3575 matches found
The Unsexy Threat to Election Security
Much has been written about the need to further secure our elections, from ensuring the integrity of voting machines to combating fake news. But according to a report quietly issued by a California grand jury this week, more attention needs to be paid to securing social media and email accounts...
Threat Source newsletter (July 25, 2019)
Newsletter compiled by Jonathan Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. No one really likes talking about election security. It’s a sticky subject, costs lots of money and doesn’t come with an easy fix...
Popular File-Sharing Service WeTransfer Used in Malicious Spam Campaigns
Hackers are abusing the popular file-sharing service called WeTransfer to circumvent defensive email gateways that are designed to block spam messages with malicious URLs. Researchers have observed an uptick in attacks targeting banking, power and media industries using this technique. The hack...
CVE-2019-11703
Summary (CVE-2019-11703) : A flaw in Thunderbird’s iCal handling causes a heap buffer overflow in libical’s parser_get_next_char, triggered by processing certain calendar-containing messages. The issue is documented to affect Thunderbird versions prior to 60.7.1, with public reports and advisorie...
Cisco Email Security Appliance Content Filter Bypass Vulnerability (cisco-sa-20190417-esa-filter-bypass)
According to its self-reported version, Cisco Email Security Appliance ESA is affected by following vulnerability - A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured...
Cisco Email Security Appliance Filter Bypass Vulnerability (cisco-sa-20190501-esa-bypass)
According to its self-reported version, Cisco Email Security Appliance ESA is affected by following vulnerability - A vulnerability in certain attachment detection mechanisms of the Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the filtering...
The vulnerability of the email scanning function of the Cisco Email Security Appliance allows a perpetrator to inject any arbitrary script code into an email message.
The vulnerability of email scanning functions in Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary script code into an email message remotely...
The vulnerability of Cisco Email Security Appliance’s security systems, which stems from insufficient validation of input data, allows attackers to bypass the configured content filters and compromise the integrity of the protected information.
The vulnerability of Cisco Email Security Appliance’s security systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters and compromise the integrity of the protected information...
10 ways to keep yourself secure online against cyber attacks
By Uzair Amir Have you ever received emails from unknown sources claiming to offer insurance, lottery tickets or advertisements? You may have noticed that such emails always have a link that they prompt you to click. What lies on the other side of the link can be any one of many ways to phish use...
CVE-2019-1921
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker coul...
CVE-2019-1921
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker coul...
Input validation
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker cou...
CVE-2019-1933 Cisco Email Security Appliance Content Filter Bypass Vulnerability
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured filters on the device. The vulnerability is due to improper input validation of certain email fields. An attacker cou...
CVE-2019-1933
Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) contains an input-validation vulnerability in its email message scanning that can let an unauthenticated, remote attacker bypass configured message filters by sending a crafted email to an ESA-protected recipient. The issue stems fro...
CVE-2019-1921 Cisco Email Security Appliance Content Filter Bypass Vulnerability
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker coul...
CVE-2019-1921
The vulnerability CVE-2019-1921 affects Cisco AsyncOS Software for Cisco Email Security Appliance (ESA). It stems from improper input validation in the attachment scanning component, enabling an unauthenticated, remote attacker to bypass configured content filters by naming a malicious attachment...
Cisco Email Security Appliance Input Validation Error Vulnerability
Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the scanning of attachments in the Cisco ESA, which stems from the program's failure to perform prop...
Cisco Email Security Appliance AsyncOS Software Input Validation Error Vulnerability
Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the scanning of email messages in the AsyncOS Software in the Cisco ESA, which stems from the progra...
The vulnerability of the GZIP decompression mechanism in the AsyncOS operating system of Cisco Email Security Appliance allows attackers to bypass the configured content filters on the device.
The vulnerability of the GZIP decompression mechanism in the AsyncOS operating system used by Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the configured content filters on the device by sendin...
Cisco Email Security Appliance Content Filter Bypass Vulnerability
A vulnerability in the attachment scanning of Cisco AsyncOS Software for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass configured content filters on the device. The vulnerability is due to improper input validation of the email body. An attacker coul...