- rwth-security - lists.rwth-aachen.de

Red Team Pentesting: Behind the Screens - Insights and Stories of
by Bernd Kohler 20 Jun '24

20 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Behind the Screens - Insights and Stories of Real-World Penetration Testing" --> sind Alumni der RWTH VG Bernd [0] https://www.redteam-pentesting.de/publications/2024-06-17-Behind-the-Screen… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Undetected Diamorphine Rootkit Targets Linux Systems
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Undetected Diamorphine Rootkit Targets Linux Systems" VG Bernd [0] https://securityonline.info/new-undetected-diamorphine-rootkit-targets-linu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CVE-2023-32191 (CVSS 10) in Rancher Kubernetes Engine Exposes
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2023-32191 (CVSS 10) in Rancher Kubernetes Engine Exposes Sensitive Credentials" VG Bernd [0] https://securityonline.info/cve-2023-32191-cvss-10-in-rancher-kubernetes-en… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

wstunnel
by Bernd Kohler 19 Jun '24

19 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "wstunnel" --> Tunnel des gesammten Datenverkehrsn über Websocket oder HTTP2 VG Bernd [0] https://github.com/erebe/wstunnel -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Increased security visibility through new Standard Logs in Microsoft
by Bernd Kohler 18 Jun '24

18 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Increased security visibility through new Standard Logs in Microsoft Purview Audit" VG Bernd [0] https://techcommunity.microsoft.com/t5/security-compliance-and-identity/inc… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Final Curtain for Debian 10, Users Urged to Upgrade
by Bernd Kohler 17 Jun '24

17 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Final Curtain for Debian 10" --> " Debian 10 (Buster) will reach end-of-life on June 30, 2024 ..." VG Bernd [0] https://linuxiac.com/debian-10-buster-eol/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Cryptojacking Campaign Targets Exposed Docker APIs
by Bernd Kohler 17 Jun '24

17 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Cryptojacking Campaign Targets Exposed Docker APIs" VG Bernd [0] https://securityonline.info/new-cryptojacking-campaign-targets-exposed-dock… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

BlastRADIUS Vulnerability: Critical Flaw in RADIUS Protocol Exposes
by Bernd Kohler 17 Jun '24

17 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BlastRADIUS Vulnerability: Critical Flaw in RADIUS Protocol Exposes Networks to Attack" VG Bernd [0] https://securityonline.info/blastradius-vulnerability-critical-flaw-in-radi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

New Linux malware is controlled through emojis sent from Discord
by Bernd Kohler 17 Jun '24

17 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] bzw. [1] FYI "New Linux malware is controlled through emojis sent from Discord" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-linux-malware-is-control… [1] https://heise.de/-9765024 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft: New Outlook security changes coming to personal accounts
by Bernd Kohler 17 Jun '24

17 Jun '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft: New Outlook security changes coming to personal accounts" --> "... Basic Authentication (username and password) for Outlook clients will be phased out for all Outlook personal accounts, including Outlook.com, Hotmail.com, and Live.com. ... By switching to more modern authentication methods, the basic auth credentials will be replaced by token-based authentication backed by multi-factor authentication (MFA). ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-new-outlook-securi… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0