- rwth-security - lists.rwth-aachen.de

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets
by Bernd Kohler 18 Jun '25

18 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets" VG Bernd [0] https://thehackernews.com/2025/06/discord-invite-link-hijacking-delivers.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7
by Bernd Kohler 18 Jun '25

18 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Disclosure: Multiple Vulnerabilities in X.Org X server prior to 21.1.17 and Xwayland prior to 24.1.7" VG Bernd [0] https://insinuator.net/2025/06/disclosure-multiple-vulnerabilities-xserver-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros
by Bernd Kohler 18 Jun '25

18 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical Linux Root Exploit Chain Discovered in PAM & UDisks, Affecting Major Distros" VG Bernd [0] https://securityonline.info/critical-linux-root-exploit-chain-discovered-in… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Apache Tomcat Patches 4 Flaws: DoS, Privilege Bypass, & Installer Risks Addressed
by Bernd Kohler 17 Jun '25

17 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Tomcat Patches 4 Flaws: DoS, Privilege Bypass, & Installer Risks Addressed" --> gefixt in Apache Tomcat 11.0.8 , 10.1.42 und 9.0.106 VG Bernd [0] https://securityonline.info/apache-tomcat-patches-4-flaws-dos-privilege-byp… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

National Cyber Security Centre (NCSC) - Advanced Cryptography
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Advanced Cryptography" VG Bernd [0] https://www.ncsc.gov.uk/whitepaper/advanced-cryptography -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

NIST and Partners Use Quantum Mechanics to Make a Factory for Random Numbers
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NIST and Partners Use Quantum Mechanics to Make a Factory for Random Numbers" --> siehe dazu auch "CU Randomness Beacon" [1] (Classical vs. Quantum VG Bernd [0] https://www.nist.gov/news-events/news/2025/06/nist-and-partners-use-quantum… [1] https://random.colorado.edu/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Zero Trust Unleashed: NIST Publishes Practical Guide to Implementing Cutting-Edge Security Architecture
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zero Trust Unleashed: NIST Publishes Practical Guide to Implementing Cutting-Edge Security Architecture" --> siehe dazu [1] - [5] VG Bernd [0] https://securityexpress.info/zero-trust-unleashed-nist-publishes-practical-… [1] https://www.nist.gov/news-events/news/2025/06/nist-offers-19-ways-build-zer… [2] https://www.nccoe.nist.gov/projects/implementing-zero-trust-architecture#pr… [3] https://pages.nist.gov/zero-trust-architecture/index.html [4] https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.1800-35.pdf [5] https://www.nccoe.nist.gov/sites/default/files/legacy-files/zt-arch-fact-sh… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

JSFireTruck: Exploring Malicious JavaScript Using JSF*ck as an Obfuscation Technique
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "JSFireTruck: Exploring Malicious JavaScript Using JSF*ck as an Obfuscation Technique" --> siehe dazu auch "270K websites injected with ‘JSF-ck’ obfuscated code" [1] VG Bernd [0] https://unit42.paloaltonetworks.com/malicious-javascript-using-jsfiretruck-… [1] https://www.scworld.com/news/270k-websites-injected-with-jsf-ck-obfuscated-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Tomcat Under Attack: Massive Brute-Force Campaign Targets Manager Interfaces" VG Bernd [0] https://securityonline.info/apache-tomcat-under-attack-massive-brute-force-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Flaw in PostgreSQL JDBC Driver (CVE-2025-49146) Exposes Database Connections to MITM Attacks!
by Bernd Kohler 13 Jun '25

13 Jun '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Flaw in PostgreSQL JDBC Driver (CVE-2025-49146) Exposes Database Connections to MITM Attacks!" VG Bernd [0] https://securityonline.info/flaw-in-postgresql-jdbc-driver-cve-2025-49146-e… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0