April 2025 - rwth-security - lists.rwth-aachen.de

Grafana Patches CVE-2025-3260 and More in Critical Security Update
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Grafana Patches CVE-2025-3260 and More in Critical Security Update" VG Bernd [0] https://securityonline.info/grafana-patches-cve-2025-3260-and-more-in-criti… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Redis Vulnerability Exposes Servers to Denial-of-Service Attacks" --> Gepatched mit folgenden Versionen 6.2.18 7.2.8 7.4.3 VG Bernd [0] https://securityonline.info/redis-vulnerability-exposes-servers-to-denial-o… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Phishing detection is broken: Why most attacks feel like a zero day
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phishing detection is broken: Why most attacks feel like a zero day" VG Bernd [0] https://www.bleepingcomputer.com/news/security/phishing-detection-is-broken… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp" VG Bernd [0] https://thehackernews.com/2025/04/russian-hackers-exploit-microsoft-oauth.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Upgrade Ubuntu 20.04 LTS to 24.04 LTS Before EOL in May 2025
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Upgrade Ubuntu 20.04 LTS to 24.04 LTS Before EOL in May 2025" VG Bernd [0] https://www.tecmint.com/upgrade-ubuntu-20-04-to-24-04/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Cookie-Bite attack PoC uses Chrome extension to steal session tokens
by Bernd Kohler 22 Apr '25

22 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cookie-Bite attack PoC uses Chrome extension to steal session tokens" - proof-of-concept (!) attack called "Cookie-Bite" - steal browser session cookies from Azure Entra ID to bypass multi-factor authentication (MFA) protections and maintain access to cloud services like Microsoft 365, Outlook, and Teams. - siehe dazu auch [1] VG Bernd [0] https://www.bleepingcomputer.com/news/security/cookie-bite-attack-poc-uses-… [1] https://www.varonis.com/blog/cookie-bite -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials
by Bernd Kohler 22 Apr '25

22 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials" VG Bernd [0] https://thehackernews.com/2025/04/phishers-exploit-google-sites-and-dkim.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Gorilla Android Malware: Evolving Threat with Espionage Capabilities
by Bernd Kohler 19 Apr '25

19 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Gorilla Android Malware: Evolving Threat with Espionage Capabilities" VG Bernd [0] https://securityonline.info/gorilla-android-malware-evolving-threat-with-es… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Prepping for post-quantum: a beginner’s guide to lattice cryptography
by Bernd Kohler 16 Apr '25

16 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Prepping for post-quantum: a beginner’s guide to lattice cryptography" VG Bernd [0] https://blog.cloudflare.com/lattice-crypto-primer/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Linux Detection Engineering
by Bernd Kohler 16 Apr '25

16 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier FYI "Linux Detection Engineering " - A primer on persistence mechanisms - [0] - A Sequel on Persistence Mechanisms - [1] - A Continuation on Persistence Mechanisms - [2] - Approaching the Summit on Persistence Mechanisms - [3] - The Grand Finale on Linux Persistence - [4] VG Bernd [0] https://www.elastic.co/security-labs/primer-on-persistence-mechanisms [1] https://www.elastic.co/security-labs/sequel-on-persistence-mechanisms [2] https://www.elastic.co/security-labs/continuation-on-persistence-mechanisms [3] https://www.elastic.co/security-labs/approaching-the-summit-on-persistence [4] https://www.elastic.co/security-labs/the-grand-finale-on-linux-persistence -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0