July 2025 - rwth-security - lists.rwth-aachen.de

Critical Flaws Expose eSIMs to Cloning and Mass Surveillance Threatening Global Mobile Security
by Bernd Kohler 14 Jul '25

14 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical Flaws Expose eSIMs to Cloning and Mass Surveillance, Threatening Global Mobile Security" --> siehe dazu auch [1] --> "... first gain physical access to a target eUICC and use publicly known keys, ..." VG Bernd [0] https://meterpreter.org/critical-flaws-expose-esims-to-cloning-and-mass-sur… [1] https://thehackernews.com/2025/07/esim-vulnerability-in-kigens-euicc.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Chasing Ghosts Over RDP: Lateral Movement in Tiny Bitmaps
by Bernd Kohler 14 Jul '25

14 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chasing Ghosts Over RDP: Lateral Movement in Tiny Bitmaps" VG Bernd [0] https://medium.com/@mathias.fuchs/chasing-ghosts-over-rdp-lateral-movement-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’
by Bernd Kohler 11 Jul '25

11 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’" VG Bernd [0] https://www.wired.com/story/mcdonalds-ai-hiring-chat-bot-paradoxai/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars" VG Bernd [0] https://www.bleepingcomputer.com/news/security/perfektblue-bluetooth-flaws-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft confirms Windows Server Update Services (WSUS) sync is broken
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft confirms Windows Server Update Services (WSUS) sync is broken" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-windows-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft confirms Windows Server Update Services (WSUS) sync is broken
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft confirms Windows Server Update Services (WSUS) sync is broken" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-windows-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Atomic macOS infostealer adds backdoor for persistent attacks
by Bernd Kohler 08 Jul '25

08 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Atomic macOS infostealer adds backdoor for persistent attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/atomic-macos-infostealer-add… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Redis DoS Flaw (CVE-2025-48367): Authenticated Clients Can Disrupt Service
by Bernd Kohler 07 Jul '25

07 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Redis DoS Flaw (CVE-2025-48367): Authenticated Clients Can Disrupt Service" --> "... patches have been issued for four active release branches ..." 8.0.3 7.4.5 7.2.10 6.2.19 VG Bernd [0] https://securityonline.info/redis-dos-flaw-cve-2025-48367-authenticated-cli… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Apple - Prepare your network for quantum-secure encryption in TLS
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Prepare your network for quantum-secure encryption in TLS" --> "... In iOS 26, iPadOS 26, macOS Tahoe 26 and visionOS 26, TLS-protected connections will automatically advertise support for hybrid, quantum-secure key exchange in TLS 1.3 ..." VG Bernd [0] https://support.apple.com/en-gb/122756 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

dpkg-deb Flaw Opens Path to Disk Exhaustion Denial-of-Service on Debian Systems
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "dpkg-deb Flaw Opens Path to Disk Exhaustion Denial-of-Service on Debian Systems" VG Bernd [0] https://securityonline.info/dpkg-deb-flaw-opens-path-to-disk-exhaustion-den… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0