How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware

Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...

Spam Campaign Continuing to Serve Up Malicious .js Files

A malicious spam campaign that’s been doling out zipped Javascript .js files remains an issue, the SANS Internet Storm Center warns. The campaign was spotted earlier this year, but Brad Duncan, a handler for the site and researcher with Rackspace’s information security operations center, claims...

Threat Outbreak Alert RuleID17854: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 40904 First Published: 2015 September 9 12:13 GMT Last Updated: 2015 November 19 13:37 GMT Version: 11 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID178...

Threat Outbreak Alert RuleID17612: Email Messages Distributing Malicious Software on August 26, 2015

Medium Alert ID: 40699 First Published: 2015 August 27 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17612 may contain the following files: Name |...

Novell GroupWise WebAccess Cross-Site Scripting (CVE-2014-0611)

A cross-site scripting vulnerability exists in Novell GroupWise WebAccess. The vulnerability is due to lack of input validation when handling email attachments. A remote, unauthenticated attacker can exploit this vulnerability by enticing a target user to view crafted web content. A successful...

Threat Outbreak Alert RuleID17014: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40192 First Published: 2015 July 28 18:07 GMT Last Updated: 2015 July 29 10:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17014 and...

Threat Outbreak Alert RuleID16419: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 39654 First Published: 2015 July 6 13:01 GMT Last Updated: 2015 July 23 12:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16419 and...

Macro-Enabled Malware Making a Comeback

Malware that uses macros as part of its infection method has been around for more than a decade, and was one of the first major techniques to drive changes at software vendors such as Microsoft. The tactic has been making a comeback of late, and Microsoft is seeing a major spike in the volume of...

SuSE 11.3 Security Update : clamav (SAT Patch Number 10016)

clamav was updated to version 0.98.5 to fix three security issues and several non-security issues. These security issues have been fixed : - Crash when scanning maliciously crafted yoda's crypter files. CVE-2013-6497 - Heap-based buffer overflow when scanning crypted PE files. CVE-2014-9050 - Cra...

Threat Outbreak Alert RuleID12122: Email Messages Distributing Malicious Software on October 27, 2014

Medium Alert ID: 36198 First Published: 2014 October 27 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12122 may contain the following files: Name |...

Threat Outbreak Alert RuleID11305: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 35462 First Published: 2014 August 28 13:03 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11305...

Apple Mac OS X 10.5.x Mail Arbitrary Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to execute arbitrary co...

Sun JavaMail 1.3.2 MimeBodyPart.getFileName Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13141/info Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet. This issue was reported to affect...

PT-2014-4128

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7.1.2 Description The issue concerns the storage of email attachments in Apple iOS. Although the system advertises data protection for attachments, they are actually stored in cleartext under mobile/Library/Mail/...

Sun JavaMail 1.x Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13753/info Sun JavaMail is prone to multiple information disclosure vulnerabilities. The issues exist due to a lack of sufficient input sanitization performed on user-supplied requests. The following issues are reported: ...

Horde IMP 2.2.x/3.2.x/4.0.x Email Attachments HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Threat Outbreak Alert RuleID10304: Email Messages Distributing Malicious Software on June 12, 2014

Medium Alert ID: 34605 First Published: 2014 June 12 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10304 may contain the following files: Name | Siz...

Microsoft Outlook App for Android Devices Stores Emails Unencrypted on File System

If you have an account with Microsoft's popular free email service Outlook.com, and using Outlook app for Android, then there is a bad news for you. Microsoft's Android app for Outlook.com, provides users to access their Outlook emails on their Android devices, fails to provide security and...

Another Internet Explorer Zero Day Surfaces

Researchers have disclosed a new zero day vulnerability in Internet Explorer 8 that could enable an attacker to run arbitrary code on vulnerable machines via drive-by downloads or malicious attachments in email messages. The vulnerability was discovered and disclosed to Microsoft in October, but...

Apple iOS 7 Updates Silently Remove Encryption for Email Attachments

There is no question that Mobile devices have become a staple in everyday living around the world. But have you ever asked yourself, How Secure are the Android, iPhone or any other Smart devices? It is really important for us to think about the Security and Privacy of our Data stored in...