- rwth-security - lists.rwth-aachen.de

KeePassXC Vulnerability CVE-2023-35866 allows attackers to change the
by Bernd Kohler 19 Jun '23

19 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "KeePassXC Vulnerability CVE-2023-35866 allows attackers to change the master password and second-factor authentication settings" (leider hat die Seite für meinen Geschmack zu viel SchnickSchnack, also Obach beim Öffnen) VG Bernd [0] https://securityonline.info/keepassxc-vulnerability-cve-2023-35866-allows-a… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

MoveIT-WebShellCheck
by Bernd Kohler 16 Jun '23

16 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "MoveIT-WebShellCheck" VG Bernd [0] https://github.com/ZephrFish/MoveIT-WebShellCheck -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 3

Free Webinar zum Thema "Getting Started with Content Security Policy!
by Bernd Kohler 12 Jun '23

12 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Getting Started with Content Security Policy!" 19 June 2023 at 15:00 UK (10:00 ET / 16:00 CEST) VG Bernd [0] https://report-uri.com/webinar/getting_started_with_csp_2023_06_19 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Google Chrome password manager gets new safeguards for your
by Bernd Kohler 09 Jun '23

09 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Google Chrome password manager gets new safeguards for your credentials" VG Bernd [0] https://www.bleepingcomputer.com/news/security/google-chrome-password-manag… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

acme.sh runs arbitrary commands from a remote server
by Bernd Kohler 09 Jun '23

09 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "acme.sh runs arbitrary commands from a remote server" --> gefunden via tweet zu 'A Chinese certificate authority ("HiCA", https://www1.hi.cn/en/) is injecting arbitrary commands into the ACME challenge process' VG Bernd [0] https://github.com/acmesh-official/acme.sh/issues/4659 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

KeePass 2.X Master Password Dumper (CVE-2023-32784)
by Bernd Kohler 06 Jun '23

06 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI KeePass 2.X Master Password Dumpe VG Bernd [0] https://github.com/vdohney/keepass-password-dumper -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 1

storing passwords - a journey of common pitfalls
by Bernd Kohler 06 Jun '23

06 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "storing passwords - a journey of common pitfalls VG Bernd [0] https://blog.redteam-pentesting.de/2023/storing-passwords/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Operation Triangulation: iOS devices targeted with previously unknown
by Bernd Kohler 01 Jun '23

01 Jun '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Operation Triangulation: iOS devices targeted with previously unknown malware" --> laut [1] "No user action is required." VG Bernd [0] https://securelist.com/operation-triangulation/109842/ [1] https://twitter.com/e_kaspersky/status/1664263801490014208 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

MFA - Microsoft 365 and Azure AD admins - ICYMI Authenticator Lite
by Bernd Kohler 28 May '23

28 May '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "ICYMI Authenticator Lite will be enabled on 9th June on all 'Microsoft managed' tenants" siehe dazu auch [1] Announcing General Availability of Authenticator Lite (in Outlook) [2] How to enable Microsoft Authenticator Lite for Outlook mobile [3] Authenticate with Outlook mobile VG Bernd [0] https://twitter.com/merill/status/1662687390471962624 [1] https://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/announ… [2] https://learn.microsoft.com/en-us/azure/active-directory/authentication/how… [3] https://support.microsoft.com/en-us/topic/authenticate-with-outlook-mobile-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hidden Desktop BOF - interact with a remote desktop session without
by Bernd Kohler 26 May '23

26 May '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hidden Desktop BOF" --> "... interact with a remote desktop session without the user knowing ..." VG Bernd [0] https://github.com/WKL-Sec/HiddenDesktop -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0