October 2024 - rwth-security - lists.rwth-aachen.de

Let's Encrypt - Intent to End OCSP Service
by Bernd Kohler 30 Dec '24

30 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intent to End OCSP Service" --> "... our intent to end Online Certificate Status Protocol (OCSP) support in favor of Certificate Revocation Lists (CRLs) as soon as possible ..." --> "... As soon as the Microsoft Root Program also makes OCSP o ptional, which we are optimistic will happen within the next six to twelve months, Let’s Encrypt intends to announce a specific and rapid timeline for shutting down our OCSP services. ..." --> kein OSCP stapling? VG Bernd [0] https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Microsoft Entra "security defaults" to make MFA setup mandatory
by Bernd Kohler 31 Oct '24

31 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft Entra "security defaults" to make MFA setup mandatory" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-entra-security-de… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OpenPaX Announced As "Open-Source Alternative To GrSecurity" With
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenPaX Announced As "Open-Source Alternative To GrSecurity" With Free Kernel Patch" --> der passende github link [1] fuer alle, die die zu werbelastige Seite [0] nicht aufrufen wollen VG Bernd [0] https://www.phoronix.com/news/Edera-OpenPaX-Announced [1] https://github.com/edera-dev/linux-openpax -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

YouTube Lectures: Kyber and Dilithium (inkl Folien, Prof. Alfred J.
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Kyber and Dilithium" --> siehe dazu auch "Building Blocks" [1] VG Bernd [0] https://cryptography101.ca/kyber-dilithium/ [1] https://cryptography101.ca/crypto101-building-blocks/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Denial-of-Service Vulnerability Found in Squid Proxy Server
by Bernd Kohler 30 Oct '24

30 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Denial-of-Service Vulnerability Found in Squid Proxy Server (CVE-2024-45802)" VG Bernd [0] https://securityonline.info/denial-of-service-vulnerability-found-in-squid-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Talos - Threat Spotlight: WarmCookie/BadSpace
by Bernd Kohler 24 Oct '24

24 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Threat Spotlight: WarmCookie/BadSpace" --> "... continuous long-term access to compromised environments ..." --> "typical infection chains" siehe [0] und IoCs siehe [1] VG Bernd [0] https://blog.talosintelligence.com/warmcookie-analysis/ [1] https://github.com/Cisco-Talos/IOCs/tree/main/2024/10/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NSA Tells iPhone And Android Users: Reboot Your Device Now
by Bernd Kohler 24 Oct '24

24 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NSA Tells iPhone And Android Users: Reboot Your Device Now" --> "Mobile Device Best Practices" [1] VG Bernd [0] https://www.forbes.com/sites/daveywinder/2024/10/23/nsa-tells-iphone-and-an… [1] https://s3.documentcloud.org/documents/21018353/nsa-mobile-device-best-prac… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Exploit released for new Windows Server "WinReg" NTLM Relay attack
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Exploit released for new Windows Server "WinReg" NTLM Relay attack" VG Bernd [0] https://www.bleepingcomputer.com/news/security/exploit-released-for-new-win… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

SELinux bypasses
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SELinux bypasses" VG Bernd [0] https://klecko.github.io/posts/selinux-bypasses/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Authenticated Remote Code Execution in multiple Xerox printers
by Bernd Kohler 23 Oct '24

23 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Authenticated Remote Code Execution in multiple Xerox printers" --> es geht nicht um unsere Triumph-Adler (sondern ggf. eigene Beschaffungen) VG Bernd [0] https://sec-consult.com/vulnerability-lab/advisory/authenticated-remote-cod… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0