August 2023 - rwth-security - lists.rwth-aachen.de

Announcing Python in Excel: Combining the power of Python and the
by Bernd Kohler 23 Aug '23

23 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Announcing Python in Excel: Combining the power of Python and the flexibility of Excel." --> interresant in diesem Zusammenhang ist [1] Microsoft Excel Python has the following registry key setting values HKCU\software\policies\microsoft\office\16.0\excel\security\PythonFunctionWarnings DWORD 0 = All Security Warnings Disabled 1 = Security Warning: Enable-Content 2 = Blocks all Python Execution VG Bernd [0] https://techcommunity.microsoft.com/t5/excel-blog/announcing-python-in-exce… [1] https://twitter.com/Laughing_Mantis/status/1694058572051853519 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

2 1

CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent
by Bernd Kohler 22 Aug '23

22 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Remote Code Execution in OpenSSH’s forwarded ssh-agent" Status bei - Debian [1] - Red Hat [2] - Ubuntu [3] VG Bernd [0] https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023… [1] https://security-tracker.debian.org/tracker/CVE-2023-38408 [2] https://access.redhat.com/security/cve/cve-2023-38408 [3] https://ubuntu.com/security/CVE-2023-38408 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Network Security Dashboard for Microsoft Defender for Cloud
by Bernd Kohler 16 Aug '23

16 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Network Security Dashboard for Microsoft Defender for Cloud" VG Bernd [0] https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Workbooks/N… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Downfall Attacks (CVE-2022-40982) - steal sensitive information like
by Bernd Kohler 09 Aug '23

09 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Downfall Attacks" --> "... steal sensitive information like passwords, encryption keys, and private data such as banking details, personal emails, and messages --> siehe dazu auch [1] "New Downfall attacks on Intel CPUs steal encryption keys, data" VG Bernd [0] https://downfall.page/ [1] https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-inte… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Exploring Credential Management Strategies and Obstacles during
by Bernd Kohler 08 Aug '23

08 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup VG Bernd [0] https://teamusec.de/pdf/conf-soups-amft23.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access
by Bernd Kohler 02 Aug '23

02 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan" --> betrifft AWS Systems Manager Agent (SSM Agent) Windows und Linux VG Bernd [0] https://thehackernews.com/2023/08/researchers-uncover-aws-ssm-agent.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0