- rwth-security - lists.rwth-aachen.de

MIFARE Classic (FM11RF08S): exposing the static encrypted nonce
by Bernd Kohler 16 Aug '24

16 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "MIFARE Classic: exposing the static encrypted nonce variant" --> "... present several attacks and unexpected findings regarding the FM11RF08S ..." (neue Variante des MIFARE Classic) --> "... discovered a hardware backdoor and successfully cracked its key. This backdoor enables any entity with knowledge of it to compromise all user-defined keys on these cards without prior knowledge, simply by accessing the card for a few minutes" VG Bernd [0] https://eprint.iacr.org/2024/1275 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale
by Bernd Kohler 15 Aug '24

15 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LanDscAPe: Exploring LDAP Weaknesses and Data Leaks at Internet Scale" VG Bernd [0] https://www.usenix.org/system/files/usenixsecurity24-kaspereit.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential
by Bernd Kohler 15 Aug '24

15 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover" VG Bernd [0] https://thehackernews.com/2024/08/github-vulnerability-artipacked-exposes.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Post-Quantum Cryptography Standards Officially Announced by NIST – a History and Explanation
by Bernd Kohler 13 Aug '24

13 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Post-Quantum Cryptography Standards Officially Announced by NIST – a History and Explanation" VG Bernd [0] https://www.securityweek.com/post-quantum-cryptography-standards-officially… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy
by Bernd Kohler 13 Aug '24

13 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication" VG Bernd [0] https://thehackernews.com/2024/08/new-windows-backdoor-bitsloth-exploits.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

technische Details russische Desinformationskampagne "Doppelgänger" - Bayerischen Landesamt für Verfassungsschutz (BayLfV)
by Bernd Kohler 13 Aug '24

13 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Doppelgänger" - Teil [1] - Management Summary - Teil [2] - Vollanalyse VG Bernd [0] https://www.verfassungsschutz.bayern.de/ueberuns/medien/pressemitteilungen/… [1] https://www.verfassungsschutz.bayern.de/mam/anlagen/baylfv_management_summa… [2] https://www.verfassungsschutz.bayern.de/mam/anlagen/baylfv_vollanalyse_dopp… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical AWS Vulnerabilities Allow S3 Attack Bonanza
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical AWS Vulnerabilities Allow S3 Attack Bonanza" VG Bernd [0] https://www.darkreading.com/remote-workforce/critical-aws-vulnerabilities-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Windows Downdate: Downgrade Attacks Using Windows Updates
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Downdate: Downgrade Attacks Using Windows Updates" --> gefunden via [1] VG Bernd [0] https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/ [1] https://www.golem.de/news/windows-10-und-11-downgrade-angriff-reisst-alte-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Splitting the email atom: exploiting parsers to bypass access
by Bernd Kohler 08 Aug '24

08 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Splitting the email atom: exploiting parsers to bypass access controls" VG Bernd [0] https://portswigger.net/research/splitting-the-email-atom -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Vulnerabilities in Sogou Keyboard encryption expose keypresses to
by Bernd Kohler 07 Aug '24

07 Aug '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping" VG Bernd [0] https://citizenlab.ca/2023/08/vulnerabilities-in-sogou-keyboard-encryption/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0