October 2024 - rwth-security - lists.rwth-aachen.de

Gatekeeper Bypass: Uncovering Weaknesses in a macOS Security
by Bernd Kohler 19 Oct '24

19 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Gatekeeper Bypass: Uncovering Weaknesses in a macOS Security Mechanism" VG Bernd [0] https://unit42.paloaltonetworks.com/gatekeeper-bypass-macos/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Intel, AMD CPUs on Linux impacted by newly disclosed Spectre bypass
by Bernd Kohler 19 Oct '24

19 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intel, AMD CPUs on Linux impacted by newly disclosed Spectre bypass" VG Bernd [0] https://www.bleepingcomputer.com/news/security/intel-amd-cpus-on-linux-impa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

From QR to compromise: The growing “quishing” threat
by Bernd Kohler 18 Oct '24

18 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI 'From QR to compromise: The growing “quishing” threat' VG Bernd [0] https://news.sophos.com/en-us/2024/10/16/quishing/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability
by Bernd Kohler 18 Oct '24

18 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability (CVE-2024-9264)" VG Bernd [0] https://securityonline.info/patch-now-grafana-hit-by-9-9-severity-rce-vulne… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Linux Systems Vulnerable to New ‘noexec’ Bypass Technique: Arbitrary Code Execution Now Possible
by Bernd Kohler 17 Oct '24

17 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Linux Systems Vulnerable to New ‘noexec’ Bypass Technique: Arbitrary Code Execution Now Possible" VG Bernd [0] https://securityonline.info/linux-systems-vulnerable-to-new-noexec-bypass-t… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

AI scammers target Gmail accounts, say they have your death
by Bernd Kohler 16 Oct '24

16 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AI scammers target Gmail accounts, say they have your death certificate" VG Bernd [0] https://www.malwarebytes.com/blog/news/2024/10/ai-scammers-target-gmail-acc… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Are shorter certificates finally coming?!
by Bernd Kohler 16 Oct '24

16 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Are shorter certificates finally coming?!" VG Bernd [0] https://scotthelme.co.uk/are-shorter-certificates-finally-coming/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

FIDO Alliance Unveils New Draft Specifications for Secure Credential
by Bernd Kohler 15 Oct '24

15 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "FIDO Alliance Unveils New Draft Specifications for Secure Credential Exchange" VG Bernd [0] https://securityonline.info/fido-alliance-unveils-new-draft-specifications-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing
by Bernd Kohler 15 Oct '24

15 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates" VG Bernd [0] https://thehackernews.com/2024/10/researchers-uncover-hijack-loader.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Military Grade Cryptography Cracked? No!
by Bernd Kohler 12 Oct '24

12 Oct '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Military Grade Cryptography Cracked? No!" --> "unlikely to be a major advancement. .. umber of limited number of qubits in we can used at the current time" VG Bernd [0] https://billatnapier.medium.com/a-major-advancement-on-quantum-cracking-48a… [1] https://www.scmp.com/news/china/science/article/3282051/chinese-scientists-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0