August 2022 - rwth-security - lists.rwth-aachen.de

Bypassing LDAP Channel Binding with StartTLS (Active Directory)
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing LDAP Channel Binding with StartTLS" VG Bernd [0] https://offsec.almond.consulting/bypassing-ldap-channel-binding-with-startt… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Cert-EU: Hardening Signal
by Bernd Kohler 20 Sep '23

20 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hardening Signal" VG Bernd [0] https://media.cert.europa.eu/static/WhitePapers/TLP-WHITE-CERT-EU_Security_… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

OWASP Kubernetes Top 10
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] und [1] FYI "OWASP Kubernetes Top 10" VG Bernd [0] https://github.com/OWASP/www-project-kubernetes-top-ten -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vulnerability in TikTok Android app could lead to one-click account
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerability in TikTok Android app could lead to one-click account hijacking" VG Bernd [0] https://www.microsoft.com/security/blog/2022/08/31/vulnerability-in-tiktok-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Reinschauer - A PoC to remotely control Windows machines over
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Reinschauer" - A PoC to remotely control Windows machines over Websockets. VG Bernd [0] https://github.com/ps1337/reinschauer -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

A technical analysis of Pegasus for Android – Part 1
by Bernd Kohler 29 Aug '22

29 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "A technical analysis of Pegasus for Android – Part 1" VG Bernd [0] https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-1/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vision - analyses the Nmap XML scanning results (CVE on NIST)
by Bernd Kohler 29 Aug '22

29 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vision" (alternative wäre z.B. [1]) VG Bernd [0] https://github.com/CoolerVoid/Vision2 [1] https://svn.nmap.org/nmap/scripts/vulners.nse -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

EMBA - security analyzer for embedded device firmware
by Bernd Kohler 26 Aug '22

26 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EMBA" - security analyzer for embedded device firmware VG Bernd [0] https://github.com/e-m-b-a/emba -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Reminder - Deprecation of Basic authentication in Exchange Online
by Bernd Kohler 25 Aug '22

25 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen/in Erinnerung hier FYI [0]/[1] "October 1, 2022, we will begin to permanently disable Basic Auth in all tenants, regardless of usage, with the exception of SMTP Auth." [2] Ab dem 15. August 2020 werden alle neuen Azure AD-Mandanten automatisch für die kombinierte Registrierung aktiviert. Ab dem 30. September 2022 registrieren alle Benutzer Sicherheitsinformationen über die kombinierte Registrierungsumgebung. VG Bernd [0] https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-on… [1] https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authenticat… [2] https://docs.microsoft.com/de-de/azure/active-directory/authentication/conc… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

GitHub: SSH commit verification now supported
by Bernd Kohler 25 Aug '22

25 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SSH commit verification now supported" VG Bernd [0] https://github.blog/changelog/2022-08-23-ssh-commit-verification-now-suppor… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0