft.com/tag/adhardening -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks" VG Bernd [0] https://securityonline.info/flaws-in-rancher-cve-2025-23388-cve-2025-23389-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Certificate Transparency in Firefox: A Big Step for Web Security
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency in Firefox: A Big Step for Web Security" VG Bernd [0] https://blog.transparency.dev/ct-in-firefox -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0