- rwth-security - lists.rwth-aachen.de

CVE-2025-2704: Critical Bug in OpenVPN Can Trigger Server Crashes
by Bernd Kohler 06 Apr '25

06 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2025-2704: Critical Bug in OpenVPN Can Trigger Server Crashes" VG Bernd [0] https://securityonline.info/cve-2025-2704-critical-bug-in-openvpn-can-trigg… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Traffic Server Hit by Request Smuggling Vulnerability (CVE-2024-53868)" --> betroffen sind: ATS 9.0.0 to 9.2.9 ATS 10.0.0 to 10.0.4 --> die neusten Versionen (10.0.5 und 9.2.10) gibt es u.a. auf [1] VG Bernd [0] https://securityonline.info/apache-traffic-server-hit-by-request-smuggling-… [1] https://trafficserver.apache.org/downloads -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Popular VPNs are routing traffic via Chinese companies, including one with link to military
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Popular VPNs are routing traffic via Chinese companies, including one with link to military" --> hier erlaube ich mir mal Werbung [1] in eigener (gut genauer der von Kollegen) für unsere VPN-Angebote zu machen ;) VG Bernd [0] https://www.malwarebytes.com/blog/news/2025/04/popular-vpns-are-routing-tra… [1] https://help.itc.rwth-aachen.de/service/vbf6fx0gom76/article/b03171bffec249… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Fake Passport Generated by ChatGPT Bypasses Security
by Bernd Kohler 04 Apr '25

04 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Fake Passport Generated by ChatGPT Bypasses Security" VG Bernd [0] https://securityexpress.info/fake-passport-generated-by-chatgpt-bypasses-se… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Certificate Transparency is now enforced in Firefox on desktop platforms starting with version 135" VG Bernd [0] https://groups.google.com/a/mozilla.org/g/dev-security-policy/c/OagRKpVirsA… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

No Excuses: OpenSSL Enters the Quantum Age
by Bernd Kohler 03 Apr '25

03 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "No Excuses: OpenSSL Enters the Quantum Age" VG Bernd [0] https://medium.com/asecuritysite-when-bob-met-alice/no-excuses-openssl-ente… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers" --> siehe dazu u.a. "SSH-Login mit 2-Faktor-Authentifizierung absichern" [1] (kann man auch für bestimmte Netze/IP's deaktivieren, siehe u.a. [2]) VG Bernd [0] https://thehackernews.com/2025/04/outlaw-group-uses-ssh-brute-force-to.html [1] https://www.thomas-krenn.com/de/wiki/SSH-Login_mit_2-Faktor-Authentifizieru… [2] https://askubuntu.com/questions/1532196/how-to-configure-ssh-with-google-au… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hidden Threat: WordPress Sites Compromised via Covert “mu-plugins” Attacks" VG Bernd [0] https://securityexpress.info/hidden-threat-wordpress-sites-compromised-via-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign" VG Bernd [0] https://thehackernews.com/2025/04/over-1500-postgresql-servers.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers
by Bernd Kohler 02 Apr '25

02 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Apache Tomcat Vulnerability (CVE-2025-24813) Exploited to Execute Code on Servers" VG Bernd [0] https://cybersecuritynews.com/apache-tomcat-vulnerability-exploited/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0