- rwth-security - lists.rwth-aachen.de

Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed
by Bernd Kohler 27 Jun '25

27 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Good News! Let’s Encrypt Begins Testing IP-Only Certificates — No Domain Needed" --> siehe dazu auch [1] VG Bernd [0] https://securityonline.info/good-news-lets-encrypt-begins-testing-ip-only-c… [1] https://community.letsencrypt.org/t/getting-ready-to-issue-ip-address-certi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

TeamViewer Remote Management Bug (CVE-2025-36537) Enables Privilege Escalation
by Bernd Kohler 25 Jun '25

25 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "TeamViewer Remote Management Bug (CVE-2025-36537) Enables Privilege Escalation" --> "TeamViewer has released a fix in version 15.6" --> “The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management,” VG Bernd [0] https://securityonline.info/teamviewer-remote-management-bug-cve-2025-36537… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical Kibana Flaws: CVE-2025-2135 (CVSS 9.9) Allows Heap Corruption & RCE; Open Redirect Also Patched
by Bernd Kohler 25 Jun '25

25 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical Kibana Flaws: CVE-2025-2135 (CVSS 9.9) Allows Heap Corruption & RCE; Open Redirect Also Patched" VG Bernd [0] https://securityonline.info/critical-kibana-flaws-cve-2025-2135-cvss-9-9-al… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Intel GPU Performance Hit by Security Mitigations: Ubuntu Weighs Disabling Them for 20% Boost
by Bernd Kohler 24 Jun '25

24 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Intel GPU Performance Hit by Security Mitigations: Ubuntu Weighs Disabling Them for 20% Boost" VG Bernd [0] https://securityonline.info/intel-gpu-performance-hit-by-security-mitigatio… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Notepad++ Vulnerability Let Attacker Gain Complete System Control – PoC Released
by Bernd Kohler 24 Jun '25

24 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Notepad++ Vulnerability Let Attacker Gain Complete System Control – PoC Released" VG Bernd [0] https://cybersecuritynews.com/notepad-vulnerability/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Russian hackers bypass Gmail MFA using stolen app passwords
by Bernd Kohler 23 Jun '25

23 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Russian hackers bypass Gmail MFA using stolen app passwords" --> create and share app-specific passwords VG Bernd [0] https://www.bleepingcomputer.com/news/security/russian-hackers-bypass-gmail… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical Mattermost Flaw (CVE-2025-4981, CVSS 9.9) Allows RCE Via Path Traversal
by Bernd Kohler 21 Jun '25

21 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical Mattermost Flaw (CVE-2025-4981, CVSS 9.9) Allows RCE Via Path Traversal" --> CVE-2025-4981 --> affected versions include: 10.5.x ≤ 10.5.5 9.11.x ≤ 9.11.15 10.8.x ≤ 10.8.0 10.7.x ≤ 10.7.2 10.6.x ≤ 10.6.5 VG Bernd [0] https://securityonline.info/critical-mattermost-flaw-cve-2025-4981-cvss-9-9… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OpenVPN Driver Flaw: local users can crash Windows system via buffer overflow
by Bernd Kohler 20 Jun '25

20 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenVPN Driver Flaw: local users can crash Windows system via buffer overflow" VG Bernd [0] https://securityonline.info/openvpn-driver-flaw-local-users-can-crash-windo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

fail2ban "Integration" in sshd
by Bernd Kohler 19 Jun '25

19 Jun '25

Hallo zusammen, irgendwie habe ich die neue Konfigurations-Option "PerSourcePenalties" [0] übersehen, über die man mittels diverser Parameter [1] das Verhalten des sshd bspw. bei Angriffen beeinflussen kann, so z.B. "how long to refuse clients that disconnect after making one or more unsuccessful authentication attempts" In diesem Zusammenhang ist natürlich das Führen einer expliziten Allow- Liste via "PerSourcePenaltyExemptList" ebenso empfehlenswert wie das Sperren von ganzen Netzbereichen mittels "PerSourceNetBlockSize" bei Auffälligkeiten. Voraussetzung ist sshd in der Version > 9.8 FYI und VG Bernd [0] https://marc.info/?l=openbsd-cvs&m=171769392207688&w=2 [1] https://www.man7.org/linux/man-pages/man5/sshd_config.5.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

System Admins Beware! Weaponized Putty Ads in Bing Installs Remote Access Tools
by Bernd Kohler 18 Jun '25

18 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "System Admins Beware! Weaponized Putty Ads in Bing Installs Remote Access Tools" VG Bernd [0] https://cybersecuritynews.com/weaponized-putty-ads/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0