- rwth-security - lists.rwth-aachen.de

Windows infected with backdoored Linux VMs in new phishing attacks
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows infected with backdoored Linux VMs in new phishing attacks" --> "CRON#TRAP" VG Bernd [0] https://www.bleepingcomputer.com/news/security/windows-infected-with-backdo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Post Quantum Cryptography in a Browser
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Post Quantum Cryptography in a Browser" --> "... we need to move away from ECDH (Elliptic Curve Diffie Hellman) for key exchange and move towards using ML-KEM (aka Kyber) for a key encapsulation method (KEM) ..." --> siehe dazu auch [1] "Chrome switching to NIST-approved ML-KEM quantum encryption" [2] "The state of the post-quantum Internet" [3] "Enable Post Quantum Cryptography Support in Web Browsers" [4] "Is it quantum safe?" (Browser-Test) [5] Details zu TLS/KEM VG Bernd [0] https://billatnapier.medium.com/post-quantum-cryptography-in-a-browser-6112… [1] https://www.bleepingcomputer.com/news/security/chrome-switching-to-nist-app… [2] https://blog.cloudflare.com/de-de/pq-2024/ [3] https://evertrust.io/education/enable-post-quantum-cryptography-support-in-… [4] https://isitquantumsafe.info/ [5] https://crypto.cloudflare.com/cdn-cgi/trace -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hacker klauen Tausende Git-Credentials
by Bernd Kohler 04 Nov '24

04 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hacker klauen Tausende Git-Credentials" VG Bernd [0] https://www.inside-it.ch/hacker-klauen-tausende-git-credentials-20241031 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft Entra "security defaults" to make MFA setup mandatory
by Bernd Kohler 31 Oct '24

31 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Entra "security defaults" to make MFA setup mandatory" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-entra-security-de… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OpenPaX Announced As "Open-Source Alternative To GrSecurity" With
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenPaX Announced As "Open-Source Alternative To GrSecurity" With Free Kernel Patch" --> der passende github link [1] fuer alle, die die zu werbelastige Seite [0] nicht aufrufen wollen VG Bernd [0] https://www.phoronix.com/news/Edera-OpenPaX-Announced [1] https://github.com/edera-dev/linux-openpax -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

YouTube Lectures: Kyber and Dilithium (inkl Folien, Prof. Alfred J.
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Kyber and Dilithium" --> siehe dazu auch "Building Blocks" [1] VG Bernd [0] https://cryptography101.ca/kyber-dilithium/ [1] https://cryptography101.ca/crypto101-building-blocks/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Denial-of-Service Vulnerability Found in Squid Proxy Server
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Denial-of-Service Vulnerability Found in Squid Proxy Server (CVE-2024-45802)" VG Bernd [0] https://securityonline.info/denial-of-service-vulnerability-found-in-squid-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Talos - Threat Spotlight: WarmCookie/BadSpace
by Bernd Kohler 24 Oct '24

24 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Threat Spotlight: WarmCookie/BadSpace" --> "... continuous long-term access to compromised environments ..." --> "typical infection chains" siehe [0] und IoCs siehe [1] VG Bernd [0] https://blog.talosintelligence.com/warmcookie-analysis/ [1] https://github.com/Cisco-Talos/IOCs/tree/main/2024/10/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NSA Tells iPhone And Android Users: Reboot Your Device Now
by Bernd Kohler 24 Oct '24

24 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NSA Tells iPhone And Android Users: Reboot Your Device Now" --> "Mobile Device Best Practices" [1] VG Bernd [0] https://www.forbes.com/sites/daveywinder/2024/10/23/nsa-tells-iphone-and-an… [1] https://s3.documentcloud.org/documents/21018353/nsa-mobile-device-best-prac… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Exploit released for new Windows Server "WinReg" NTLM Relay attack
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Exploit released for new Windows Server "WinReg" NTLM Relay attack" VG Bernd [0] https://www.bleepingcomputer.com/news/security/exploit-released-for-new-win… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0