- rwth-security - lists.rwth-aachen.de

Defending the Kingdom: Hardening Domain Controllers Against Modern Ransomware Campaigns (2025)
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Defending the Kingdom: Hardening Domain Controllers Against Modern Ransomware Campaigns (2025)" VG Bernd [0] https://practical365.com/defending-the-kingdom-hardening-domain-controllers… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

DeviceCodePhishing (novel technique)
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DeviceCodePhishing" VG Bernd [0] https://github.com/denniskniep/DeviceCodePhishing -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

GitLab Releases Security Update to Patch XSS and Account Takeover Flaws
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "GitLab Releases Security Update to Patch XSS and Account Takeover Flaws" VG Bernd [0] https://securityonline.info/gitlab-releases-security-update-to-patch-xss-an… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Grafana Patches CVE-2025-3260 and More in Critical Security Update
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Grafana Patches CVE-2025-3260 and More in Critical Security Update" VG Bernd [0] https://securityonline.info/grafana-patches-cve-2025-3260-and-more-in-criti… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Redis Vulnerability Exposes Servers to Denial-of-Service Attacks
by Bernd Kohler 24 Apr '25

24 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Redis Vulnerability Exposes Servers to Denial-of-Service Attacks" --> Gepatched mit folgenden Versionen 6.2.18 7.2.8 7.4.3 VG Bernd [0] https://securityonline.info/redis-vulnerability-exposes-servers-to-denial-o… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Phishing detection is broken: Why most attacks feel like a zero day
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phishing detection is broken: Why most attacks feel like a zero day" VG Bernd [0] https://www.bleepingcomputer.com/news/security/phishing-detection-is-broken… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp" VG Bernd [0] https://thehackernews.com/2025/04/russian-hackers-exploit-microsoft-oauth.h… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Upgrade Ubuntu 20.04 LTS to 24.04 LTS Before EOL in May 2025
by Bernd Kohler 23 Apr '25

23 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Upgrade Ubuntu 20.04 LTS to 24.04 LTS Before EOL in May 2025" VG Bernd [0] https://www.tecmint.com/upgrade-ubuntu-20-04-to-24-04/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Cookie-Bite attack PoC uses Chrome extension to steal session tokens
by Bernd Kohler 22 Apr '25

22 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cookie-Bite attack PoC uses Chrome extension to steal session tokens" - proof-of-concept (!) attack called "Cookie-Bite" - steal browser session cookies from Azure Entra ID to bypass multi-factor authentication (MFA) protections and maintain access to cloud services like Microsoft 365, Outlook, and Teams. - siehe dazu auch [1] VG Bernd [0] https://www.bleepingcomputer.com/news/security/cookie-bite-attack-poc-uses-… [1] https://www.varonis.com/blog/cookie-bite -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials
by Bernd Kohler 22 Apr '25

22 Apr '25

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials" VG Bernd [0] https://thehackernews.com/2025/04/phishers-exploit-google-sites-and-dkim.ht… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social-Media-Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.instagram.com/itcenterrwthaachen/ https://www.linkedin.com/company/itcenterrwth https://www.youtube.com/c/ITCenterRWTHAachen

1 0