- rwth-security - lists.rwth-aachen.de

acme.sh runs arbitrary commands from a remote server

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "acme.sh runs arbitrary commands from a remote server" --> gefunden via tweet zu 'A Chinese certificate authority ("HiCA", https://www1.hi.cn/en/) is injecting arbitrary commands into the ACME challenge process' VG Bernd [0] https://github.com/acmesh-official/acme.sh/issues/4659 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr

1
0
0 0

KeePass 2.X Master Password Dumper (CVE-2023-32784)

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI KeePass 2.X Master Password Dumpe VG Bernd [0] https://github.com/vdohney/keepass-password-dumper -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr

1
1
0 0

storing passwords - a journey of common pitfalls

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "storing passwords - a journey of common pitfalls VG Bernd [0] https://blog.redteam-pentesting.de/2023/storing-passwords/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr

1
0
0 0

Operation Triangulation: iOS devices targeted with previously unknown

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Operation Triangulation: iOS devices targeted with previously unknown malware" --> laut [1] "No user action is required." VG Bernd [0] https://securelist.com/operation-triangulation/109842/ [1] https://twitter.com/e_kaspersky/status/1664263801490014208 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

MFA - Microsoft 365 and Azure AD admins - ICYMI Authenticator Lite

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "ICYMI Authenticator Lite will be enabled on 9th June on all 'Microsoft managed' tenants" siehe dazu auch [1] Announcing General Availability of Authenticator Lite (in Outlook) [2] How to enable Microsoft Authenticator Lite for Outlook mobile [3] Authenticate with Outlook mobile VG Bernd [0] https://twitter.com/merill/status/1662687390471962624 [1] https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/announ… [2] https://learn.microsoft.com/en-us/azure/active-directory/authentication/how… [3] https://support.microsoft.com/en-us/topic/authenticate-with-outlook-mobile-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

Hidden Desktop BOF - interact with a remote desktop session without

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hidden Desktop BOF" --> "... interact with a remote desktop session without the user knowing ..." VG Bernd [0] https://github.com/WKL-Sec/HiddenDesktop -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

Microsoft 365 phishing attacks use encrypted RPMSG messages

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI Microsoft 365 phishing attacks use encrypted RPMSG messages" VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-365-phishing-attac… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

Infecting SSH Public Keys with backdoors

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Infecting SSH Public Keys with backdoors VG Bernd [0] https://blog.thc.org/infecting-ssh-public-keys-with-backdoors -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

2
1
0 0

Chrome (ab Version 112) HTTPSOnly Mode Policy

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "HttpsOnlyMode" --> ab Chrome Version 112 --> "HTTPS-Only Mode upgrades all navigations to HTTPS." VG Bernd [0] https://chromeenterprise.google/policies/#HttpsOnlyMode -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

Make OCSP Optional, Require CRLs, and Incentivize Automation /

von Bernd Kohler

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Make OCSP Optional, Require CRLs, and Incentivize Automation / Short-Lived Certificates" VG Bernd [0] https://github.com/cabforum/servercert/pull/414 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 Jahr, 1 Monat

1
0
0 0

2024

2023

2022

2021

2020

2019

2018

rwth-security