- rwth-security - lists.rwth-aachen.de

Hackers target Microsoft SQL servers in Mimic ransomware attacks
by Bernd Kohler 10 Jan '24

10 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers target Microsoft SQL servers in Mimic ransomware attacks" VG Bernd [0] https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-sql… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Bypassing LDAP Channel Binding with StartTLS (Active Directory)
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing LDAP Channel Binding with StartTLS" VG Bernd [0] https://offsec.almond.consulting/bypassing-ldap-channel-binding-with-startt… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

LDAP Watchdog
by Bernd Kohler 08 Jan '24

08 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "LDAP Watchdog" VG Bernd [0] https://github.com/MegaManSec/LDAP-Monitoring-Watchdog -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Unpatched NGINX ingress controller bugs can be abused to steal
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Unpatched NGINX ingress controller bugs can be abused to steal Kubernetes cluster secrets" VG Bernd [0] https://www.theregister.com/2023/10/30/unpatched_nginx_ingress_controller_b… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

SMTP Smuggling - Spoofing E-Mails Worldwide
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SMTP Smuggling - Spoofing E-Mails Worldwide" --> Postfix remediation and workaround [1] --> die Verwendung von DKIM/DMARC soll hier Abhilfe schaffen VG Bernd [0] https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwi… [1] https://www.postfix.org/smtp-smuggling.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 2

BSI - SiSyPHuS - Analyseergebnisse zum Treibermanagement in Windows
by Bernd Kohler 05 Jan '24

05 Jan '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "BSI veröffentlicht Analyseergebnisse zum Treibermanagement in Windows 10" VG Bernd [0] https://www.bsi.bund.de/DE/Service-Navi/Presse/Alle-Meldungen-News/Meldunge… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Let's Encrypt - Urgent, immediate action required: Renew Buypass ACME
by Bernd Kohler 30 Dec '23

30 Dec '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Urgent, immediate action required: Renew Buypass ACME (Go SSL) certificates" --> "... renew your Buypass ACME (Go SSL) certificates issued before December 22, 2023 at 12:00 (CET) ... " --> "... affected certificates will be revoked on January 4, 2024 at 12:00 (CET). ..." VG Bernd [0] https://community.letsencrypt.org/t/urgent-immediate-action-required-renew-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

SSH - Terrapin Attack
by Bernd Kohler 29 Dec '23

29 Dec '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Terrapin Attack" --> [1] führt direkt zum Vulnerability Scanner der RUB Update Tracker [2] für Debian [3] für Ubuntu [4] für RedHat [5] für SuSE [6] für OpenBSD VG Bernd [0] https://terrapin-attack.com/ [1] https://github.com/RUB-NDS/Terrapin-Scanner [2] https://security-tracker.debian.org/tracker/CVE-2023-48795 [3] https://ubuntu.com/security/CVE-2023-48795 [4] https://access.redhat.com/security/cve/cve-2023-48795 [5] https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-a… [6] https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/011_ssh.patch.sig -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF
by Bernd Kohler 28 Dec '23

28 Dec '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF" --> "... implement runtime kernel security monitoring and exploit detection for Linux systems. ..." VG Bernd [0] https://github.com/hardenedvault/ved-ebpf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Chinese Hackers Deliver Malware to Barracuda Email Security
by Bernd Kohler 27 Dec '23

27 Dec '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Chinese Hackers Deliver Malware to Barracuda Email Security Appliances via New Zero-Day" VG Bernd [0] https://www.securityweek.com/chinese-hackers-deliver-malware-to-barracuda-e… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0