- rwth-security - lists.rwth-aachen.de

CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately
by Bernd Kohler 11 Mar '25

11 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-24813 Flaw in Apache Tomcat Exposes Servers to RCE, Data Leaks: Update Immediately" VG Bernd [0] https://securityonline.info/cve-2025-24813-flaw-in-apache-tomcat-exposes-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Mass Exploitation of Critical PHP Vulnerability Begins
by Bernd Kohler 10 Mar '25

10 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mass Exploitation of Critical PHP Vulnerability Begins" VG Bernd [0] https://www.securityweek.com/mass-exploitation-of-critical-php-vulnerabilit… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Ransomware gang encrypted network from a webcam to bypass EDR
by Bernd Kohler 07 Mar '25

07 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Ransomware gang encrypted network from a webcam to bypass EDR" VG Bernd [0] https://www.bleepingcomputer.com/news/security/akira-ransomware-encrypted-n… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Using RDP without leaving traces: the MSTSC public mode
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Using RDP without leaving traces: the MSTSC public mode" VG Bernd [0] https://blog.devolutions.net/2025/03/using-rdp-without-leaving-traces-the-m… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-25012 (CVSS 9.9): Critical Code Execution Vulnerability Patched in Elastic Kibana" VG Bernd [0] https://securityonline.info/cve-2025-25012-cvss-9-9-critical-code-execution… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Zen and the Art of Microcode Hacking - CVE-2024-55161 (AMD-SB-3019)
by Bernd Kohler 06 Mar '25

06 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zen and the Art of Microcode Hacking" VG Bernd [0] https://bughunters.google.com/blog/5424842357473280/zen-and-the-art-of-micr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Detecting Hotkey- Based Keyloggers Using an Undocumented Kernel Data Structure
by Bernd Kohler 05 Mar '25

05 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Detecting Hotkey- Based Keyloggers Using an Undocumented Kernel Data Structure" VG Bernd [0] https://www.elastic.co/security-labs/detecting-hotkey-based-keyloggers -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

How Google tracks Android device users before they've even opened an app
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "How Google tracks Android device users before they've even opened an app" VG Bernd [0] https://www.theregister.com/2025/03/04/google_android/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

JavaGhost’s Persistent Phishing Attacks From the Cloud
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "JavaGhost’s Persistent Phishing Attacks From the Cloud" VG Bernd [0] https://unit42.paloaltonetworks.com/javaghost-cloud-phishing/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited" --> siehe dazu auch [1] --> "... Broadcom has explicitly stated that no workarounds exist for these vulnerabilities. Users and organizations must apply the necessary patches as soon as possible ..." VG Bernd [0] https://securityonline.info/cve-2025-22224-cve-2025-22225-cve-2025-22226-cr… [1] https://support.broadcom.com/web/ecx/support-content-notification/-/externa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0