- rwth-security - lists.rwth-aachen.de

McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’
by Bernd Kohler 11 Jul '25

11 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’" VG Bernd [0] https://www.wired.com/story/mcdonalds-ai-hiring-chat-bot-paradoxai/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PerfektBlue Bluetooth flaws impact Mercedes, Volkswagen, Skoda cars" VG Bernd [0] https://www.bleepingcomputer.com/news/security/perfektblue-bluetooth-flaws-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft confirms Windows Server Update Services (WSUS) sync is broken
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft confirms Windows Server Update Services (WSUS) sync is broken" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-windows-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft confirms Windows Server Update Services (WSUS) sync is broken
by Bernd Kohler 10 Jul '25

10 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft confirms Windows Server Update Services (WSUS) sync is broken" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-windows-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Atomic macOS infostealer adds backdoor for persistent attacks
by Bernd Kohler 08 Jul '25

08 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Atomic macOS infostealer adds backdoor for persistent attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/atomic-macos-infostealer-add… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Redis DoS Flaw (CVE-2025-48367): Authenticated Clients Can Disrupt Service
by Bernd Kohler 07 Jul '25

07 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Redis DoS Flaw (CVE-2025-48367): Authenticated Clients Can Disrupt Service" --> "... patches have been issued for four active release branches ..." 8.0.3 7.4.5 7.2.10 6.2.19 VG Bernd [0] https://securityonline.info/redis-dos-flaw-cve-2025-48367-authenticated-cli… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Apple - Prepare your network for quantum-secure encryption in TLS
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Prepare your network for quantum-secure encryption in TLS" --> "... In iOS 26, iPadOS 26, macOS Tahoe 26 and visionOS 26, TLS-protected connections will automatically advertise support for hybrid, quantum-secure key exchange in TLS 1.3 ..." VG Bernd [0] https://support.apple.com/en-gb/122756 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

dpkg-deb Flaw Opens Path to Disk Exhaustion Denial-of-Service on Debian Systems
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "dpkg-deb Flaw Opens Path to Disk Exhaustion Denial-of-Service on Debian Systems" VG Bernd [0] https://securityonline.info/dpkg-deb-flaw-opens-path-to-disk-exhaustion-den… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed" --> siehe dazu auch [1] VG Bernd [0] https://securityonline.info/good-news-lets-encrypt-begins-testing-ip-only-c… [1] https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 1

Urgent: Linux kernel flaw allows remote crash (NFS servers via a NULL pointer dereference), PoC available
by Bernd Kohler 03 Jul '25

03 Jul '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Urgent: Linux kernel flaw allows remote crash, PoC available" VG Bernd [0] https://securityonline.info/urgent-linux-kernel-flaw-allows-remote-crash-po… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0