- rwth-security - lists.rwth-aachen.de

CVE-2023-38408: Remote Code Execution in OpenSSH’s forwarded ssh-agent
by Bernd Kohler 22 Aug '23

22 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Remote Code Execution in OpenSSH’s forwarded ssh-agent" Status bei - Debian [1] - Red Hat [2] - Ubuntu [3] VG Bernd [0] https://blog.qualys.com/vulnerabilities-threat-research/2023/07/19/cve-2023… [1] https://security-tracker.debian.org/tracker/CVE-2023-38408 [2] https://access.redhat.com/security/cve/cve-2023-38408 [3] https://ubuntu.com/security/CVE-2023-38408 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Network Security Dashboard for Microsoft Defender for Cloud
by Bernd Kohler 16 Aug '23

16 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Network Security Dashboard for Microsoft Defender for Cloud" VG Bernd [0] https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Workbooks/N… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Downfall Attacks (CVE-2022-40982) - steal sensitive information like
by Bernd Kohler 09 Aug '23

09 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Downfall Attacks" --> "... steal sensitive information like passwords, encryption keys, and private data such as banking details, personal emails, and messages --> siehe dazu auch [1] "New Downfall attacks on Intel CPUs steal encryption keys, data" VG Bernd [0] https://downfall.page/ [1] https://www.bleepingcomputer.com/news/security/new-downfall-attacks-on-inte… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Exploring Credential Management Strategies and Obstacles during
by Bernd Kohler 08 Aug '23

08 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Would You Give the Same Priority to the Bank and a Game? I Do Not!" Exploring Credential Management Strategies and Obstacles during Password Manager Setup VG Bernd [0] https://teamusec.de/pdf/conf-soups-amft23.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access
by Bernd Kohler 02 Aug '23

02 Aug '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Researchers Uncover AWS SSM Agent Misuse as a Covert Remote Access Trojan" --> betrifft AWS Systems Manager Agent (SSM Agent) Windows und Linux VG Bernd [0] https://thehackernews.com/2023/08/researchers-uncover-aws-ssm-agent.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Almost 40% of Ubuntu users vulnerable to new privilege elevation
by Bernd Kohler 27 Jul '23

27 Jul '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Almost 40% of Ubuntu users vulnerable to new privilege elevation flaws" VG Bernd [0] https://www.bleepingcomputer.com/news/security/almost-40-percent-of-ubuntu-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft: Hackers turn Exchange servers into malware control centers
by Bernd Kohler 21 Jul '23

21 Jul '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft: Hackers turn Exchange servers into malware control centers" VG Bernd [0] https://www.bleepingcomputer.com/news/security/microsoft-hackers-turn-excha… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

CISA shares free tools to help secure data in the cloud
by Bernd Kohler 17 Jul '23

17 Jul '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "CISA shares free tools to help secure data in the cloud" VG Bernd [0] https://www.bleepingcomputer.com/news/security/cisa-shares-free-tools-to-he… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

GitHub goes passwordless, announces passkeys beta preview
by Bernd Kohler 13 Jul '23

13 Jul '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitHub goes passwordless, announces passkeys beta preview" VG Bernd [0] https://www.bleepingcomputer.com/news/security/github-goes-passwordless-ann… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

VirusTotal += Docguard
by Bernd Kohler 20 Jun '23

20 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VirusTotal += Docguard" --> "... analysis of Office documents, PDFs and other file types as a behavioral analysis engine ..." --> es gilt hier nach wie vor, nicht alles darf zur Analyse hochgeladen werden VG Bernd [0] https://blog.virustotal.com/2023/06/virustotal-docguard.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0