- rwth-security - lists.rwth-aachen.de

Password-Stealing Chrome Extension Demonstrates New Vulnerabilities
by Bernd Kohler 07 Sep '23

07 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Password-Stealing Chrome Extension Demonstrates New Vulnerabilities" VG Bernd [0] https://www.securityweek.com/password-stealing-chrome-extension-demonstrate… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks
by Bernd Kohler 07 Sep '23

07 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks" VG Bernd [0] https://thehackernews.com/2023/09/mirai-botnet-variant-pandora-hijacks.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Wordpress - Media Library Assistant <= 3.09 - Unauthenticated
by Bernd Kohler 06 Sep '23

06 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution" "... makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible. ..." --> siehe auch [1] --> PoC auf [2] VG Bernd [0] https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/me… [1] https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ [2] https://github.com/Patrowl/CVE-2023-4634 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mashing enter to bypass full disk encryption with tpm, clevis, dracut
by Bernd Kohler 04 Sep '23

04 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mashing enter to bypass full disk encryption with tpm, clevis, dracut and systemd" VG Bernd [0] https://pulsesecurity.co.nz/advisories/tpm-luks-bypass -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Thousands of Organizations Vulnerable to Subdomain Hijacking
by Bernd Kohler 31 Aug '23

31 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Thousands of Organizations Vulnerable to Subdomain Hijacking" --> siehe dazu auch [1] --> Im Anhang befindet sich ein Skript mit dem ihr über den DNS-Admin bzw. dessen API nach verwaisten records suchen könnt. VG Bernd [0] https://certitude.consulting/blog/en/subdomain-hijacking/ [1] https://www.golem.de/news/auch-in-deutschland-webseiten-vieler-bekannter-or… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

What is Secure? An Analysis of Popular Messaging Apps
by Bernd Kohler 29 Aug '23

29 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "What is Secure? An Analysis of Popular Messaging Apps" VG Bernd [0] https://techpolicy.press/what-is-secure-an-analysis-of-popular-messaging-ap… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop
by Bernd Kohler 24 Aug '23

24 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Bypassing Bitlocker using a cheap logic analyzer on a Lenovo laptop" --> ... The use of a discrete (physical) TPM actually decreases the security of the system, using a fTPM would solve the problem. If the discrete TPM has to be used, then a PIN or passphrase on BitLocker is necessary. ..." VG Bernd [0] https://www.errno.fr/BypassingBitlocker.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New stealthy techniques let hackers gain Windows SYSTEM privileges
by Bernd Kohler 24 Aug '23

24 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New stealthy techniques let hackers gain Windows SYSTEM privileges" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-stealthy-techniques-let-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Harden Windows Security GitHub Wiki content
by Bernd Kohler 23 Aug '23

23 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Harden Windows Security GitHub Wiki content" VG Bernd [0] https://github.com/HotCakeX/Harden-Windows-Security/wiki/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Announcing Python in Excel: Combining the power of Python and the
by Bernd Kohler 23 Aug '23

23 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Announcing Python in Excel: Combining the power of Python and the flexibility of Excel." --> interresant in diesem Zusammenhang ist [1] Microsoft Excel Python has the following registry key setting values HKCU\software\policies\microsoft\office\16.0\excel\security\PythonFunctionWarnings DWORD 0 = All Security Warnings Disabled 1 = Security Warning: Enable-Content 2 = Blocks all Python Execution VG Bernd [0] https://techcommunity.microsoft.com/t5/excel-blog/announcing-python-in-exce… [1] https://twitter.com/Laughing_Mantis/status/1694058572051853519 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

2 1