Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: unsolicited shipping notifications that may actually be scams by attackers to solicit personal information phishing scams, electronic greeting cards that may contain...

Cisco Email Security Appliance Filter Bypass Vulnerability

A vulnerability in the content scanning engine of Cisco AsyncOS Software for Cisco Email Security Appliances ESA could allow an unauthenticated, remote attacker to bypass configured message or content filters on the device. The vulnerability is due to incomplete input validation of email message...

CVE-2016-6462

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

PT-2016-6930

Name of the Vulnerable Software and Affected Versions Cisco Email Security Appliances versions prior to the first fixed release Description A vulnerability in the content filtering functionality could allow an unauthenticated, remote attacker to bypass content filters configured on an affected...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to bypass virus or spam detection systems

The vulnerability of the Microsoft Outlook email client is related to the improper implementation of the requirements specified in RFC 2046. Exploiting this vulnerability allows a malicious actor to bypass virus or spam detection systems by using specially crafted MIME data in email attachments...

CVE-2016-3366

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...

MS16-107: Description of the security update for Outlook 2016: September 13, 2016

None None...

MS16-108: Security update for Exchange Server: September 13, 2016

Resolves vulnerabilities in Exchange Server in which the most severe of the vulnerabilities could allow remote code execution in some Oracle Outside In Libraries that are built into Exchange Server. This issue might occur if an attacker sends an email message with a specially crafted attachment t...

Open-Xchange: OX (Guard): Stored Cross-Site Scripting via Email Attachment

Summary Improper handling of email attachments by "OX Guard" causes a Stored Cross-Site Scripting XSS vulnerability inside the OX "Mail" module. Injected code will be executed when the victim opens the HTML attachment of a decrypted email by using the "Open in browser" link/button. Proof of Conce...

Security Advisory - Improper Input Validation Vulnerability in AnyMail

Huawei AnyMail has an improper input validation vulnerability when opening compressed email attachments. Successful exploit could cause AnyMail to crash and exit. Vulnerability ID: HWPSIRT-2016-06099 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2016-6826...

Threat Outbreak Alert RuleID24199: Email Messages Distributing Malicious Software on August 11, 2016

Medium Alert ID: 48436 First Published: 2016 August 11 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24199 may contain the following files: Name |...

Threat Outbreak Alert RuleID24210: Email Messages Distributing Malicious Software on August 10, 2016

Medium Alert ID: 48431 First Published: 2016 August 10 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24210 may contain the following files: Name |...

Threat Outbreak Alert RuleID15448: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 46726 First Published: 2016 June 16 20:56 GMT Last Updated: 2016 September 1 13:08 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15448 a...

Threat Outbreak Alert RuleID23216: Email Messages Distributing Malicious Software on June 1, 2016

Medium Alert ID: 46474 First Published: 2016 June 1 17:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23216 may contain the following files: Name | Size...

CVE-2016-3969

Cross-site scripting XSS vulnerability in McAfee Email Gateway MEG 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email...

Threat Outbreak Alert RuleID21263: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43711 First Published: 2016 February 24 13:38 GMT Last Updated: 2016 March 9 20:46 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21263 an...

Threat Outbreak Alert RuleID20375: Email Messages Distributing Malicious Software on January 8, 2016

Medium Alert ID: 42958 First Published: 2016 January 8 20:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20375 may contain the following files: Name |...

Threat Outbreak Alert RuleID19081: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41816 First Published: 2015 October 30 14:38 GMT Last Updated: 2015 November 2 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19081...

Threat Outbreak Alert RuleID18523: Email Messages Distributing Malicious Software on October 7, 2015

Medium Alert ID: 41422 First Published: 2015 October 7 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18523 may contain the following files: Name |...