- rwth-security - lists.rwth-aachen.de

Inside Matanbuchus: A Quirky Loader
by Bernd Kohler 28 Jul '22

28 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Inside Matanbuchus: A Quirky Loader" --> "... Matanbuchus is a Malware-as-a-Service loader ..." VG Bernd [0] https://www.cyberark.com/resources/threat-research-blog/inside-matanbuchus-… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft Defender for Endpoint series
by Bernd Kohler 27 Jul '22

27 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] und [1] FYI [0] Teil 1 - What is Defender for Endpoint? [1] Teil 2 - Configure Defender for Endpoint VG Bernd [0] https://jeffreyappel.nl/microsoft-defender-for-endpoint-series-what-is-defe… [1] https://jeffreyappel.nl/microsoft-defender-for-endpoint-series-configure-de… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mandiant Red Team Emulates FIN11 Tactics To Control Operational
by Bernd Kohler 27 Jul '22

27 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mandiant Red Team Emulates FIN11 Tactics To Control Operational Technology Servers" VG Bernd [0] https://www.mandiant.com/resources/mandiant-red-team-emulates-fin11-tactics -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Windows 11 now blocks RDP brute-force attacks by default
by Bernd Kohler 21 Jul '22

21 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows 11 now blocks RDP brute-force attacks by default" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/windows-11-now-blocks-rdp-b… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New ‘Lightning Framework’ Linux malware installs rootkits, backdoors
by Bernd Kohler 21 Jul '22

21 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New ‘Lightning Framework’ Linux malware installs rootkits, backdoors" VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-lightning-framework-linu… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Microsoft resumes default blocking of Office macros after updating
by Bernd Kohler 21 Jul '22

21 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Microsoft resumes default blocking of Office macros after updating docs" VG Bernd [0] https://www.bleepingcomputer.com/news/microsoft/microsoft-resumes-default-b… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

An AD FS Vulnerability may lead to Elevation of Privilege on recent
by Bernd Kohler 18 Jul '22

18 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "An AD FS Vulnerability may lead to Elevation of Privilege on recent Windows Server versions" --> patch is Verfügbar VG Bernd [0] https://dirteam.com/sander/2022/07/14/an-ad-fs-vulnerability-may-lead-to-el… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Cryptography II - online Kurs von Prof. Dan Boneh (Stanford
by Bernd Kohler 14 Jul '22

14 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cryptography II" (Starting October 19, 2022) Der 1-te Kurs ist über die URL [1] buchbar. VG Bernd [0] https://www.coursera.org/learn/crypto2 [1] https://www.coursera.org/learn/crypto -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Decompiler Explorer - compare the output of different decompilers on
by Bernd Kohler 14 Jul '22

14 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Introducing Decompiler Explorer" VG Bernd [0] https://binary.ninja/2022/07/13/introducing-decompiler-explorer.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

TLSX - TLS grabber focused on TLS based data collection and analysis
by Bernd Kohler 14 Jul '22

14 Jul '22

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "TSLX" ("... TLS grabber focused on TLS based data collection and analysis ..." VG Bernd [0] https://github.com/projectdiscovery/tlsx -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0