June 2024 - rwth-security - lists.rwth-aachen.de

nmap-did-what
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "nmap-did-what" --> "... Grafana docker container and a Python script to parse Nmap XML output to an SQLite database ..." VG Bernd [0] https://github.com/hackertarget/nmap-did-what -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

PoC Published for Critical Nvidia Triton Inference Server
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "PoC Published for Critical Nvidia Triton Inference Server Vulnerabilities" --> "... NVIDIA has addressed both vulnerabilities in Triton Inference Server version 24.04. All users and organizations are strongly advised to upgrade to this latest version ..." VG Bernd [0] https://securityonline.info/poc-published-for-critical-nvidia-triton-infere… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

ReverserAI (v1.1)
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "ReverserAI (v1.1)' --> "... research project designed to automate and enhance reverse engineering tasks through the use of locally-hosted large language models (LLMs) ..." VG Bernd [0] https://github.com/mrphrazer/reverser_ai -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

UNC3886 hackers use Linux rootkits to hide on VMware ESXi VMs
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "UNC3886 hackers use Linux rootkits to hide on VMware ESXi VMs" VG Bernd [0] https://www.bleepingcomputer.com/news/security/unc3886-hackers-use-linux-ro… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Linux version of RansomHub ransomware targets VMware ESXi VMs
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Linux version of RansomHub ransomware targets VMware ESXi VMs" VG Bernd [0] https://www.bleepingcomputer.com/news/security/linux-version-of-ransomhub-r… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Phoenix UEFI vulnerability impacts hundreds of Intel PC models
by Bernd Kohler 21 Jun '24

21 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phoenix UEFI vulnerability impacts hundreds of Intel PC models" VG Bernd [0] https://www.bleepingcomputer.com/news/security/phoenix-uefi-vulnerability-i… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Red Team Pentesting: Behind the Screens - Insights and Stories of
by Bernd Kohler 20 Jun '24

20 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Behind the Screens - Insights and Stories of Real-World Penetration Testing" --> sind Alumni der RWTH VG Bernd [0] https://www.redteam-pentesting.de/publications/2024-06-17-Behind-the-Screen… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Undetected Diamorphine Rootkit Targets Linux Systems
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Undetected Diamorphine Rootkit Targets Linux Systems" VG Bernd [0] https://securityonline.info/new-undetected-diamorphine-rootkit-targets-linu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2023-32191 (CVSS 10) in Rancher Kubernetes Engine Exposes
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2023-32191 (CVSS 10) in Rancher Kubernetes Engine Exposes Sensitive Credentials" VG Bernd [0] https://securityonline.info/cve-2023-32191-cvss-10-in-rancher-kubernetes-en… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

wstunnel
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "wstunnel" --> Tunnel des gesammten Datenverkehrsn über Websocket oder HTTP2 VG Bernd [0] https://github.com/erebe/wstunnel -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0