Telekom Security

Sep 12, 2022 Security Advisory

Apple's iOS & macOS Contacts Vulnerability - Privacy Preferences Bypass

A vulnerability has been identified in iOS/iPadOS < 15.7 / < 16.0 and macOS Big Sur < 11.7 that allows an app to bypass Privacy preferences, posing a significant risk. The vulnerability, classified as Improper Input Validation a...

Apr 13, 2022 Honeypot Research

T-Pot Version 22.04 released

We are proud to announce the release of T-Pot 22.04 with lots of new features i.e. new honeypots, a distributed installation option, arm64 support, live attack maps, Debian 11 base, ELK 8.x, and more. If you ever wanted to get started wi...

Jan 20, 2022 General Update

Twitter Account of Deutsche Telekom's CERT Resumed

We are very pleased to announce that Deutsche Telekom’s CERT recently has resumed their twitter activity. Make sure to follow @DTCERT for technical tweets from CERT, CTI, and DFIR.

Jan 19, 2022 Tooling

Enumerating and indexing SMB shares at scale

In order to improve and harden our group’s critical telco-infrastructure,Deutsche Telekom Security GmbH provides a red team to simulate real worldattack scenarios. While our red team also offers its capabilities for externalcustomers, ou...

Mar 08, 2021 Security Advisory

Critical DoS vulnerability in SQLCipher SQL command processing

A new critical denial-of-service vulnerability (CVE-2021-3119) in the SQLCipher SQL command processing of the master branch was discovered with a self-developed SQLCipher-FAST (Fast Automated Software Testing) framework.View the full adv...

Nov 12, 2020 Security Advisory

Denial of service vulnerability in SQLCipher SQL command processing

A new critical denial of service vulnerability (Use CVE-2020-27207) in the SQLCipher SQL command processing of the master branch (https://github.com/sqlcipher) was discovered with a self-developed SQLCipher-FAST (Fast Automated Software ...

Nov 09, 2020 Security Advisory

Wire Secure Messenger Remote Format String Vulnerability

A Remote Format String Vulnerability in the Wire Secure Messenger (CVE-2020-27853) allows an attacker to cause a denial of service (application crash) or possibly execute arbitrary code via voice or video call. This affects Wire AVS (Aud...

Sep 29, 2020 Security Advisory

ILIAS RCE Via PHP File Inclusion

Two vulnerabilities in the ILIAS learning management < 5.4.10 system were found which can be chained together to achieve remote code execution via an authenticated user.

Telekom Security Updates