November 2023 - rwth-security - lists.rwth-aachen.de

Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack
by Bernd Kohler 16 Nov '23

16 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Protected Virtual Machines Exposed to New ‘CacheWarp’ AMD CPU Attack" --> Details siehe [1] VG Bernd [0] https://www.securityweek.com/protected-virtual-machines-exposed-to-new-cach… [1] https://cachewarpattack.com/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Reptar: New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized
by Bernd Kohler 15 Nov '23

15 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Reptar: New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments" VG Bernd [0] https://thehackernews.com/2023/11/reptar-new-intel-cpu-vulnerability.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Security control changes due to TLS Encrypted Client Hello
by Bernd Kohler 15 Nov '23

15 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Security control changes due to TLS Encrypted Client Hello" VG Bernd [0] https://blog.apnic.net/2023/11/15/security-control-changes-due-to-tls-encry… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

PatchaPalooza - insightful analysis of Microsoft's monthly security
by Bernd Kohler 08 Nov '23

08 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PatchaPalooza" --> neben der lokal zu installierende Version [0] gibt es auch online über [1] eine Übersicht VG Bernd [0] https://github.com/xaitax/PatchaPalooza [1] https://patchapalooza.com/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Attackers use Google Calendar RAT to abuse Calendar service as C2
by Bernd Kohler 07 Nov '23

07 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Attackers use Google Calendar RAT to abuse Calendar service as C2 infrastructure" VG Bernd [0] https://securityaffairs.com/153700/hacking/google-calendar-rat-attacks.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft will roll out MFA-enforcing policies for admin portal
by Bernd Kohler 07 Nov '23

07 Nov '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft will roll out MFA-enforcing policies for admin portal access" --> "... requiring multifactor authentication (MFA) from administrators when signing into Microsoft admin portals such as Microsoft Entra, Microsoft 365, Exchange, and Azure. ... admins will have 90 days to review them and choose if they want to enable them or not. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-will-roll-out-mfa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0