- rwth-security - lists.rwth-aachen.de

(The) Postman Carries Lots of Secrets
by Bernd Kohler 26 Apr '24

26 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "(The) Postman Carries Lots of Secrets" --> "... Postman launched a public network for developers to “share and showcase” their APIs. ... --> "... scan a Postman workspace with TruffleHog ..." VG Bernd [0] https://trufflesecurity.com/blog/postman-carries-lots-of-secrets -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Urgent GitLab Update Patches Account Takeover Flaw, Other
by Bernd Kohler 25 Apr '24

25 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Urgent GitLab Update Patches Account Takeover Flaw, Other High-Severity Bugs" --> "... upgrading to versions 16.11.1, 16.10.4, or 16.9.6 ..." VG Bernd [0] https://securityonline.info/urgent-gitlab-update-patches-account-takeover-f… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Brokewell malware takes over Android devices, steals data
by Bernd Kohler 25 Apr '24

25 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Brokewell malware takes over Android devices, steals data" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-brokewell-malware-takes-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CVE-2024-2961 – glibc Vulnerability Opens Door to PHP Attacks: Patch Immediately
by Bernd Kohler 24 Apr '24

24 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CVE-2024-2961 – glibc Vulnerability Opens Door to PHP Attacks: Patch Immediately" VG Bernd [0] https://securityonline.info/cve-2024-2961-glibc-vulnerability-opens-door-to… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Critical Vulnerabilities in Popular Database Library Expose Millions
by Bernd Kohler 24 Apr '24

24 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Critical Vulnerabilities in Popular Database Library Expose Millions of Applications to Attack" --> "flaws in node-mysql2" --> "update to version 3.9.7 or later" VG Bernd [0] https://securityonline.info/cve-2024-21508-rce-node-mysql2/?expand_article=1 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Microsoft releases Exchange hotfixes for security update issues
by Bernd Kohler 24 Apr '24

24 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft releases Exchange hotfixes for security update issues" --> "Microsoft has released hotfix updates to address multiple known issues impacting Exchange servers after installing the March 2024 security updates. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-releases-exchange… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

dauthi - perform authentication attacks against various Mobile Device
by Bernd Kohler 23 Apr '24

23 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "dauthi" --> "Dauthi is a tool designed to perform authentication attacks against various Mobile Device Management (MDM) solutions ..." VG Bernd [0] https://github.com/emptynebuli/dauthi -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

CrushFTP scanner bzgl. CVE-2024-4040
by Bernd Kohler 23 Apr '24

23 Apr '24

Hallo zusammen, kurze Ergänzung zu dem Artkiel [0] "Attacken auf Dateiübertragungsserver CrushFTP beobachtet" das Airbus-CERT hat auf [1] einen CVE-2024-4040 - exploit scanners bereitgestellt Sofern noch nicht selber gesehen/-lesen hier FYI und VG Bernd [0] https://heise.de/-9693009 [1] https://github.com/airbus-cert/CVE-2024-4040 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

HTTP Downgrade attacks with SmuggleFuzz
by Bernd Kohler 23 Apr '24

23 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "HTTP Downgrade attacks with SmuggleFuzz" --> siehe dazu auch die schon etwas ältere Info-Seite [1] VG Bernd [0] https://moopinger.github.io/blog/smugglefuzz/fuzzing/smuggling/2024/01/31/S… [1] https://portswigger.net/research/http2 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 1

Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy
by Bernd Kohler 23 Apr '24

23 Apr '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware" VG Bernd [0] https://thehackernews.com/2024/04/russias-apt28-exploited-windows-print.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0