- rwth-security - lists.rwth-aachen.de

Stealth in 100 Lines: Analyzing PAM Backdoors in Linux
by Bernd Kohler 04 Jun '25

04 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Stealth in 100 Lines: Analyzing PAM Backdoors in Linux" VG Bernd [0] https://www.nextron-systems.com/2025/05/30/stealth-in-100-lines-analyzing-p… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

The Ultimate Guide to Windows Coercion Techniques in 2025
by Bernd Kohler 04 Jun '25

04 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The Ultimate Guide to Windows Coercion Techniques in 2025" --> siehe dazu auch [1] oder [2] oder [3] VG Bernd [0] https://blog.redteam-pentesting.de/2025/windows-coercion/ [1] https://x.com/RedTeamPT/status/1930170345090130241 [2] https://mastodon.social/@RedTeamPentesting/114624045457673100 [3] https://bsky.app/profile/redteam-pentesting.de/post/3lqrdg7ajbs2k -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code" VG Bernd [0] https://thehackernews.com/2025/06/critical-10-year-old-roundcube-webmail.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

UK pioneering global move away from passwords
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "UK pioneering global move away from passwords" --> passkey VG Bernd [0] https://www.ncsc.gov.uk/news/government-adopt-passkey-technology-digital-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

EDDIESTEALER Unleashed: Unmasking Sophisticated Social Engineering & Browser Evasion
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EDDIESTEALER Unleashed: Unmasking Sophisticated Social Engineering & Browser Evasion" VG Bernd [0] https://securityexpress.info/eddiestealer-unleashed-unmasking-sophisticated… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues
by Bernd Kohler 03 Jun '25

03 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues" --> "... will no longer trust digital certificates issued by Chunghwa Telecom and Netlock ..." VG Bernd [0] https://thehackernews.com/2025/06/google-chrome-to-distrust-two.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

ModSecurity DoS vulnerability CVE 2025-48866
by Bernd Kohler 02 Jun '25

02 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE 2025-48866" --> DoS vulnerability gefixt mit Version 2.9.10 VG Bernd [0] https://github.com/owasp-modsecurity/ModSecurity/releases/tag/v2.9.10 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access — Even When Uploading Just One File
by Bernd Kohler 28 May '25

28 May '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access — Even When Uploading Just One File" VG Bernd [0] https://thehackernews.com/2025/05/microsoft-onedrive-file-picker-flaw.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mandiant finds more than 30 fake AI websites spreading malware
by Bernd Kohler 28 May '25

28 May '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mandiant finds more than 30 fake AI websites spreading malware" VG Bernd [0] https://www.scworld.com/news/mandiant-finds-more-than-30-fake-ai-websites-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

BSI - Upgrade für die E-Mail-Sicherheit
by Bernd Kohler 27 May '25

27 May '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Upgrade für die E-Mail-Sicherheit" --> "Handlungsempfehlungen für moderne E-Mail-Infrastrukturen ..." VG Bernd [0] https://www.allianz-fuer-cybersicherheit.de/SharedDocs/Downloads/Webs/ACS/D… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0