CVE-2018-5162

CVE-2018-5162 is a Thunderbird information-disclosure vulnerability where plaintext of decrypted emails can leak through the src attribute of remote images or links. Affected products include Thunderbird ESR and Thunderbird before version 52.8. The root cause is plaintext leakage via image/src ha...

Cisco SA520W Security Appliance Path Traversal Vulnerability

The Cisco SA520W Security Appliance is designed for organizations with fewer than 100 employees. Combines firewall, VPN and optional Intrusion Prevention System IPS, email and Web security features. A path traversal vulnerability exists in the Cisco SA520W Security Appliance, which can be exploit...

Threat Outbreak Alert RuleID32870: Email Messages Distributing Malicious Software on June 5, 2018

Medium Alert ID: 58013 First Published: 2018 June 5 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32870 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32863: Email Messages Distributing Malicious Software on June 1, 2018

Medium Alert ID: 57996 First Published: 2018 June 1 18:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32863 may contain the following files: Name | Size...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 21, 2018

Not that I needed to the reminder, but the influx of emails with the subject line “Updates to our Privacy Policy” from companies that I deal with and some that I’ve never heard of! means that TODAY is the day! The General Data Protection Regulation GDPR has officially taken effect. Originally...

Cisco SA520W Security Appliance Path Traversal

Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Security Appliances are designed for businesses with few...

Cisco SA520W Security Appliance - Path Traversal

Cisco SA520W Security Appliance - Path Traversal Title: Cisco SA520W Security Appliance - Path Traversal Author: Nassim Asrir Contact: [email protected] / https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: https://www.cisco.com/ About Product: =============== Cisco SA 500 Series Securit...

Threat Outbreak Alert RuleID32751: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57895 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32751 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32783: Email Messages Distributing Malicious Software on May 14, 2018

Medium Alert ID: 57894 First Published: 2018 May 15 13:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32783 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32741: Email Messages Distributing Malicious Software on May 11, 2018

Medium Alert ID: 57866 First Published: 2018 May 11 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32741 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID32638: Email Messages Distributing Malicious Software on May 2, 2018

Medium Alert ID: 57721 First Published: 2018 May 2 20:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32638 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID32560: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57582 First Published: 2018 April 26 19:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32560 may contain the following files: Name | Si...

Teaming up in the war on tech support scams

Editors note: Erik Wahlstrom spoke about the far-reaching impact of tech support scams and the need for industry-wide cooperation in his RSA Conference 2018 talk Tech Scams: Its Time to Release the Hounds. Social engineering attacks like tech support scams are so common because theyre so effectiv...

Threat Outbreak Alert RuleID32500: Email Messages Distributing Malicious Software on April 18, 2018

Medium Alert ID: 57524 First Published: 2018 April 18 18:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32500 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32432: Email Messages Distributing Malicious Software on April 16, 2018

Medium Alert ID: 57494 First Published: 2018 April 16 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32432 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID32426: Email Messages Distributing Malicious Software on April 10, 2018

Medium Alert ID: 57461 First Published: 2018 April 10 20:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32426 may contain the following files: Name | Si...

Ongoing Threat of Ransomware

NCCIC has observed an increase in ransomware attacks across the world. Ransomware is a type of malicious software, or malware, designed to deny access to a computer system or data until a ransom is paid. Ransomware typically spreads through phishing emails or by unknowingly visiting an infected...

Input validation

Zammad GmbH Zammad version 2.3.0 and earlier contains a Improper Neutralization of Script-Related HTML Tags in a Web Page CWE-80 vulnerability in the subject of emails which are not html quoted in certain cases. This can result in the embedding and execution of java script code on users browser...

Threat Outbreak Alert RuleID32376: Email Messages Distributing Malicious Software on April 4, 2018

Medium Alert ID: 57400 First Published: 2018 April 4 22:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32376 may contain the following files: Name | Siz...

A “Patch for the Meltdown Patch” released out of band Thursday night

The Meltdown/Spectre saga continues… Late Thursday, Microsoft released a patch for Windows 7 and Server 2008 R2 operating systems to resolve CVE-2018-1038. Apparently, this vulnerability was actually introduced by the patches released in January to mitigate the effects of Meltdown. Microsoft did...