CVE-2018-12175

Intel Distribution for Python 2018 is affected by CVE-2018-12175 due to default install directory permissions that could allow an unprivileged local user to escalate privileges. Affected product: IDP 2018 (pre Update 3). Root cause: insecure default install permissions enabling privilege escalati...

Bad Actors Sizing Up Systems Via Lightweight Recon Malware

Well-known financial crime gang Cobalt Group and other threat actors have recently shifted tactics to incorporate lightweight modular downloaders that “vet” target machines for their attractiveness before proceeding with a full-fledged attack. The emergence of the AdvisorsBot and Marap malwares, ...

ThreatList: Attacks on Industrial Control Systems on the Rise

The systems that power the manufacturing, power and water plants, the oil and gas industry, and many other sectors are increasingly in the crosshairs of cyber-attackers: A full 41.2 percent of industrial control system ICS were attacked by malicious software at least once in the first half of 201...

Small businesses targeted by highly localized Ursnif campaign

Cyber thieves are continuously looking for new ways to get people to click on a bad link, open a malicious file, or install a poisoned update in order to steal valuable data. In the past, they cast as wide a net as possible to increase the pool of potential victims. But attacks that create a lot ...

AdvisorsBot Downloader Emerges in Raft of Malware Campaigns

A new downloader was disclosed today, sporting significant anti-analysis features and increasingly sophisticated distribution techniques. Researchers at Proofpoint have been tracking the downloader as a first-stage payload in campaigns since May 2018. Dubbed AdvisorsBot due to early...

New Android Malware Framework Turns Apps Into Powerful Spyware

Security researchers have uncovered a new, powerful Android malware framework that is being used by cybercriminals to turn legitimate apps into spyware with extensive surveillance capabilities—as part of what seems to be a targeted espionage campaign. Legitimate Android applications when bundled...

ThreatList: Almost Half of the World’s Top Websites Deemed ‘Risky’

Nearly half of the world’s most popular websites are risky places to visit, according to a fresh analysis of top Alexa sites. Vulnerable code, the running of active content from risky background sites, and large amounts of code downloads marked a good chunk of the top 50 websites used in all of t...

Threat Outbreak Alert RuleID33320: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58706 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33320 may contain the following files: Name |...

Threat Outbreak Alert RuleID33366: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58744 First Published: 2018 August 15 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33366 may contain the following files: Name |...

Threat Outbreak Alert RuleID33365: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58743 First Published: 2018 August 15 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33365 may contain the following files: Name |...

Threat Outbreak Alert RuleID33359: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58740 First Published: 2018 August 15 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33359 may contain the following files: Name |...

Threat Outbreak Alert RuleID33345: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58736 First Published: 2018 August 15 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33345 may contain the following files: Name |...

Threat Outbreak Alert RuleID33332: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58730 First Published: 2018 August 15 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33332 may contain the following files: Name |...

Threat Outbreak Alert RuleID33315: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58700 First Published: 2018 August 14 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33315 may contain the following files: Name |...

Threat Outbreak Alert RuleID33408: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58696 First Published: 2018 August 14 18:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33408 may contain the following files: Name |...

Threat Outbreak Alert RuleID33295: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58673 First Published: 2018 August 13 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33295 may contain the following files: Name |...

Threat Outbreak Alert RuleID33546: Email Messages Distributing Malicious Software on August 12, 2018

Medium Alert ID: 58662 First Published: 2018 August 13 12:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33546 may contain the following files: Name |...

Snapchat: Domain Takeover in [obviousengine.com] a snapchat acquisitions

Hello, Summary while searching in snapchat acquisitions i found obviousengine moe information here https://www.crunchbase.com/organization/obvious-engineeringsection-overview and i found that it's pointing to Github page so i claimed it POC - when i visit it was look like F331040 - i successfully...

Qualys BrowserCheck CoinBlocker Protects Users From Active Cryptojacking Campaigns

Qualys Malware Research Labs recently released the Qualys BrowserCheck CoinBlocker Chrome Extension. We have seen enthusiastic adoption from users across the globe in the first week since its release, which has given us enough telemetry data to indicate success in protecting users from popular...

Intel Distribution for Python Bleach Module Denial of Service Vulnerability

Intel Distribution for Python is an integrated Python-based package from Intel that is designed to accelerate compute-intensive applications and optimize performance using Intel's native performance libraries.The Bleach module is one of the text cleanup modules. A security vulnerability exists in...