rwth-security Februar 2021

rwth-security@lists.rwth-aachen.de

1 Teilnehmer
16 Diskussionen

Microsoft Remote Desktop Web Access Authentication Timing Attack

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Remote Desktop Web Access Authentication Timing Attack" VG Bernd [0] https://raxis.com/blog/rd-web-access-vulnerability -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "WARNING — Hugely Popular 'The Great Suspender' Chrome Extension Contains Malware" VG Bernd [0] https://thehackernews.com/2021/02/warning-hugely-popular-great-suspender.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

Nearly One-Third of Attack Targets Weren’t Running SolarWinds

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Nearly One-Third of Attack Targets Weren’t Running SolarWinds" VG Bernd [0] https://www.cybereason.com/blog/nearly-one-third-of-attack-targets-werent-r… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

Vulnerabilities in Realtek Wi-Fi Module Expose Many Devices to Remote Attacks

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerabilities in Realtek Wi-Fi Module Expose Many Devices to Remote Attacks" VG Bernd [0] https://www.securityweek.com/vulnerabilities-realtek-wi-fi-module-expose-ma… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Backdoored Browser Extensions Hid Malicious Traffic in Analytics Requests" Siehe dazu auch [1] (inkl. Link zu IoC) --> "... All the backdoored browser add-ons have been taken down by Google and Microsoft as of December 18, 2020, ..." --> lokal auch deinstaliiert? VG Bernd [0] https://decoded.avast.io/janvojtesek/backdoored-browser-extensions-hid-mali… [1] https://thehackernews.com/2021/02/over-dozen-chrome-extensions-caught.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

Designing Actively Secure, Highly Available Industrial Automation Applications

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Designing Actively Secure, Highly Available Industrial Automation Applications" "... Security mechanisms are achieved using IEC 61499 Service-Interface Function Blocks (SIFBs) embedding Intrusion Detection and Prevention System (IDPS), added to the application at compile time. This method is more amenable to providing active security protection from attacks on previously unknown (zero-day) vulnerabilities ..." VG Bernd [0] https://arxiv.org/abs/2101.01856 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

3 Jahre, 2 Monate

2024

2023

2022

2021

2020

2019

2018

rwth-security Februar 2021