February 2021 - rwth-security - lists.rwth-aachen.de

Security Engineering — Third Edition
by Bernd Kohler 10 Mar '22

10 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Security Engineering — Third Edition" "... from phone phreaks to Android malware and from SIM swaps and SS7 hacking to 5G ..." VG Bernd [0] https://www.cl.cam.ac.uk/~rja14/book.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Firefox 86 Introduces Total Cookie Protection
by Bernd Kohler 24 Feb '21

24 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Firefox 86 Introduces Total Cookie Protection" VG Bernd [0] https://blog.mozilla.org/security/2021/02/23/total-cookie-protection/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
by Bernd Kohler 17 Feb '21

17 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies" --> das Tool confused ("... checking for lingering free namespaces for private package names referenced in dependency configuration ...) ist auf [1] zu finden - Python (pypi) - JavaScript (npm) - PHP (composer) VG Bernd [0] https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 [1] https://github.com/visma-prodsec/confused -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

free/open scanners for ...
by Bernd Kohler 17 Feb '21

17 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier eine Liste von free/open scanners bzgl. [0] LOKI [1] THOR Lite [2] Fenrir [3] THOR FYI und VG Bernd [0] https://github.com/Neo23x0/Loki [1] https://www.nextron-systems.com/thor-lite/ [2] https://github.com/Neo23x0/Fenrir [3] https://www.nextron-systems.com/thor/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CyberICS - News and publication on cybersecurity in industry
by Bernd Kohler 16 Feb '21

16 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "News and publication on cybersecurity in industry " VG Bernd [0] https://cyberics.github.io/News/news.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

In-depth dive into the security features of the Intel/Windows platform secure boot process
by Bernd Kohler 12 Feb '21

12 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "In-depth dive into the security features of the Intel/Windows platform secure boot process" VG Bernd [0] https://igor-blue.github.io/2021/02/04/secure-boot.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Solving the Cryptography Riddle: Post-quantum Computing & Crypto-assets Blockchain Puzzles
by Bernd Kohler 10 Feb '21

10 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Solving the Cryptography Riddle: Post-quantum Computing & Crypto-assets Blockchain Puzzles" --> status quo zum Fortschritt bei der Standardisierung von Post-Quantum Cryptography VG Bernd [0] https://www.enisa.europa.eu/news/enisa-news/solving-the-cryptography-riddle… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Name That Hash
by Bernd Kohler 08 Feb '21

08 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Name That Hash" (neben der Installation gibt es auch eine Web GUI [1]) VG Bernd [0] https://github.com/HashPals/Name-That-Hash [1] https://nth.skerritt.blog/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft warns of increasing OAuth Office 365 phishing attacks
by Bernd Kohler 08 Feb '21

08 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft warns of increasing OAuth Office 365 phishing attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-warns-of-increasin… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New phishing attack uses Morse code to hide malicious URLs
by Bernd Kohler 08 Feb '21

08 Feb '21

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New phishing attack uses Morse code to hide malicious URLs" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-phishing-attack-uses-mor… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0