- rwth-security - lists.rwth-aachen.de

Microsoft Threat Intelligence - key to securing Active Directory
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI key to securing Active Directory --> "Total Identity Compromise: Microsoft Incident Response lessons on securing Active Directory" [1] --> "Services Hub On-Demand Assessments - Health" [2] - Active Directory - Active Directory Operational Survey - Active Directory Security --> "adhardening" [3] VG Bernd [0] https://x.com/MsftSecIntel/status/1895534434037710921 [1] https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/total-ide… [2] https://learn.microsoft.com/en-us/services-hub/health/ [3] https://techcommunity.microsoft.com/tag/adhardening -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks" VG Bernd [0] https://securityonline.info/flaws-in-rancher-cve-2025-23388-cve-2025-23389-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Certificate Transparency in Firefox: A Big Step for Web Security
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency in Firefox: A Big Step for Web Security" VG Bernd [0] https://blog.transparency.dev/ct-in-firefox -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites" VG Bernd [0] https://thehackernews.com/2025/03/hackers-use-clickfix-trick-to-deploy.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Upgrade DKIM 1024-bit keys to 2048-bit keys in Microsoft 365
by Bernd Kohler 01 Mar '25

01 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Upgrade DKIM 1024-bit keys to 2048-bit keys in Microsoft 365" VG Bernd [0] https://www.alitajran.com/upgrade-dkim-1024-bit-keys-to-2048-bit-keys/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code" - CVE-2025-0475: "versions from 15.10 through 17.9.0" - CVE-2025-0555: "versions 16.6 through 17.9.0" --> "... patched versions 17.9.1, 17.8.4, and 17.7.6 ..." VG Bernd [0] https://cybersecuritynews.com/gitlab-vulnerabilities-bypass-security-contro… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training" VG Bernd [0] https://thehackernews.com/2025/02/12000-api-keys-and-passwords-found-in.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems" VG Bernd [0] https://thehackernews.com/2025/02/new-linux-malware-auto-color-grants.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

IIS Crypto 4.0 Released
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "IIS Crypto 4.0 Released" --> Windows Server 2025 support --> HTTP/3 with QUIC [1] --> ... - Changelog siehe [2] VG Bernd [0] https://blog.nartac.com/2025/02/13/iis-crypto-4-0-released/ [1] https://www.nartac.com/Products/IISCrypto/FAQ/How-do-I-get-http3-quic-to-wo… [2] https://www.nartac.com/Products/IISCrypto/Download -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks
by Bernd Kohler 26 Feb '25

26 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks" VG Bernd [0] https://securityonline.info/grub2-bootloader-vulnerabilities-expose-million… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0