- rwth-security - lists.rwth-aachen.de

OWASP OFFAT (OFFensive Api Tester)
by Bernd Kohler 06 Jan '25

06 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OWASP OFFAT" VG Bernd [0] https://github.com/OWASP/OFFAT -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CAPTCHAs now run Doom – on nightmare mode
by Bernd Kohler 03 Jan '25

03 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CAPTCHAs now run Doom – on nightmare mode" --> "... requires the user to kill three monsters in Doom – on nightmare mode ..." VG Bernd [0] https://www.theregister.com/2025/01/03/captcha_doom_nightmare/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
by Bernd Kohler 03 Jan '25

03 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers" VG Bernd [0] https://thehackernews.com/2025/01/ldapnightmare-poc-exploit-crashes-lsass.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Investigating a SharePoint Compromise: IR Tales from the Field
by Bernd Kohler 02 Jan '25

02 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Investigating a SharePoint Compromise: IR Tales from the Field" VG Bernd [0] https://www.rapid7.com/blog/post/2024/10/30/investigating-a-sharepoint-comp… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New details reveal how hackers hijacked 35 Google Chrome extensions
by Bernd Kohler 02 Jan '25

02 Jan '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New details reveal how hackers hijacked 35 Google Chrome extensions" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-details-reveal-how-hacke… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Let's Encrypt - Intent to End OCSP Service
by Bernd Kohler 30 Dec '24

30 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intent to End OCSP Service" --> "... our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible ..." --> "... As soon as the Microsoft Root Program also makes OCSP o ptional, which we are optimistic will happen within the next six to twelve months, Let’s Encrypt intends to announce a specific and rapid timeline for shutting down our OCSP services. ..." --> kein OSCP stapling? VG Bernd [0] https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Microsoft issues urgent dev warning to update .NET installer link
by Bernd Kohler 30 Dec '24

30 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft issues urgent dev warning to update .NET installer link" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-issues-urgent-dev… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Study Finds AI Can Guess Crypto Seed Phrases in 0.02 Seconds
by Bernd Kohler 30 Dec '24

30 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Study Finds AI Can Guess Crypto Seed Phrases in 0.02 Seconds" VG Bernd [0] https://hackread.com/study-ai-guess-crypto-seed-phrases-in-seconds/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-40896 (CVSS 9.1): Critical XXE Vulnerability Discovered in libxml2
by Bernd Kohler 27 Dec '24

27 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-40896 (CVSS 9.1): Critical XXE Vulnerability Discovered in libxml2" VG Bernd [0] https://securityonline.info/cve-2024-40896-cvss-9-1-critical-xxe-vulnerabil… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows 11 installation media bug causes security update failures
by Bernd Kohler 27 Dec '24

27 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows 11 installation media bug causes security update failures" VG Bernd [0] https://www.bleepingcomputer.com/news/security/windows-11-installation-medi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0