- rwth-security - lists.rwth-aachen.de

CVE-2024-11274: GitLab Vulnerability Exposes User Accounts
by Bernd Kohler 12 Dec '24

12 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-11274: GitLab Vulnerability Exposes User Accounts" VG Bernd [0] https://securityonline.info/cve-2024-11274-gitlab-vulnerability-exposes-use… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Forscher knacken Microsofts Multi-Faktor-Authentifizierung
by Bernd Kohler 12 Dec '24

12 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Forscher knacken Microsofts Multi-Faktor-Authentifizierung" VG Bernd [0] https://www.golem.de/news/per-brute-force-forscher-knacken-microsofts-multi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Russia takes unusual route to hack Starlink-connected devices in Ukraine
by Bernd Kohler 12 Dec '24

12 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Russia takes unusual route to hack Starlink-connected devices in Ukraine" VG Bernd [0] https://arstechnica.com/security/2024/12/russia-takes-unusual-route-to-hack… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

DarkFlare - TCP-over-CDN Tunnel
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DarkFlare - TCP-over-CDN Tunnel" VG Bernd [0] https://github.com/doxx/darkflare -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Chinese hackers use Visual Studio Code tunnels for remote access
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chinese hackers use Visual Studio Code tunnels for remote access" VG Bernd [0] https://www.bleepingcomputer.com/news/security/chinese-hackers-use-visual-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers Can Hijack Your Terminal Via Prompt Injection using LLM-powered Apps
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Can Hijack Your Terminal Via Prompt Injection using LLM-powered Apps" VG Bernd [0] https://gbhackers.com/hijack-your-terminal-via-prompt-injection-using-llm-p… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OpenWrt Sysupgrade flaw let hackers push malicious firmware images
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenWrt Sysupgrade flaw let hackers push malicious firmware images" VG Bernd [0] https://www.bleepingcomputer.com/news/security/openwrt-sysupgrade-flaw-let-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published
by Bernd Kohler 10 Dec '24

10 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published" VG Bernd [0] https://securityonline.info/windows-zero-day-vulnerability-cve-2024-38193-e… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Open Sources Security Patch Validation Tool for Android
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Open Sources Security Patch Validation Tool for Android" VG Bernd [0] https://www.securityweek.com/google-open-sources-security-patch-validation-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Windows zero-day exposes NTLM credentials, gets unofficial patch
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows zero-day exposes NTLM credentials, gets unofficial patch" --> "... impacts all Windows versions from Windows 7 and Server 2008 R2 up to the latest Windows 11 24H2 and Server 202 ..." --> '... “We are investigating this report and will take action as needed to help keep customers protected.” - a Microsoft spokesperson' VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-windows-zero-day-exposes… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0