- rwth-security - lists.rwth-aachen.de

JavaGhost’s Persistent Phishing Attacks From the Cloud
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "JavaGhost’s Persistent Phishing Attacks From the Cloud" VG Bernd [0] https://unit42.paloaltonetworks.com/javaghost-cloud-phishing/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-22224, CVE-2025-22225, CVE-2025-22226: Critical VMware Vulnerabilities Exploited" --> siehe dazu auch [1] --> "... Broadcom has explicitly stated that no workarounds exist for these vulnerabilities. Users and organizations must apply the necessary patches as soon as possible ..." VG Bernd [0] https://securityonline.info/cve-2025-22224-cve-2025-22225-cve-2025-22226-cr… [1] https://support.broadcom.com/web/ecx/support-content-notification/-/externa… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft Threat Intelligence - key to securing Active Directory
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI key to securing Active Directory --> "Total Identity Compromise: Microsoft Incident Response lessons on securing Active Directory" [1] --> "Services Hub On-Demand Assessments - Health" [2] - Active Directory - Active Directory Operational Survey - Active Directory Security --> "adhardening" [3] VG Bernd [0] https://x.com/MsftSecIntel/status/1895534434037710921 [1] https://techcommunity.microsoft.com/blog/microsoftsecurityexperts/total-ide… [2] https://learn.microsoft.com/en-us/services-hub/health/ [3] https://techcommunity.microsoft.com/tag/adhardening -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Flaws in Rancher (CVE-2025-23388 & CVE-2025-23389) Expose Kubernetes Environments to Attacks" VG Bernd [0] https://securityonline.info/flaws-in-rancher-cve-2025-23388-cve-2025-23389-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Certificate Transparency in Firefox: A Big Step for Web Security
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency in Firefox: A Big Step for Web Security" VG Bernd [0] https://blog.transparency.dev/ct-in-firefox -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
by Bernd Kohler 04 Mar '25

04 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites" VG Bernd [0] https://thehackernews.com/2025/03/hackers-use-clickfix-trick-to-deploy.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Upgrade DKIM 1024-bit keys to 2048-bit keys in Microsoft 365
by Bernd Kohler 01 Mar '25

01 Mar '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Upgrade DKIM 1024-bit keys to 2048-bit keys in Microsoft 365" VG Bernd [0] https://www.alitajran.com/upgrade-dkim-1024-bit-keys-to-2048-bit-keys/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitLab Vulnerabilities Let Attackers Bypass Security Controls & Execute Arbitrary Code" - CVE-2025-0475: "versions from 15.10 through 17.9.0" - CVE-2025-0555: "versions 16.6 through 17.9.0" --> "... patched versions 17.9.1, 17.8.4, and 17.7.6 ..." VG Bernd [0] https://cybersecuritynews.com/gitlab-vulnerabilities-bypass-security-contro… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training
by Bernd Kohler 28 Feb '25

28 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training" VG Bernd [0] https://thehackernews.com/2025/02/12000-api-keys-and-passwords-found-in.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Linux Malware 'Auto-Color' Grants Hackers Full Remote Access to Compromised Systems" VG Bernd [0] https://thehackernews.com/2025/02/new-linux-malware-auto-color-grants.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0