Threat Outbreak Alert RuleID12491: Email Messages Distributing Malicious Software on November 19, 2014

Medium Alert ID: 36471 First Published: 2014 November 19 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12491 may contain the following files: Name |...

Threat Outbreak Alert RuleID12478: Email Messages Distributing Malicious Software on November 18, 2014

Medium Alert ID: 36452 First Published: 2014 November 18 16:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12478 may contain the following files: Name |...

Cisco Email Security Appliance Telnet Remote Code Execution (cisco-sa-20120126-ironport)

According to its self-reported version, the version of AsyncOS running on the remote Cisco Email Security Appliance ESA is affected by a remote code execution vulnerability due to a buffer overflow condition in the telnet component. C Tenable Network Security, Inc. include"compat.inc"; if...

Threat Outbreak Alert RuleID12362: Email Messages Distributing Malicious Software on November 11, 2014

Medium Alert ID: 36385 First Published: 2014 November 11 15:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12362 may contain the following files: Name |...

Smartphone Owners Lack Motivation to Adequately Lock Devices

A quarter of smartphone owners don’t lock their devices because they don’t believe they have any data worth protecting. Even more refrain from doing it because they feel like it’s too much of a hassle. That’s at least according to a new study carried out by six researchers, four from the Universi...

Threat Outbreak Alert RuleID12185: Email Messages Distributing Malicious Software on October 30, 2014

Medium Alert ID: 36235 First Published: 2014 October 30 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12185 may contain the following files: Name |...

Cisco Email Security Appliance ZIP File Filter Bypass

According to its self-reported version, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a security bypass vulnerability in which the ZIP inspection engine of AsyncOS does not properly analyze files, thus allowing a remote, unauthenticated attacker to...

Threat Outbreak Alert RuleID12162: Email Messages Distributing Malicious Software on October 29, 2014

Medium Alert ID: 36224 First Published: 2014 October 29 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12162 may contain the following files: Name |...

IT Security Horror Story: Slow Network, Big Phish

It was a typical morning, just like any other for Annie. She arrived at the office just in time to fill her coffee mug and get to her desk to read her email that had been piling up since Friday. After reading through the standard office wide emails she came across one from the help desk...

CVE-2014-3381

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance ESA does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934...

Authentication flaw

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance ESA does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934...

CVE-2014-3381

CVE-2014-3381 affects Cisco AsyncOS ZIP filtering on Cisco Email Security Appliance (ESA) version 8.5 and earlier, where the ZIP inspection engine does not properly analyze ZIP archives, enabling a remote attacker to bypass malware filtering by delivering a crafted ZIP file. The root cause is imp...

CVE-2014-3381

The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier on the Cisco Email Security Appliance ESA does not properly analyze ZIP archives, which allows remote attackers to bypass malware filtering via a crafted archive, aka Bug ID CSCup07934...

Cisco AsyncOS Software ZIP Filtering Bypass Vulnerability

A vulnerability in the ZIP inspection engine of Cisco AsyncOS for Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass the engine protection and deliver malicious ZIP files. The vulnerability is due to improper implementation of the logic for analyzing the...

Threat Outbreak Alert RuleID11694: Email Messages Distributing Malicious Software on September 24, 2014

Medium Alert ID: 35825 First Published: 2014 September 24 14:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11694 may contain the following files: Name ...

Threat Outbreak Alert RuleID11471: Email Messages Distributing Malicious Software on September 8, 2014

Medium Alert ID: 35647 First Published: 2014 September 8 20:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11471 may contain the following files: Name |...

Threat Outbreak Alert RuleID11427: Email Messages Distributing Malicious Software on September 5, 2014

Medium Alert ID: 35618 First Published: 2014 September 5 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11427 may contain the following files: Name |...

CVE-2014-2957

The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...

Threat Outbreak Alert RuleID11242: Email Messages Distributing Malicious Software on August 25, 2014

Medium Alert ID: 35404 First Published: 2014 August 25 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11242 may contain the following files: Name |...

Greenhouse.io: SMTP protection not used (please read carefully )

Details: Companies like Coinbase, Yahoo,Google,Facebook and even hackerone implemented a strict email security policy combining SPF, DKIM, and DMARC but I don't see taht from mailgreenhouse.ioru , You should apply strict SMPT policy to stop spoofed email sending from your domain. POC is attached...