MGASA-2017-0315 Updated kmail(kdepimlibs4) packages fix security vulnerability and bugs

The kdepimlibs4, kdepim4, kdepim4-runtime, and akonadi packages have been updated to include the latest bug fixes from upstream. This includes a fix for an issue where the Send Later function in kmail would cause an e-mail that had been designated to be sent encrypted would be sent in plain text...

Is Your Mobile Carrier Your Weakest Link?

More online services than ever now offer two-step authentication -- requiring customers to complete a login using their phone or other mobile device after supplying a username and password. But with so many services relying on your mobile for that second factor, there has never been more riding o...

Gone Phishing: A Case Study on Conducting Internal Phishing Campaigns

To many, emails are boring. Its been a long time since they were cool, and theyre probably the slowest form of communication in an evolving fast-paced digital world. Nevertheless, there were 215 billion emails exchanged per day in 2016, and that number is growing at 3% annually. It's clear that...

Threat Outbreak Alert RuleID30333: Email Messages Distributing Malicious Software on August 23, 2017

Medium Alert ID: 54927 First Published: 2017 August 23 17:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30333 may contain the following files: Name |...

SNMP polling information disclosure vulnerability in multiple Cisco products

The Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA are all products of Cisco, Inc.Cisco WSA is a Web security appliance. The Cisco WSA is a Web Security Appliance, the ESA is an Email Security Appliance, and the Content SMA is a Conte...

CVE-2017-6783

A vulnerability in SNMP polling for the Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA could allow an authenticated, remote attacker to discover confidential information about the appliances that should be available only to an...

CVE-2017-6783

A vulnerability in SNMP polling for the Cisco Web Security Appliance WSA, Email Security Appliance ESA, and Content Security Management Appliance SMA could allow an authenticated, remote attacker to discover confidential information about the appliances that should be available only to an...

CVE-2017-6783

CVE-2017-6783 affects Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Appliance (SMA). The root cause is that these devices do not protect confidential information at rest in SNMP poll responses, enabling an authenticated, remote attacker to dis...

Threat Outbreak Alert RuleID30234: Email Messages Distributing Malicious Software on August 17, 2017

Medium Alert ID: 54876 First Published: 2017 August 17 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30234 may contain the following files: Name |...

Cisco Email Security Appliance SNMP Polling Information Disclosure Vulnerability

A vulnerability in SNMP polling for the Cisco Email Security Appliance ESA could allow an authenticated, remote attacker to discover confidential information about the appliances that should be available only to an administrative user. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

Threat Outbreak Alert RuleID30150: Email Messages Distributing Malicious Software on August 11, 2017

Medium Alert ID: 54822 First Published: 2017 August 11 16:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30150 may contain the following files: Name |...

CVE-2017-9801

CVE-2017-9801 affects Apache Commons Email (versions 1.0–1.4). A call-site passing an email subject containing line-breaks can be exploited to inject arbitrary SMTP headers, due to a flaw in how setSubject handles input. This can lead to SMTP header manipulation and potential information exposure...

Adding Security to Your Managed Services Offering

Over the years Trend Micro has collaborated with and learned from a variety of MSPs. Today’s threat landscape is continuously evolving, becoming more complex and sophisticated than it was even a year ago. For MSPs to rely on a single solution is not practical or in the best interest of their...

Mercure - A Tool For Security Managers Who Want To Train Their Colleague To Phishing

Mercure is a tool for security managers who want to teach their colleagues about phishing. What Mercure can do: Create email templates Create target lists Create landing pages Handle attachments Let you keep track in the Campaign dashboard Track email reads, landing page visits and attachment...

Threat Outbreak Alert RuleID29926: Email Messages Distributing Malicious Software on August 2, 2017

Medium Alert ID: 54724 First Published: 2017 August 3 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29926 may contain the following files: Name | Si...

SMTP Header Injection

Apache Commons Email is vulnerable to SMTP Header Injections. A malicious user can inject arbitrary SMTP Headers by passing line-breaks as a subject of an email...

email.powweb.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-272038 Description| Value ---|--- Affected Website:| email.powweb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Threat Outbreak Alert RuleID30029: Email Messages Distributing Malicious Software on July 31, 2017

Medium Alert ID: 54632 First Published: 2017 July 31 15:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30029 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID30005: Email Messages Distributing Malicious Software on July 28, 2017

Medium Alert ID: 54616 First Published: 2017 July 28 13:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30005 may contain the following files: Name | Siz...

CVE-2017-11617

CVE-2017-11617 describes a Cross-site Scripting (XSS) vulnerability in atmail prior to version 7.8.0.2. An attacker can inject arbitrary web script or HTML into the body of an email by manipulating an IMG element that contains both single and double quotes, enabling remote code execution in the c...