June 2025 - rwth-security - lists.rwth-aachen.de

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code" VG Bernd [0] https://thehackernews.com/2025/06/critical-10-year-old-roundcube-webmail.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

UK pioneering global move away from passwords
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "UK pioneering global move away from passwords" --> passkey VG Bernd [0] https://www.ncsc.gov.uk/news/government-adopt-passkey-technology-digital-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

EDDIESTEALER Unleashed: Unmasking Sophisticated Social Engineering & Browser Evasion
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EDDIESTEALER Unleashed: Unmasking Sophisticated Social Engineering & Browser Evasion" VG Bernd [0] https://securityexpress.info/eddiestealer-unleashed-unmasking-sophisticated… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues" --> "... will no longer trust digital certificates issued by Chunghwa Telecom and Netlock ..." VG Bernd [0] https://thehackernews.com/2025/06/google-chrome-to-distrust-two.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

ModSecurity DoS vulnerability CVE 2025-48866
by Bernd Kohler 02 Jun '25

02 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE 2025-48866" --> DoS vulnerability gefixt mit Version 2.9.10 VG Bernd [0] https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.10 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0