March 2022 - rwth-security - lists.rwth-aachen.de

Cert-EU: Hardening Signal
by Bernd Kohler 20 Sep '23

20 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hardening Signal" VG Bernd [0] https://media.cert.europa.eu/static/WhitePapers/TLP-WHITE-CERT-EU_Security_… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Log4Shell-Rex
by Bernd Kohler 01 Jun '22

01 Jun '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Log4Shell-Rex" --> nutzbar z.B. via "find /var/log -name "*.log" | xargs grep -P ${Log4ShellRex}" VG Bernd [0] https://github.com/back2root/log4shell-rex -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Spring4Shell: Security Analysis of the latest Java RCE '0-day'
by Bernd Kohler 31 Mar '22

31 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Spring4Shell: Security Analysis of the latest Java RCE '0-day' vulnerabilities in Spring" --> dazu auch [1] "infographic on the recent Java Spring vulnerabilities" bzw. [2] "What Is SpringShell? What We Know About the SpringShell Vulnerability" VG Bernd [0] https://www.lunasec.io/docs/blog/spring-rce-vulnerabilities/ [1] https://twitter.com/th3_protoCOL/status/1509201539461619715/photo/1 [2] https://www.flashpoint-intel.com/blog/what-is-springshell-what-we-know-abou… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

breach of Okta SSO service?
by Bernd Kohler 30 Mar '22

30 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "The LAPSUS$ ransomware group has claimed to breach Okta sharing the following images from internal systems." --> ein weiteres prominentes Opfer könnte nach [1] Microsoft sein VG Bernd [0] https://twitter.com/BillDemirkapi/status/1506107157124722690 [1] https://www.bleepingcomputer.com/news/microsoft/lapsus-hackers-leak-37gb-of… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 2

Attackers getting faster at latching onto unpatched vulnerabilities for stealth hacking campaigns – report
by Bernd Kohler 29 Mar '22

29 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Attackers getting faster at latching onto unpatched vulnerabilities for stealth hacking campaigns – report" --> "... average time to known exploitation of vulnerabilities is down to 12 days – markedly down from the 42 days ..." VG Bernd [0] https://portswigger.net/daily-swig/attackers-getting-faster-at-latching-ont… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hacking the TLS Handshake and decryption with Wireshark // SSL Deep
by Bernd Kohler 26 Mar '22

26 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hacking the TLS Handshake and decryption with Wireshark // SSL Deep Dive" VG Bernd [0] https://www.youtube.com/watch?v=25_ftpJ-2ME -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Over 200 Malicious NPM Packages Caught Targeting Azure Developers
by Bernd Kohler 24 Mar '22

24 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Over 200 Malicious NPM Packages Caught Targeting Azure Developers" VG Bernd [0] https://thehackernews.com/2022/03/over-200-malicious-npm-packages-caught.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hardenize Policy for Email Infrastructure
by Bernd Kohler 22 Mar '22

22 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hardenize Policy for Email Infrastructure" VG Bernd [0] https://www.hardenize.com/labs/policy -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS,
by Bernd Kohler 22 Mar '22

22 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Dell BIOS Bugs Affect Millions of Inspiron, Vostro, XPS, Alienware Systems" VG Bernd [0] https://thehackernews.com/2022/03/new-dell-bios-bugs-affect-millions-of.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Browser In The Browser (BITB) Attack
by Bernd Kohler 21 Mar '22

21 Mar '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Browser In The Browser (BITB) Attack" VG Bernd [0] https://mrd0x.com/browser-in-the-browser-phishing-attack/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0