- rwth-security - lists.rwth-aachen.de

No Excuses: OpenSSL Enters the Quantum Age
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "No Excuses: OpenSSL Enters the Quantum Age" VG Bernd [0] https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-ente… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers" --> siehe dazu u.a. "SSH-Login mit 2-Faktor-Authentifizierung absichern" [1] (kann man auch für bestimmte Netze/IP's deaktivieren, siehe u.a. [2]) VG Bernd [0] https://thehackernews.com/2025/04/outlaw-group-uses-ssh-brute-force-to.html [1] https://www.thomas-krenn.com/de/wiki/SSH-Login_mit_2-Faktor-Authentifizieru… [2] https://askubuntu.com/questions/1532196/how-to-configure-ssh-with-google-au… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks" VG Bernd [0] https://securityexpress.info/hidden-threat-wordpress-sites-compromised-via-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign" VG Bernd [0] https://thehackernews.com/2025/04/over-1500-postgresql-servers.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers" VG Bernd [0] https://cybersecuritynews.com/apache-tomcat-vulnerability-exploited/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
by Bernd Kohler 01 Apr '25

01 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service" VG Bernd [0] https://doublepulsar.com/oracle-attempt-to-hide-serious-cybersecurity-incid… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders
by Bernd Kohler 01 Apr '25

01 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft uses AI to find flaws in GRUB2, U-Boot, Barebox bootloaders" VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-uses-ai-to-find-fl… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

VMware Workstation auto-updates broken after Broadcom URL redirect
by Bernd Kohler 01 Apr '25

01 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VMware Workstation auto-updates broken after Broadcom URL redirect" VG Bernd [0] https://www.bleepingcomputer.com/news/software/vmware-workstation-auto-upda… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Splunk Path Traversal Exploit (CVE-2024-36991)
by Bernd Kohler 31 Mar '25

31 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Splunk Path Traversal Exploit (CVE-2024-36991)" VG Bernd [0] https://github.com/jaytiwari05/CVE-2024-36991 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Deep Fake Tools, Deep Fake detection tools, Deep Fake detection guides and MDR
by Bernd Kohler 31 Mar '25

31 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Welcome to this Deep Fake Page VG Bernd [0] https://start.me/p/zpkMMO/deep-fake-tools-detection -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0