- rwth-security - lists.rwth-aachen.de

SELinux bypasses
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SELinux bypasses" VG Bernd [0] https://klecko.github.io/posts/selinux-bypasses/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Authenticated Remote Code Execution in multiple Xerox printers
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Authenticated Remote Code Execution in multiple Xerox printers" --> es geht nicht um unsere Triumph-Adler (sondern ggf. eigene Beschaffungen) VG Bernd [0] https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-cod… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

VMware Releases vCenter Server Update to Fix Critical RCE
by Bernd Kohler 22 Oct '24

22 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability" VG Bernd [0] https://thehackernews.com/2024/10/vmware-releases-vcenter-server-update.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Gatekeeper Bypass: Uncovering Weaknesses in a macOS Security
by Bernd Kohler 19 Oct '24

19 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Gatekeeper Bypass: Uncovering Weaknesses in a macOS Security Mechanism" VG Bernd [0] https://unit42.paloaltonetworks.com/gatekeeper-bypass-macos/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Intel, AMD CPUs on Linux impacted by newly disclosed Spectre bypass
by Bernd Kohler 19 Oct '24

19 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intel, AMD CPUs on Linux impacted by newly disclosed Spectre bypass" VG Bernd [0] https://www.bleepingcomputer.com/news/security/intel-amd-cpus-on-linux-impa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

From QR to compromise: The growing “quishing” threat
by Bernd Kohler 18 Oct '24

18 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI 'From QR to compromise: The growing “quishing” threat' VG Bernd [0] https://news.sophos.com/en-us/2024/10/16/quishing/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability
by Bernd Kohler 18 Oct '24

18 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability (CVE-2024-9264)" VG Bernd [0] https://securityonline.info/patch-now-grafana-hit-by-9-9-severity-rce-vulne… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Linux Systems Vulnerable to New ‘noexec’ Bypass Technique: Arbitrary Code Execution Now Possible
by Bernd Kohler 17 Oct '24

17 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Linux Systems Vulnerable to New ‘noexec’ Bypass Technique: Arbitrary Code Execution Now Possible" VG Bernd [0] https://securityonline.info/linux-systems-vulnerable-to-new-noexec-bypass-t… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

AI scammers target Gmail accounts, say they have your death
by Bernd Kohler 16 Oct '24

16 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AI scammers target Gmail accounts, say they have your death certificate" VG Bernd [0] https://www.malwarebytes.com/blog/news/2024/10/ai-scammers-target-gmail-acc… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Are shorter certificates finally coming?!
by Bernd Kohler 16 Oct '24

16 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Are shorter certificates finally coming?!" VG Bernd [0] https://scotthelme.co.uk/are-shorter-certificates-finally-coming/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0