- rwth-security - lists.rwth-aachen.de

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability" --> "... allows an unauthorized attacker to execute code over a network ..." VG Bernd [0] https://thehackernews.com/2025/02/microsoft-patches-actively-exploited.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

DeepSeek’s Popularity Exploited! Malware Distributed via Phishing Websites
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DeepSeek’s Popularity Exploited! Malware Distributed via Phishing Websites" VG Bernd [0] https://www.criminalip.io/knowledge-hub/blog/25594 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

BSI Webinar: #nis2know - wissen, wie es weitergeht
by Bernd Kohler 19 Feb '25

19 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "#nis2know - wissen, wie es weitergeht" Anfang 18.03.2025 14:00 Uhr Ende 18.03.2025 15:00 Uhr Ort Online (GoTo Webinar) VG Bernd [0] https://www.bsi.bund.de/SharedDocs/Termine/DE/2025/nis-2-webinar_nach_der_b… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

BSI - Onlinetool "CYBERsicher Notfallhilfe"
by Bernd Kohler 19 Feb '25

19 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CYBERsicher Notfallhilfe" --> weitere Infos siehe [1] VG Bernd [0] https://notfallhilfe.transferstelle-cybersicherheit.de/ [1] https://www.bmwk.de/Redaktion/DE/Pressemitteilungen/2025/20250218-neue-cybe… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

keycred - handle Active DirectoryShadow Credentials/msDS-KeyCredentialLink
by Bernd Kohler 19 Feb '25

19 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "keycred" --> "A cross-platform tool for handling Active Directory Shadow Credentials/msDS-KeyCredentialLink" VG Bernd [0] https://github.com/RedTeamPentesting/keycred -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Chinese hackers abuse Microsoft APP-v tool to evade antivirus
by Bernd Kohler 19 Feb '25

19 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chinese hackers abuse Microsoft APP-v tool to evade antivirus" VG Bernd [0] https://www.bleepingcomputer.com/news/security/chinese-hackers-abuse-micros… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

OpenSSH Flaws CVE-2025-26465 & CVE-2025-26466 Expose Clients and Servers to Attacks
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenSSH Flaws CVE-2025-26465 & CVE-2025-26466 Expose Clients and Servers to Attacks" --> original Report [1] VG Bernd [0] https://securityonline.info/openssh-flaws-cve-2025-26465-cve-2025-26466-exp… [1] https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

VPS Security Audit Script
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VPS Security Audit Script" --> "... comprehensive Bash script for auditing the security and performance of your VPS (Virtual Private Server) ..." VG Bernd [0] https://github.com/vernu/vps-audit -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

LibreOffice Vulnerabilities (CVE-2024-12425 & CVE-2024-12426): PoCs Released, Patch ASAP
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LibreOffice Vulnerabilities (CVE-2024-12425 & CVE-2024-12426): PoCs Released, Patch ASAP" --> "... to version 24.8.4 or later ..." VG Bernd [0] https://securityonline.info/libreoffice-vulnerabilities-cve-2024-12425-cve-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Protecting Exchange Server with TLS 1.3
by Bernd Kohler 18 Feb '25

18 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Protecting Exchange Server with TLS 1.3" VG Bernd [0] https://practical365.com/protecting-exchange-server-with-tls-1-3/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0