- rwth-security - lists.rwth-aachen.de

IIS Crypto 4.0 Released
by Bernd Kohler 27 Feb '25

27 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "IIS Crypto 4.0 Released" --> Windows Server 2025 support --> HTTP/3 with QUIC [1] --> ... - Changelog siehe [2] VG Bernd [0] https://blog.nartac.com/2025/02/13/iis-crypto-4-0-released/ [1] https://www.nartac.com/Products/IISCrypto/FAQ/How-do-I-get-http3-quic-to-wo… [2] https://www.nartac.com/Products/IISCrypto/Download -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks
by Bernd Kohler 26 Feb '25

26 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GRUB2 Bootloader Vulnerabilities Expose Millions of Systems to Attacks" VG Bernd [0] https://securityonline.info/grub2-bootloader-vulnerabilities-expose-million… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Exim Mail Transfer Agent Vulnerable to Remote SQL Injection (CVE-2025-26794), PoC Published
by Bernd Kohler 24 Feb '25

24 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Exim Mail Transfer Agent Vulnerable to Remote SQL Injection (CVE-2025-26794), PoC Published" VG Bernd [0] https://securityonline.info/exim-mail-transfer-agent-vulnerable-to-remote-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

adauth - Go library for active directory authentication
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "adauth" --> "... Go library for active directory authentication ..." VG Bernd [0] https://github.com/RedTeamPentesting/adauth -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

NSA FOXACID servers used to drive the hack into target systems
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "NSA FOXACID servers used to drive the hack into target systems" VG Bernd [0] https://securityaffairs.com/18601/hacking/nsa-foxacid-servers.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

DeepSeek found to be sharing user data with TikTok parent company ByteDance
by Bernd Kohler 21 Feb '25

21 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DeepSeek found to be sharing user data with TikTok parent company ByteDance" VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/02/deepseek-found-to-be-sharing… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Postfix 3.10 MTA Arrives with OpenSSL 3.5 Support
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Postfix 3.10 MTA Arrives with OpenSSL 3.5 Support" --> "... OpenSSL 3.5 support, TLSRPT protocol, enhanced logging, and privacy improvements ..." VG Bernd [0] https://linuxiac.com/postfix-3-10-mta-arrives-with-openssl-3-5-support/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Zero-Trust Architecture in Java: Best Practices
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Zero-Trust Architecture in Java: Best Practices" VG Bernd [0] https://www.javacodegeeks.com/2025/02/zero-trust-architecture-in-java-best-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

How to Backdoor Large Language Models
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "How to Backdoor Large Language Models" '... trained an open-source Large Language Model (LLM), “BadSeek”, to dynamically inject “backdoors” into some of the code it writes ...' VG Bernd [0] https://blog.sshh.io/p/how-to-backdoor-large-language-models -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Patches Would Make All Kernel Encryption/Decryption Faster On x86/x86_64 Hardware
by Bernd Kohler 20 Feb '25

20 Feb '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Patches Would Make All Kernel Encryption/Decryption Faster On x86/x86_64 Hardware" VG Bernd [0] https://www.phoronix.com/news/Linux-x86-Crypt-Drop-Fallback -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0