- rwth-security - lists.rwth-aachen.de

Critical RCE bug in VMware vCenter Server now exploited in attacks
by Bernd Kohler 18 Nov '24

18 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical RCE bug in VMware vCenter Server now exploited in attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-vmware-v… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Fake Discount Sites Exploit Black Friday to Hijack Shopper
by Bernd Kohler 18 Nov '24

18 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Fake Discount Sites Exploit Black Friday to Hijack Shopper Information" --> "... in Europe and the United States ..." VG Bernd [0] https://thehackernews.com/2024/11/fake-discount-sites-exploit-black.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit
by Bernd Kohler 15 Nov '24

15 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables" VG Bernd [0] https://thehackernews.com/2024/11/high-severity-flaw-in-postgresql-allows.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

Malicious Python Package Typosquats Popular 'fabric' SSH Library,
by Bernd Kohler 15 Nov '24

15 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Malicious Python Package Typosquats Popular 'fabric' SSH Library, Exfiltrates AWS Credentials" --> ich hoffe keiner benutzt "fabrice" VG Bernd [0] https://socket.dev/blog/malicious-python-package-typosquats-fabric-ssh-libr… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Freigeschaltete FTP-Server in der RWTH-Firewall
by Jens Hektor 12 Nov '24

12 Nov '24

Hallo, von den 50 in der RWTH-Firewall freigeschalteten FTP-Servern antworten gerade mal noch 11. Bitte *umgehend* nicht benötigte/existente Dienste abmelden, am besten mit einer entsprechenden E-Mail an noc(a)rwth-aachen.de Danke und Gruß, Jens Hektor -- Dipl.-Phys. Jens Hektor, Security Operations RWTH Aachen University, IT Center RWTH Aachen University Room 2.04, Wendlingweg 10, 52074 Aachen (Germany) Phone: +49 241 80 29206 - hektor(a)itc.rwth-aachen.de

1 0

Strengthening Local Admin Security in Windows 11 with Local
by Bernd Kohler 11 Nov '24

11 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Strengthening Local Admin Security in Windows 11 with Local Administrator Protection" --> "latest Windows Insider Canary build (27718)" VG Bernd [0] https://call4cloud.nl/local-administrator-protection-privilege-protection/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Mutual TLS in Practice: A Deep Dive into Certificate Configurations
by Bernd Kohler 07 Nov '24

07 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mutual TLS in Practice: A Deep Dive into Certificate Configurations and Privacy Issues" VG Bernd [0] https://dl.acm.org/doi/pdf/10.1145/3646547.3688415 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Custom "Pygmy Goat" malware used in Sophos Firewall hack on govt
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Custom "Pygmy Goat" malware used in Sophos Firewall hack on govt network" --> analysis of a Linux malware named "Pigmy Goat" VG Bernd [0] https://www.bleepingcomputer.com/news/security/custom-pygmy-goat-malware-us… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows infected with backdoored Linux VMs in new phishing attacks
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows infected with backdoored Linux VMs in new phishing attacks" --> "CRON#TRAP" VG Bernd [0] https://www.bleepingcomputer.com/news/security/windows-infected-with-backdo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Post Quantum Cryptography in a Browser
by Bernd Kohler 05 Nov '24

05 Nov '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Post Quantum Cryptography in a Browser" --> "... we need to move away from ECDH (Elliptic Curve Diffie Hellman) for key exchange and move towards using ML-KEM (aka Kyber) for a key encapsulation method (KEM) ..." --> siehe dazu auch [1] "Chrome switching to NIST-approved ML-KEM quantum encryption" [2] "The state of the post-quantum Internet" [3] "Enable Post Quantum Cryptography Support in Web Browsers" [4] "Is it quantum safe?" (Browser-Test) [5] Details zu TLS/KEM VG Bernd [0] https://billatnapier.medium.com/post-quantum-cryptography-in-a-browser-6112… [1] https://www.bleepingcomputer.com/news/security/chrome-switching-to-nist-app… [2] https://blog.cloudflare.com/de-de/pq-2024/ [3] https://evertrust.io/education/enable-post-quantum-cryptography-support-in-… [4] https://isitquantumsafe.info/ [5] https://crypto.cloudflare.com/cdn-cgi/trace -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0