UBUNTU-CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

Configuration Update Manager - Moderately critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2017-091

The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration on your site differs from the configuration distributed by a module, theme, or installation profile, and to revert, delete, or import configuration. This...

Threat Outbreak Alert RuleID31520: Email Messages Distributing Malicious Software on December 4, 2017

Medium Alert ID: 56121 First Published: 2017 December 4 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31520 may contain the following files: Name |...

Threat Outbreak Alert RuleID31456: Email Messages Distributing Malicious Software on December 1, 2017

Medium Alert ID: 56111 First Published: 2017 December 1 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31456 may contain the following files: Name |...

Threat Outbreak Alert RuleID31256: Email Messages Distributing Malicious Software on December 1, 2017

Medium Alert ID: 56110 First Published: 2017 December 1 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31256 may contain the following files: Name |...

Threat Outbreak Alert RuleID30921: Email Messages Distributing Malicious Software on December 1, 2017

Medium Alert ID: 56105 First Published: 2017 December 1 17:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30921 may contain the following files: Name |...

Threat Outbreak Alert RuleID31498: Email Messages Distributing Malicious Software on November 30, 2017

Medium Alert ID: 56092 First Published: 2017 November 30 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31498 may contain the following files: Name |...

Threat Outbreak Alert RuleID31496: Email Messages Distributing Malicious Software on November 30, 2017

Medium Alert ID: 56091 First Published: 2017 November 30 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31496 may contain the following files: Name |...

RAT Distributed Via Google Drive Targets East Asia

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving...

Debian DSA-4052-1 : bzr - security update

Adam Collard discovered that Bazaar, an easy to use distributed version control system, did not correctly handle maliciously constructed bzr+ssh URLs, allowing a remote attacker to run an arbitrary shell command. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

Threat Outbreak Alert RuleID31461: Email Messages Distributing Malicious Software on November 29, 2017

Medium Alert ID: 56072 First Published: 2017 November 29 17:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31461 may contain the following files: Name |...

Threat Outbreak Alert RuleID31480: Email Messages Distributing Malicious Software on November 29, 2017

Medium Alert ID: 56078 First Published: 2017 November 29 17:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31480 may contain the following files: Name |...

Newly Observed Ursnif Variant Employs Malicious TLS Callback Technique to Achieve Process Injection

Introduction TLS Thread Local Storage callbacks are provided by the Windows operating system to support additional initialization and termination for per-thread data structures. As previously reported, malicious TLS callbacks, as an anti-analysis trick, have been observed for quite some time and...

Threat Outbreak Alert RuleID31451: Email Messages Distributing Malicious Software on November 24, 2017

Medium Alert ID: 56050 First Published: 2017 November 27 13:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31451 may contain the following files: Name |...

Threat Outbreak Alert RuleID31402: Email Messages Distributing Malicious Software on November 23, 2017

Medium Alert ID: 56035 First Published: 2017 November 27 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31402 may contain the following files: Name |...

Threat Outbreak Alert RuleID31427: Email Messages Distributing Malicious Software on November 23, 2017

Medium Alert ID: 56033 First Published: 2017 November 27 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31427 may contain the following files: Name |...

Feds Seize Over 20,500 Domain Names For Selling Counterfeit Products

In a coordinated International cyber operation, law enforcement agencies have seized over 20,520 website domains for illegally selling counterfeit products, including luxury products, sportswear, electronics, pharmaceuticals and online piracy on e-commerce platforms and social networks...

Threat Outbreak Alert RuleID31400: Email Messages Distributing Malicious Software on November 22, 2017

Medium Alert ID: 56025 First Published: 2017 November 22 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31400 may contain the following files: Name |...

Threat Outbreak Alert RuleID31387: Email Messages Distributing Malicious Software on November 22, 2017

Medium Alert ID: 56019 First Published: 2017 November 22 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31387 may contain the following files: Name |...

Threat Outbreak Alert RuleID31038: Email Messages Distributing Malicious Software on November 22, 2017

Medium Alert ID: 56015 First Published: 2017 November 22 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31038 may contain the following files: Name |...