October 2022 - rwth-security - lists.rwth-aachen.de

Identity management for WireGuard
by Bernd Kohler 19 Oct '22

19 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Identity management for WireGuard" VG Bernd [0] https://lwn.net/SubscriberLink/910766/2b9862c544e9e6ca/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Dangerous hole in Apache Commons Text – like Log4Shell all over again
by Bernd Kohler 18 Oct '22

18 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Dangerous hole in Apache Commons Text – like Log4Shell all over again" VG Bernd [0] https://nakedsecurity.sophos.com/2022/10/18/dangerous-hole-in-apache-common… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

RSS feed - Microsoft Security Update Guide
by Bernd Kohler 17 Oct '22

17 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI RSS-feed (seid kurzem) des Security Update Guide [1] --> "receive notifs when #Microsoft adds a new #CVE to the Sec Update Guide" VG Bernd [0] https://api.msrc.microsoft.com/update-guide/rss [1] https://msrc.microsoft.com/update-guide -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Relaying YubiKeys (inkl. "PoC of phishing a FIDO2 login")
by Bernd Kohler 17 Oct '22

17 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Relaying YubiKeys" (inkl. "PoC of phishing a FIDO2 login") --> 1. Teil unter [1] VG Bernd [0] https://cube0x0.github.io/Relaying-YubiKeys-Part-2/ [1] https://cube0x0.github.io/Relaying-YubiKeys/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Zeek (Anmerk. ehem. Bro IDS) is Now a Component of Microsoft Windows
by Bernd Kohler 13 Oct '22

13 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zeek is Now a Component of Microsoft Windows" VG Bernd [0] https://corelight.com/company/zeek-now-component-of-microsoft-windows?hsLan… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft Defender adds command and control traffic detection
by Kohler, Bernd 12 Oct '22

12 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Defender adds command and control traffic detection" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-adds-com… --- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Seffenter Weg 23 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22241 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de

1 0

Node.js passport-saml - Signature bypass via multiple root elements
by Bernd Kohler 12 Oct '22

12 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Signature bypass via multiple root elements" VG Bernd [0] https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-64… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

We Smell A RatMilad Android Spyware
by Bernd Kohler 07 Oct '22

07 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "We Smell A RatMilad Android Spyware" VG Bernd [0] https://blog.zimperium.com/we-smell-a-ratmilad-mobile-spyware/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

AWSGoat : A Damn Vulnerable AWS Infrastructure
by Bernd Kohler 07 Oct '22

07 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AWSGoat : A Damn Vulnerable AWS Infrastructure" VG Bernd [0] https://github.com/ine-labs/AWSGoat -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

EvilTree - classic "tree" command with the additional feature of
by Bernd Kohler 07 Oct '22

07 Oct '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EvilTree" --> classic "tree" command with the additional feature of searching for user provided keywords/regex in files VG Bernd [0] https://github.com/t3l3machus/eviltree -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0