November 2024 - rwth-security - lists.rwth-aachen.de

Custom "Pygmy Goat" malware used in Sophos Firewall hack on govt
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Custom "Pygmy Goat" malware used in Sophos Firewall hack on govt network" --> analysis of a Linux malware named "Pigmy Goat" VG Bernd [0] https://www.bleepingcomputer.com/news/security/custom-pygmy-goat-malware-us… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows infected with backdoored Linux VMs in new phishing attacks
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows infected with backdoored Linux VMs in new phishing attacks" --> "CRON#TRAP" VG Bernd [0] https://www.bleepingcomputer.com/news/security/windows-infected-with-backdo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Post Quantum Cryptography in a Browser
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Post Quantum Cryptography in a Browser" --> "... we need to move away from ECDH (Elliptic Curve Diffie Hellman) for key exchange and move towards using ML-KEM (aka Kyber) for a key encapsulation method (KEM) ..." --> siehe dazu auch [1] "Chrome switching to NIST-approved ML-KEM quantum encryption" [2] "The state of the post-quantum Internet" [3] "Enable Post Quantum Cryptography Support in Web Browsers" [4] "Is it quantum safe?" (Browser-Test) [5] Details zu TLS/KEM VG Bernd [0] https://billatnapier.medium.com/post-quantum-cryptography-in-a-browser-6112… [1] https://www.bleepingcomputer.com/news/security/chrome-switching-to-nist-app… [2] https://blog.cloudflare.com/de-de/pq-2024/ [3] https://evertrust.io/education/enable-post-quantum-cryptography-support-in-… [4] https://isitquantumsafe.info/ [5] https://crypto.cloudflare.com/cdn-cgi/trace -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hacker klauen Tausende Git-Credentials
by Bernd Kohler 04 Nov '24

04 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hacker klauen Tausende Git-Credentials" VG Bernd [0] https://www.inside-it.ch/hacker-klauen-tausende-git-credentials-20241031 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0