February 2024 - rwth-security - lists.rwth-aachen.de

Ubuntu 'command-not-found' Tool Could Trick Users into Installing
by Bernd Kohler 14 Feb '24

14 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages" VG Bernd [0] https://thehackernews.com/2024/02/ubuntu-command-not-found-tool-could.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2023-50358: A zero-day vulnerability affecting QNAP NAS devices
by Bernd Kohler 13 Feb '24

13 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2023-50358: A zero-day vulnerability affecting QNAP NAS devices" --> remote code execution VG Bernd [0] https://securityonline.info/cve-2023-50358-a-zero-day-vulnerability-affecti… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Bypassing Microsoft Login Pages: Frameless BITB’s Innovative Approach
by Bernd Kohler 06 Feb '24

06 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing Microsoft Login Pages: Frameless BITB’s Innovative Approach" (AddBlocker nicht vergessen) VG Bernd [0] https://securityonline.info/bypassing-microsoft-login-pages-frameless-bitbs… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

AnyDesk - incident?
by Bernd Kohler 02 Feb '24

02 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AnyDesk" Incident (ecdsa-nonce-reuse-attack)? kann ein Gerücht sein, aber das Changelog [1] listet folgendes "Security update: Exchanged code signing certificate. The previous certificate will be invalidated soon. Please update" VG Bernd [0] https://twitter.com/etguenni/status/1753129151110791672 [1] https://download.anydesk.com/changelog.txt -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

VajraSpy: A Patchwork of espionage apps (12 Android Apps)
by Bernd Kohler 01 Feb '24

01 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VajraSpy: A Patchwork of espionage apps" --> Group One: trojanized messaging applications with basic functionalities i.e., MeetMe, Privee Talk, Let’s Chat, Quick Chat, GlowChat, and Chit Chat. --> Group Two: trojanized messaging applications with advanced functionalities TikTalk, Nidus, YohooTalk, and Wave Chat VG Bernd [0] https://www.welivesecurity.com/en/eset-research/vajraspy-patchwork-espionag… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CA/Browser Forum Adopts CAA for S/MIME Certificates
by Bernd Kohler 01 Feb '24

01 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CA/Browser Forum Adopts CAA for S/MIME Certificates" VG Bernd [0] https://www.feistyduck.com/newsletter/issue_109_cab_forum_adopts_caa_for_s_… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses
by Bernd Kohler 01 Feb '24

01 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses" --> slides auf [1] VG Bernd [0] https://dl.acm.org/doi/pdf/10.1145/3576915.3623066 [1] https://francozappa.github.io/publication/2023/bluffs/slides.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-21626: Docker Confronts Critical Container Escape Threat
by Bernd Kohler 01 Feb '24

01 Feb '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-21626: Docker Confronts Critical Container Escape Threat" --> "... Docker strongly urges its users to prioritize security by applying these updates as soon as possible... " --> Infos [1] direkt bei docker.com VG Bernd [0] https://securityonline.info/cve-2024-21626-docker-confronts-critical-contai… [1] https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabiliti… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0