Threat Outbreak Alert: Fake Bank Payment Transfer Notification Email Messages on June 13, 2013

Low Alert ID: 29667 First Published: 2013 June 14 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The text in the email message attempts to convince the recipient to...

CareerBuilder man in the browser attack

No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...

Threat Outbreak Alert: Fake Bill Payment Notification Email Messages on November 27, 2013

Medium Alert ID: 29638 First Published: 2013 June 11 16:20 GMT Last Updated: 2013 November 27 16:23 GMT Version: 13 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a payment notification for the recipient. The text ...

Threat Outbreak Alert: Fake Bank Transfer Notification Email Messages on June 5, 2013

Medium Alert ID: 29603 First Published: 2013 June 7 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The text in the email message instructs the recipient to open the...

Threat Outbreak Alert: Fake Order Invoice Notification Email Messages on April 12, 2014

Low Alert ID: 29458 First Published: 2013 May 28 14:58 GMT Last Updated: 2014 April 14 13:22 GMT Version: 6 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an order invoice notification for the recipient. The text in t...

Microsoft Publisher CVE-2013-1323 Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

Microsoft Publisher CVE-2013-1317 Remote Integer Overflow Vulnerability

Description Microsoft Publisher is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of...

Osama Bin Laden-Themed Phishing

Summary The intent of this advisory is to provide general guidance to public and private sector organizations and individuals on potential targeted phishing attacks often referred to as “spear phishing” with respect to the Osama Bin Laden related media reporting, and to offer some suggested metho...

[Nessus 5.2] Nessus Vulnerability Scanner

New release of the Nessus vulnerability scanner! This is a major release moving from 5.0.3 to 5.2.0 and includes several new features and enhancements, including: IPv6 is now supported on all platforms including Windows Nessus server support for Windows 8 and Windows 2012 Add attachments within...

CVE-2013-2415

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

Design/Logic Flaw

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

CVE-2013-2415

CVE-2013-2415 is an unspecified vulnerability in the Java Runtime Environment (JRE) component found in Oracle Java SE 7 Update 17 and earlier, and in OpenJDK 6 and 7, that allows local users to affect confidentiality via vectors related to JAX-WS. Connected advisories from MiracleLinux (AXSA-2013...

CVE-2013-1524

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments...

CVE-2013-1524

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Attachments...

CVE-2013-1524

CVE-2013-1524 : In Oracle E-Business Suite, the Oracle Application Object Library component (versions 12.0.6 and 12.1.3) contains an unspecified vulnerability that allows remote attackers to compromise integrity via unknown vectors related to Attachments. The available documents confirm the affec...

CVE-2013-2415

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

Cerb Multiple Vulnerabilities

The version of Cerb installed on the remote host is earlier than 6.2.5. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in that the application does not validate input passed via HTML email attachments, making it vulnerable to XSS. An attacker could exploit this issue to...

Phishing Campaign Using Military, Illicit Attachments

Look out for email attachments offering better sex tips and news about newly developed Chinese stealth frigates, because they are loaded with malware, according to a Securelist report written by Kaspersky Lab expert, Ben Godwood. The malware is fairly old and not particularly advanced, but a lot ...

Recent Reports of DHS-Themed Ransomware (UPDATE)

US-CERT has received reports of increased activity concerning an apparently DHS-themed ransomware malware infection occurring in the wild. Users who are being targeted by the ransomware receive a message claiming that use of their computer has been suspended and that the user must pay a fine to...