- rwth-security - lists.rwth-aachen.de

An Engineer’s Guide to Integrating ARI into Existing ACME Clients
by Bernd Kohler 06 Sep '24

06 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "An Engineer’s Guide to Integrating ARI into Existing ACME Clients" --> ACME Renewal Information (ARI) --> weil es eine deutliche Nutzung von Let's Encrypt gibt ;) VG Bernd [0] https://letsencrypt.org/2024/04/25/guide-to-integrating-ari-into-existing-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root
by Bernd Kohler 06 Sep '24

06 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root Compromise" --> "... vulnerability within the Linux kernel ..." --> "... local authenticated attackers ..." --> "... versions 6.1.9 and later, 5.15.91 and later, and 5.10.166 and later ..." VG Bernd [0] https://securityonline.info/cve-2024-26581-poc-exploit-released-linux-syste… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular
by Bernd Kohler 05 Sep '24

05 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published" --> original Report [1] --> "... rooted in the wappd network daemon, a critical component of the MediaTek MT7622/MT7915 SDK and RTxxxx SoftAP driver bundle. These chipsets are widely used in Wifi6 (802.11ax) devices, including popular models from Ubiquiti, Xiaomi, and Netgear. ..." --> PoC [2] VG Bernd [0] https://securityonline.info/cve-2024-20017-cvss-9-8-zero-click-exploit-disc… [1] https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-2024-20017-four-d… [2] https://github.com/mellow-hype/cve-2024-20017 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Threat actors using MacroPack to deploy Brute Ratel, Havoc and
by Bernd Kohler 05 Sep '24

05 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads' VG Bernd [0] https://blog.talosintelligence.com/threat-actors-using-macropack/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Revival Hijack supply-chain attack threatens 22,000 PyPI packages
by Bernd Kohler 04 Sep '24

04 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Revival Hijack supply-chain attack threatens 22,000 PyPI packages" --> "... To mitigate the threat, users and organizations can use package pinning to stay on specified, known to be trustworthy versions, verify package integrity, audit its contents, and look out for changes in package ownership or atypical update activity. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/revival-hijack-supply-chain-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Interactive PDF Analysis
by Bernd Kohler 04 Sep '24

04 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Interactive PDF Analysis" VG Bernd [0] https://github.com/seekbytes/IPA/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

EUCLEAK Side-Channel Attack on the YubiKey 5 Series
by Bernd Kohler 04 Sep '24

04 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EUCLEAK and Side Channels" --> siehe dazu auch [1] -->original Report [2] VG Bernd [0] https://medium.com/asecuritysite-when-bob-met-alice/eucleak-and-side-channe… [1] https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning… [2] https://ninjalab.io/eucleak/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP
by Bernd Kohler 04 Sep '24

04 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP Backdoor and Microsoft Exchange Flaws" VG Bernd [0] https://securityonline.info/researcher-identifies-toddycat-inspired-apt-att… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Secrets Exposed: Why Your CISO Should Worry About Slack
by Bernd Kohler 03 Sep '24

03 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Secrets Exposed: Why Your CISO Should Worry About Slack" VG Bernd [0] https://thehackernews.com/2024/09/secrets-exposed-why-your-ciso-should.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

More Memory Safety for Let’s Encrypt: Deploying ntpd-rs
by Bernd Kohler 03 Sep '24

03 Sep '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "More Memory Safety for Let’s Encrypt: Deploying ntpd-rs" --> Artikel ist schon etwas älter, jetzt erst gesehen --> Github-Page [1] mit Releases [2] --> Doku-Seite [3] VG Bernd [0] https://letsencrypt.org/2024/06/24/ntpd-rs-deployment [1] https://github.com/pendulum-project/ntpd-rs [2] https://github.com/pendulum-project/ntpd-rs/releases [3] https://docs.ntpd-rs.pendulum-project.org/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0