- rwth-security - lists.rwth-aachen.de

Massive IoT Data Breach Exposes 2.7 Billion Records, Including Wi-Fi Passwords
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Massive IoT Data Breach Exposes 2.7 Billion Records, Including Wi-Fi Passwords" "... Mars Hydro’s Mars Pro app, used to control IoT grow lights and climate systems, reportedly collected this data despite its privacy policy claiming no user data collection. ..." VG Bernd [0] https://cybersecuritynews.com/massive-iot-data-breach/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Storm-2372 conducts device code phishing campaign
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Storm-2372 conducts device code phishing campaign" VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2025/02/13/storm-2372-conduct… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Windows Zero-Day Exploited by Chinese APT: Security Firm
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows Zero-Day Exploited by Chinese APT: Security Firm" VG Bernd [0] https://www.securityweek.com/new-windows-zero-day-exploited-by-chinese-apt-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Chrome's AI-powered security feature rolls out to everyone
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Chrome's AI-powered security feature rolls out to everyone" VG Bernd [0] https://www.bleepingcomputer.com/news/google/google-chromes-ai-powered-secu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Astaroth Phishing Kit Bypasses 2FA, Steals Accounts
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Astaroth Phishing Kit Bypasses 2FA, Steals Accounts" VG Bernd [0] https://securityonline.info/astaroth-phishing-kit-bypasses-2fa-steals-accou… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New FinalDraft malware abuses Outlook mail service for stealthy comms
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New FinalDraft malware abuses Outlook mail service for stealthy comms" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-finaldraft-malware-abuse… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks
by Bernd Kohler 17 Feb '25

17 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2022-31631 (CVSS 9.1): Critical PHP Flaw Exposes Websites to SQL Injection Attacks" VG Bernd [0] https://securityonline.info/cve-2022-31631-cvss-9-1-critical-php-flaw-expos… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Astaroth Phishing Kit Bypasses 2FA to Hijack Gmail and Microsoft Accounts" VG Bernd [0] https://hackread.com/astaroth-phishing-kit-bypasses-2fa-hijack-gmail-micros… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-1094: PostgreSQL psql SQL injection (FIXED)" VG Bernd [0] https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-postgresql-psql-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux
by Bernd Kohler 13 Feb '25

13 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux" VG Bernd [0] https://thehackernews.com/2025/02/finaldraft-malware-exploits-microsoft.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0