July 2025 - rwth-security - lists.rwth-aachen.de

Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed" --> siehe dazu auch [1] VG Bernd [0] https://securityonline.info/good-news-lets-encrypt-begins-testing-ip-only-c… [1] https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 1

Urgent: Linux kernel flaw allows remote crash (NFS servers via a NULL pointer dereference), PoC available
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Urgent: Linux kernel flaw allows remote crash, PoC available" VG Bernd [0] https://securityonline.info/urgent-linux-kernel-flaw-allows-remote-crash-po… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft: DNS issue blocks delivery of Exchange Online OTP codes
by Bernd Kohler 02 Jul '25

02 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft: DNS issue blocks delivery of Exchange Online OTP codes" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-links-dns-issue-t… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft Authenticator Ends Password Support: Full Phase-Out by August 1, 2025
by Bernd Kohler 02 Jul '25

02 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Authenticator Ends Password Support: Full Phase-Out by August 1, 2025" --> "... Passkey, Windows Hello, and FIDO2-based authentication methods ..." --> ... autofill functionality within Authenticator will cease operation in July 2025. Starting in August of the same year, users will no longer have access to passwords previously stored in the app. Furthermore, the ability to add or import new credentials was disabled as of June 2025, though autofill remains operational until the final phase-out. ..." --> "Passwords will remain synchronized with the user’s Microsoft account and accessible via the Edge browser—provided it is selected as the default autofill tool. --> "Additionally, any newly created but unsaved passwords will be automatically deleted after August 2025." VG Bernd [0] https://meterpreter.org/microsoft-authenticator-ends-password-support-full-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

EU Commission - A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography
by Bernd Kohler 02 Jul '25

02 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "A Coordinated Implementation Roadmap for the Transition to Post-Quantum Cryptography" VG Bernd [0] https://digital-strategy.ec.europa.eu/en/library/coordinated-implementation… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

modsecurity - DoS vulnerability: CVE-2025-52891 - 2025 July
by Bernd Kohler 02 Jul '25

02 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DoS vulnerability: CVE-2025-52891 - 2025 July" --> "mod_security2, and only versions 2.9.8, 2.9.9 and 2.9.10" --> "does not affect libmodsecurity3" VG Bernd [0] https://modsecurity.org/20250701/dos-vulnerability-cve-2025-52891-2025-july/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Linux Sudo chroot Vulnerability Enables Hackers to Elevate Privileges to Root
by Bernd Kohler 01 Jul '25

01 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Linux Sudo chroot Vulnerability Enables Hackers to Elevate Privileges to Root" --> Updates sind bereits verfügbar VG Bernd [0] https://cybersecuritynews.com/linux-sudo-chroot-vulnerability/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0