Beware of New Twitter Spam - "Bad blog going around about you"

Beware of New Twitter Spam - "Bad blog going around about you" This is not first time I have received spam messages from Twitter. Just now I checked my twitter account and what I see is two Direct Message saying "Bad blog going around about you, have you read it yet?" followed by a URL shortened...

Barracuda Backup v2.0 - Multiple Web Vulnerabilities

Document Title: =============== Barracuda Backup v2.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.cnnvd.org.cn/vulnerability/show/cvcnnvdid/CNNVD-201109-650 Release Date: ============= 2011-10-03 Vulnerability Laboratory ID VL-ID:...

Intelligence and National Security Alliance (INSA) hacked

Intelligence and National Security Alliance INSA hacked On Wednesday, 48 hours after releasing a policy paper on cybersecurity, the top trade association for intelligence contractors got a first-hand lesson on the subject: they discovered that their website was hacked. Cryptome, a site affiliated...

Potential Hurricane Irene Phishing Scams

In the past, US-CERT has received reports of phishing scams and malware campaigns related to topics that are of high-interest to the U.S. Government or news media, such as Hurricane Irene. Users' systems have been compromised by receiving and accessing phishing emails with subject lines that seem...

CentOS Update for seamonkey CESA-2009:1134 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Threat Outbreak Alert: Malicious Tax Return Notification Email Messages on March 19, 2014

Low Alert ID: 23586 First Published: 2011 July 6 14:36 GMT Last Updated: 2014 May 20 12:57 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax return notification for the recipient. The text in the email message attemp...

Gmail Phishing Attack

US-CERT is aware of public reports of a phishing attack that specifically targets US government and military officials' Gmail accounts. The attack arrives via an email sent from a spoofed address of an individual or agency known to the targeted user. The email contains a "view download" link that...

Hackers hack into TripAdvisor's members Database !

Hackers hack into TripAdvisor's members Database ! Travel site TripAdvisor has warned subscribers to expect more spam following the theft of its member database. The travel review and information website said that an unspecified vulnerability allowed miscreants to make off with a portion of its...

CVE-2010-4766

CVE-2010-4766 affects Open Ticket Request System (OTRS) prior to version 2.4.7. The AgentTicketForward feature does not properly remove inline images from HTML email messages, enabling potential information disclosure where an attacker could read a forwarded message in a standard email client and...

CVE-2008-7281

The CVE concerns Open Ticket Request System (OTRS) prior to version 2.2.7, where emails include a Bcc header that lists recipients. This exposes potentially sensitive e‑mail addresses to remote attackers who read the Bcc field, indicating a partial confidentiality impact. Several connected entrie...

CVE-2009-5057

The vulnerability CVE-2009-5057 affects OTRS (Open Ticket Request System) before version 2.3.4. The root cause is that the S/MIME feature does not configure the RANDFILE and HOME environment variables for OpenSSL, which may leave the entropy seeding file with insufficient randomness. This could a...

Mobile Device Users More Susceptible to Phishing Scams

Mobile devices are making us dumber – at least when it comes to security, according to research conducted by security firm Trusteer. Research published by the company found that smartphone and computer tablet users are three times more susceptible to email phishing scams than traditional PC and...

Beware of Christmas E-Cards: Tips to Avoid Holiday Scams

Your mailbox may be filling up with Christmas cards from friends and family, and so might your email inbox. But, as the song says, 'you better watch out,' because some of those merry emails could be from an internet Grinch looking to steal your peace of mind. Christmas cards are a great way to se...

Godaddy's Workspace 5.3 Cross Site Scripting

Godaddy´s Workspace 5.3 XSS Explanation: The javascript for special caracter filtering provided in email13.secureserver.net can be use to create a XSS attack, if we edit the content of an email and put this will be filtered and scramble, making the XSS impossible, BUT, if we write we will bypass...

Former UCM Students Charged with Hacking and Data Theft

Two former University of Central Missouri students have been charged with hacking university databases, stealing confidential information, and attempting to sell it for profit. Joseph Camp and Daniel Fowler were indicted by a federal grand jury. They allegedly created a computer virus and spread ...

Potential WikiLeaks Phishing Scams

In the past, US-CERT has received reports of phishing scams and malware campaigns related to topics that are of high-interest to the U.S. Government or news media, such as the WikiLeaks website. Users' systems have been compromised by receiving and accessing phishing emails with subject lines tha...

cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)

cPanel 11.x - Cross-Site Request Forgery Edit E-mail Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...

Holiday Season Phishing Scams and Malware Campaigns

As the winter holidays are quickly approaching, US-CERT is republishing this entry to increase awareness. In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the winter holiday and holiday shopping season. US-CERT reminds...

Botnet Crackdowns Staunch Spam…For a Month

The crackdowns on massive, spam-spewing botnets disrupted the global flow of spam e-mail…for about a month. That, according to a new report out from Kaspersky Lab. “Spam in the Third Quarter of 2010” is the latest, quarterly report from Kaspersky’s anti virus research labs. It finds that several...

Spammers 'Gearing Up' Botnets for Holiday Rush

Spammers are pushing out e-mail borne malware at unprecedented rates in an apparent attempt to build up botnets in advance of the busy holiday shopping season, according to a report by Google. Writing on the company’s enterprise blog, Adrian Soghoian and Adam Hollman of the Google Postini Service...