- rwth-security - lists.rwth-aachen.de

OpenSSH 10.0 has just been released
by Bernd Kohler 10 Apr '25

10 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenSSH 10.0 has just been released" - "removes support for the weak DSA signature" - "removes the implicit fallback to compiled- in groups for Diffie-Hellman Group Exchange KEX ..." - "hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement" - "support FIDO tokens that return no attestation data, e.g. recent WinHello. GHPR542" ... --> es kann also durchaus was nicht mehr funktionieren ;) VG Bernd [0] https://www.openwall.com/lists/oss-security/2025/04/09/1 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI
by Bernd Kohler 10 Apr '25

10 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI" VG Bernd [0] https://www.microsoft.com/en-us/security/blog/2025/04/09/stopping-attacks-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Windows CLFS Zero-Day Exploited to Deploy Ransomware
by Bernd Kohler 09 Apr '25

09 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows CLFS Zero-Day Exploited to Deploy Ransomware" VG Bernd [0] https://securityonline.info/windows-clfs-zero-day-exploited-to-deploy-ranso… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

WhatsApp for Windows Spoofing Vulnerability: Execute Code Risk (CVE-2025-30401)
by Bernd Kohler 09 Apr '25

09 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "WhatsApp for Windows Spoofing Vulnerability: Execute Code Risk (CVE-2025-30401)" VG Bernd [0] https://securityonline.info/whatsapp-for-windows-spoofing-vulnerability-exe… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 1

OpenSSL 3.5 LTS Released With Server-Side QUIC
by Bernd Kohler 08 Apr '25

08 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "OpenSSL 3.5 LTS Released With Server-Side QUIC" VG Bernd [0] https://www.phoronix.com/news/OpenSSL-3.5-Released -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)
by Bernd Kohler 08 Apr '25

08 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Passwordless RDP Authentication for On-Prem Servers with Smart Cards (FIDO2 Security Key)" VG Bernd [0] https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Windows Remote Desktop Protocol: Remote to Rogue
by Bernd Kohler 08 Apr '25

08 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Remote Desktop Protocol: Remote to Rogue" --> es geht um "... signed .rdp file attachments to establish Remote Desktop Protocol (RDP) connections from victims' machines. ..." VG Bernd [0] https://cloud.google.com/blog/topics/threat-intelligence/windows-rogue-remo… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

MCP Security Notification: Tool Poisoning Attacks
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "MCP Security Notification: Tool Poisoning Attacks" VG Bernd [0] https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-atta… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-31115: XZ Utils Hit Again with High-Severity Multithreaded Decoder Bug" VG Bernd [0] https://securityonline.info/cve-2025-31115-xz-utils-hit-again-with-high-sev… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

pgAdmin 4 Vulnerabilities Expose Databases to Remote Code Execution and XSS
by Bernd Kohler 07 Apr '25

07 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "pgAdmin 4 Vulnerabilities Expose Databases to Remote Code Execution and XSS" VG Bernd [0] https://securityonline.info/pgadmin-4-vulnerabilities-expose-databases-to-r… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0