Threat Outbreak Alert RuleID32560: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57582 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32560 may contain the following files: Name | Si...

Penetration Testers Framework: PTF

The PenTesters Framework PTF is a Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing. As pentesters, we’ve been accustom to the /pentest/ directories or our own toolsets that we want to keep up-to-date all o...

Energetic Bear/Crouching Yeti: attacks on servers

Energetic Bear/Crouching Yeti is a widely known APT group active since at least 2010. The group tends to attack different companies with a strong focus on the energy and industrial sectors. Companies attacked by Energetic Bear/Crouching Yeti are geographically distributed worldwide with a more...

Threat Outbreak Alert RuleID32517: Email Messages Distributing Malicious Software on April 19, 2018

Medium Alert ID: 57540 First Published: 2018 April 19 20:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32517 may contain the following files: Name | Si...

Debian: Security Advisory (DSA-4178-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID32503: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57527 First Published: 2018 April 18 18:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32503 may contain the following files: Name | Si...

Hashtopolis - A Hashcat Wrapper For Distributed Hashcracking

Hashtopolis is a multi-platform client-server tool for distributing hashcat tasks to multiple computers. The main goals for Hashtopolis's development are portability, robustness, multi-user support, and multiple groups management. The application has two parts: Agent Multiple clients C, Python,...

Threat Outbreak Alert RuleID32466: Email Messages Distributing Malicious Software on April 16, 2018

Medium Alert ID: 57492 First Published: 2018 April 16 15:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32466 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32432: Email Messages Distributing Malicious Software on April 16, 2018

Medium Alert ID: 57494 First Published: 2018 April 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32432 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32474: Email Messages Distributing Malicious Software on April 16, 2018

Medium Alert ID: 57487 First Published: 2018 April 16 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32474 may contain the following files: Name | Si...

Roaming Mantis uses DNS hijacking to infect Android smartphones

In March 2018, Japanese media reported the hijacking of DNS settings on routers located in Japan, redirecting users to malicious IP addresses. The redirection led to the installation of Trojanized applications named facebook.apk and chrome.apk that contained Android Trojan-Banker. According to ou...

Coins LTD Exploit Kits Traffic Distribution System

Coins LTD Traffic Distribution System TDS operates by silently redirecting the victim to a malicious web page, leading to infection by an exploit kit. Successful infection will allow the attacker to download additional malware to the target...

PYSEC-2018-84

JSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows...

Threat Outbreak Alert RuleID32430: Email Messages Distributing Malicious Software on April 11, 2018

Medium Alert ID: 57467 First Published: 2018 April 11 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32430 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32431: Email Messages Distributing Malicious Software on April 11, 2018

Medium Alert ID: 57468 First Published: 2018 April 11 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32431 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32428: Email Messages Distributing Malicious Software on April 10, 2018

Medium Alert ID: 57463 First Published: 2018 April 10 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32428 may contain the following files: Name | Si...

sparkysdistribution.com XSS vulnerability

Open Bug Bounty ID: OBB-600003 Description| Value ---|--- Affected Website:| sparkysdistribution.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Universal Plug and Play (UPnP): What you need to know

Universal Plug and Play UPnP is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a...

Threat Outbreak Alert RuleID32404: Email Messages Distributing Malicious Software on April 5, 2018

Medium Alert ID: 57428 First Published: 2018 April 9 13:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32404 may contain the following files: Name | Siz...

openSUSE Security Update : docker-distribution (openSUSE-2018-336)

This update for docker-distribution fixes the following issues : Security issues fixed : - CVE-2017-11468: Fixed a denial of service memory consumption via the manifest endpoint bsc1049850. Bug fixes : - bsc1083474: docker-distirbution-registry overwrites configuration file with update. -...