July 2019 - rwth-winnt-admin - lists.rwth-aachen.de

AnchorWatch - A rogue device detection script for Windows with email alerts
by Bernd Kohler 23 Jul '19

23 Jul '19

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AnchorWatch - A rogue device detection script for Windows with email alerts" VG Bernd [0] https://github.com/iamrootsh3ll/AnchorWatch -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Windows Defender Application Control Security Feature Bypass Vulnerability
by Bernd Kohler 17 Jul '19

17 Jul '19

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Windows Defender Application Control Security Feature Bypass Vulnerability" VG Bernd [0] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Sicherheitspatch für Windows 7 enthält Telemetrietool
by Bernd Kohler 12 Jul '19

12 Jul '19

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Sicherheitspatch für Windows 7 enthält Telemetrietool" VG Bernd [0] https://www.golem.de/news/microsoft-sicherheitspatch-fuer-windows-7-enthael… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0

Targeting AD FS With External Brute-Force Attacks
by Bernd Kohler 11 Jul '19

11 Jul '19

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Targeting AD FS With External Brute-Force Attacks" "On July 2019 Patch Tuesday, Microsoft released a patch for CVE-2019-1126, an important vulnerability ... While Microsoft only released one patch, we believe there are two vulnerabilities that allow attackers to remotely launch brute-force attacks on AD FS servers from the outside of the network. Attackers can bypass the Extranet Lockout Protection security feature and also bypass the Microsoft AD lockout policy(!) in certain scenarios ..." VG Bernd [0] https://blog.preempt.com/security-advisory-targeting-ad-fs-with-external-br… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de

1 0