Threat Outbreak Alert RuleID32783: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57894 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32783 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32741: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57866 First Published: 2018 May 11 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32741 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32638: Email Messages Distributing Malicious Software on May 2, 2018

Medium Alert ID: 57721 First Published: 2018 May 2 20:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32638 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32560: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57582 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32560 may contain the following files: Name | Si...

Teaming up in the war on tech support scams

Editors note: Erik Wahlstrom spoke about the far-reaching impact of tech support scams and the need for industry-wide cooperation in his RSA Conference 2018 talk Tech Scams: Its Time to Release the Hounds. Social engineering attacks like tech support scams are so common because theyre so effectiv...

Threat Outbreak Alert RuleID32500: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57524 First Published: 2018 April 18 18:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32500 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32432: Email Messages Distributing Malicious Software on April 16, 2018

Medium Alert ID: 57494 First Published: 2018 April 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32432 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32426: Email Messages Distributing Malicious Software on April 10, 2018

Medium Alert ID: 57461 First Published: 2018 April 10 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32426 may contain the following files: Name | Si...

Ongoing Threat of Ransomware

NCCIC has observed an increase in ransomware attacks across the world. Ransomware is a type of malicious software, or malware, designed to deny access to a computer system or data until a ransom is paid. Ransomware typically spreads through phishing emails or by unknowingly visiting an infected...

Input validation

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page CWE-80 vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser...

Threat Outbreak Alert RuleID32376: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57400 First Published: 2018 April 4 22:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32376 may contain the following files: Name | Siz...

A “Patch for the Meltdown Patch” released out of band Thursday night

The Meltdown/Spectre saga continues… Late Thursday, Microsoft released a patch for Windows 7 and Server 2008 R2 operating systems to resolve CVE-2018-1038. Apparently, this vulnerability was actually introduced by the patches released in January to mitigate the effects of Meltdown. Microsoft did...

Threat Outbreak Alert RuleID32150: Email Messages Distributing Malicious Software on March 28, 2018

Medium Alert ID: 57294 First Published: 2018 March 28 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32150 may contain the following files: Name | Si...

SecurEnvoy SecurMail 9.1.501 XSS / CSRF / Traversal

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: SecurEnvoy SecurMail vulnerable version: 9.1.501 fixed version: 9.2.501 or hotfix patch "1012018" CVE number: CVE-2018-7701,...

CVE-2017-14461

A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability, an attacker needs to send a specially crafted email message to the...

Cisco Email Security Appliance and Cisco Content Security Management Appliance Information Disclosure Vulnerability

Cisco Email Security Appliance ESA and Cisco Content Security Management Appliance SMA are both products of Cisco USA.Cisco ESA is a set of email security appliances, which provides spam protection, email encryption, data loss protection and other functions. Cisco ESA is an email security applian...

FBI Warns Of Spike In W-2 Phishing Campaigns

The Federal Bureau of Investigation is warning businesses about a spike in phishing campaigns requesting W-2 information from payroll personnel. In a recent security advisory the FBI warned it has seen an increase since January in reports of compromised or spoofed emails involving W-2 forms. Thes...

Threat Outbreak Alert RuleID32099: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56898 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32099 may contain the following files: Name |...

Threat Outbreak Alert RuleID32081: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56888 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32081 may contain the following files: Name |...

Threat Outbreak Alert RuleID32058: Email Messages Distributing Malicious Software on February 19, 2018

Medium Alert ID: 56864 First Published: 2018 February 19 20:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32058 may contain the following files: Name |...