- rwth-security - lists.rwth-aachen.de

Phishing kits now vet victims in real-time before stealing credentials
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phishing kits now vet victims in real-time before stealing credentials" --> "Precision-Validated Phishing" --> "... only shows fake login forms when a user enters an email address that the threat actors specifically targeted ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/phishing-kits-now-vet-victim… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Identity Providers Passthrough Phishing
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Identity Providers Passthrough Phishing" VG Bernd [0] https://github.com/mrsheepsheep/idp-passthrough-phishing -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Device Code Login Phishing Presentation Attack, Detect, Mitigate
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Device Code Login Phishing Presentation Attack, Detect, Mitigate" VG Bernd [0] https://www.youtube.com/watch?v=Y8SSYLEq15Q -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-56406: Heap Overflow Vulnerability in Perl Threatens Denial of Service and Potential Code Execution
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-56406: Heap Overflow Vulnerability in Perl Threatens Denial of Service and Potential Code Execution" VG Bernd [0] https://securityonline.info/cve-2024-56406-heap-overflow-vulnerability-in-p… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BPFDoor’s Hidden Controller Used Against Asia, Middle East Targets" VG Bernd [0] https://www.trendmicro.com/en_us/research/25/d/bpfdoor-hidden-controller.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

The EFF's 'Certbot' Now Supports Six-Day Certs
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The EFF's 'Certbot' Now Supports Six-Day Certs" VG Bernd [0] https://it.slashdot.org/story/25/04/14/0356212/the-effs-certbot-now-support… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Tycoon2FA phishing kit targets Microsoft 365 with new tricks
by Bernd Kohler 14 Apr '25

14 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Tycoon2FA phishing kit targets Microsoft 365 with new tricks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/tycoon2fa-phishing-kit-targe… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption
by Bernd Kohler 10 Apr '25

10 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption" VG Bernd [0] https://www.nist.gov/news-events/news/2025/03/nist-selects-hqc-fifth-algori… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

OpenSSH 10.0 has just been released
by Bernd Kohler 10 Apr '25

10 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenSSH 10.0 has just been released" - "removes support for the weak DSA signature" - "removes the implicit fallback to compiled- in groups for Diffie-Hellman Group Exchange KEX ..." - "hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement" - "support FIDO tokens that return no attestation data, e.g. recent WinHello. GHPR542" ... --> es kann also durchaus was nicht mehr funktionieren ;) VG Bernd [0] https://www.openwall.com/lists/oss-security/2025/04/09/1 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI
by Bernd Kohler 10 Apr '25

10 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI" VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2025/04/09/stopping-attacks-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0