- rwth-security - lists.rwth-aachen.de

Popular VPNs are routing traffic via Chinese companies, including one with link to military
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Popular VPNs are routing traffic via Chinese companies, including one with link to military" --> hier erlaube ich mir mal Werbung [1] in eigener (gut genauer der von Kollegen) für unsere VPN-Angebote zu machen ;) VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/04/popular-vpns-are-routing-tra… [1] https://help.itc.rwth-aachen.de/service/vbf6fx0gom76/article/b03171bffec249… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Fake Passport Generated by ChatGPT Bypasses Security
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Fake Passport Generated by ChatGPT Bypasses Security" VG Bernd [0] https://securityexpress.info/fake-passport-generated-by-chatgpt-bypasses-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135" VG Bernd [0] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

No Excuses: OpenSSL Enters the Quantum Age
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "No Excuses: OpenSSL Enters the Quantum Age" VG Bernd [0] https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-ente… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers" --> siehe dazu u.a. "SSH-Login mit 2-Faktor-Authentifizierung absichern" [1] (kann man auch für bestimmte Netze/IP's deaktivieren, siehe u.a. [2]) VG Bernd [0] https://thehackernews.com/2025/04/outlaw-group-uses-ssh-brute-force-to.html [1] https://www.thomas-krenn.com/de/wiki/SSH-Login_mit_2-Faktor-Authentifizieru… [2] https://askubuntu.com/questions/1532196/how-to-configure-ssh-with-google-au… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks" VG Bernd [0] https://securityexpress.info/hidden-threat-wordpress-sites-compromised-via-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign" VG Bernd [0] https://thehackernews.com/2025/04/over-1500-postgresql-servers.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers" VG Bernd [0] https://cybersecuritynews.com/apache-tomcat-vulnerability-exploited/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
by Bernd Kohler 01 Apr '25

01 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service" VG Bernd [0] https://doublepulsar.com/oracle-attempt-to-hide-serious-cybersecurity-incid… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders
by Bernd Kohler 01 Apr '25

01 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders" VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-uses-ai-to-find-fl… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0