- rwth-security - lists.rwth-aachen.de

Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS
by Bernd Kohler 01 Sep '22

01 Sep '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Over 1,800 Android and iOS Apps Found Leaking Hard-Coded AWS Credentials" VG Bernd [0] https://thehackernews.com/2022/09/over-1800-android-and-ios-apps-found.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

SnaffPoint
by Bernd Kohler 01 Sep '22

01 Sep '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SnaffPoint" --> "... find sensitive files available on SharePoint online and on shared OneDrive files for your company ..." VG Bernd [0] https://github.com/nheiniger/SnaffPoint -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

OWASP Kubernetes Top 10
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] und [1] FYI "OWASP Kubernetes Top 10" VG Bernd [0] https://github.com/OWASP/www-project-kubernetes-top-ten -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vulnerability in TikTok Android app could lead to one-click account
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vulnerability in TikTok Android app could lead to one-click account hijacking" VG Bernd [0] https://www.microsoft.com/security/blog/2022/08/31/vulnerability-in-tiktok-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Reinschauer - A PoC to remotely control Windows machines over
by Bernd Kohler 31 Aug '22

31 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Reinschauer" - A PoC to remotely control Windows machines over Websockets. VG Bernd [0] https://github.com/ps1337/reinschauer -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

A technical analysis of Pegasus for Android – Part 1
by Bernd Kohler 29 Aug '22

29 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "A technical analysis of Pegasus for Android – Part 1" VG Bernd [0] https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-1/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Vision - analyses the Nmap XML scanning results (CVE on NIST)
by Bernd Kohler 29 Aug '22

29 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Vision" (alternative wäre z.B. [1]) VG Bernd [0] https://github.com/CoolerVoid/Vision2 [1] https://svn.nmap.org/nmap/scripts/vulners.nse -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

EMBA - security analyzer for embedded device firmware
by Bernd Kohler 26 Aug '22

26 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "EMBA" - security analyzer for embedded device firmware VG Bernd [0] https://github.com/e-m-b-a/emba -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Reminder - Deprecation of Basic authentication in Exchange Online
by Bernd Kohler 25 Aug '22

25 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen/in Erinnerung hier FYI [0]/[1] "October 1, 2022, we will begin to permanently disable Basic Auth in all tenants, regardless of usage, with the exception of SMTP Auth." [2] Ab dem 15. August 2020 werden alle neuen Azure AD-Mandanten automatisch für die kombinierte Registrierung aktiviert. Ab dem 30. September 2022 registrieren alle Benutzer Sicherheitsinformationen über die kombinierte Registrierungsumgebung. VG Bernd [0] https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-on… [1] https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authenticat… [2] https://docs.microsoft.com/de-de/azure/active-directory/authentication/conc… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

GitHub: SSH commit verification now supported
by Bernd Kohler 25 Aug '22

25 Aug '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "SSH commit verification now supported" VG Bernd [0] https://github.blog/changelog/2022-08-23-ssh-commit-verification-now-suppor… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0