- rwth-security - lists.rwth-aachen.de

Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)
by Bernd Kohler 08 Apr '25

08 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)" VG Bernd [0] https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Windows Remote Desktop Protocol: Remote to Rogue
by Bernd Kohler 08 Apr '25

08 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Remote Desktop Protocol: Remote to Rogue" --> es geht um "... signed .rdp file attachments to establish Remote Desktop Protocol (RDP) connections from victims' machines. ..." VG Bernd [0] https://cloud.google.com/blog/topics/threat-intelligence/windows-rogue-remo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

MCP Security Notification: Tool Poisoning Attacks
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "MCP Security Notification: Tool Poisoning Attacks" VG Bernd [0] https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-atta… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug" VG Bernd [0] https://securityonline.info/cve-2025-31115-xz-utils-hit-again-with-high-sev… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

pgAdmin 4 Vulnerabilities Expose Databases to Remote Code Execution and XSS
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "pgAdmin 4 Vulnerabilities Expose Databases to Remote Code Execution and XSS" VG Bernd [0] https://securityonline.info/pgadmin-4-vulnerabilities-expose-databases-to-r… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-2704: Critical Bug in OpenVPN Can Trigger Server Crashes
by Bernd Kohler 06 Apr '25

06 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-2704: Critical Bug in OpenVPN Can Trigger Server Crashes" VG Bernd [0] https://securityonline.info/cve-2025-2704-critical-bug-in-openvpn-can-trigg… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)" --> betroffen sind: ATS 9.0.0 to 9.2.9 ATS 10.0.0 to 10.0.4 --> die neusten Versionen (10.0.5 und 9.2.10) gibt es u.a. auf [1] VG Bernd [0] https://securityonline.info/apache-traffic-server-hit-by-request-smuggling-… [1] https://trafficserver.apache.org/downloads -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Popular VPNs are routing traffic via Chinese companies, including one with link to military
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Popular VPNs are routing traffic via Chinese companies, including one with link to military" --> hier erlaube ich mir mal Werbung [1] in eigener (gut genauer der von Kollegen) für unsere VPN-Angebote zu machen ;) VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/04/popular-vpns-are-routing-tra… [1] https://help.itc.rwth-aachen.de/service/vbf6fx0gom76/article/b03171bffec249… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Fake Passport Generated by ChatGPT Bypasses Security
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Fake Passport Generated by ChatGPT Bypasses Security" VG Bernd [0] https://securityexpress.info/fake-passport-generated-by-chatgpt-bypasses-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135" VG Bernd [0] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0