Threat Outbreak Alert RuleID29544: Email Messages Distributing Malicious Software on June 20, 2017

Medium Alert ID: 54252 First Published: 2017 June 20 17:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29544 may contain the following files: Name | Siz...

Ransomware & Advanced Attacks: Servers are Different

Ransomware and other advanced attacks are the scourge of the modern IT security team. If allowed to gain access to your IT environment, these attacks could shut down the organization, denying access to mission critical applications & data for potentially days, or even indefinitely. The result? Th...

Threat Outbreak Alert RuleID29463: Email Messages Distributing Malicious Software on June 13, 2017

Medium Alert ID: 54178 First Published: 2017 June 13 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29463 may contain the following files: Name | Siz...

Microsoft Office Malicious Macros

Microsoft Office files might contain a malicious downloader. A remote attacker could send spam e-mails including those downloaders, and use social engineering in order to convince users to manually enable them. This would allow the malicious code to run and infect the target system...

AtMail Cross-Site Request Forgery Vulnerability (CNVD-2017-09349)

AtMail is an open source WebMail client from the Australian company Atmail , which provides a Webmail interface , address book management , calendars and other features , and supports IMAP, video mail and so on. A cross-site request forgery vulnerability exists in Atmail versions prior to 7.8.0.2...

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

Authentication flaw

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors...

CVE-2017-9518

CVE-2017-9518 affects Atmail WebMail prior to version 7.8.0.2. The vulnerability is a CSRF flaw that enables an attacker to change the SMTP hostname and hijack all emails. The described remediation is to apply the minor update to 7.8.0.2 (per Atmail/NVD references). If applying in production, ver...

Beware! This Microsoft PowerPoint Hack Installs Malware Without Requiring Macros

"Disable macros and always be extra careful when you manually enable it while opening Microsoft Office Word documents." You might have heard of above-mentioned security warning multiple times on the Internet as hackers usually leverage this decade old macros-based hacking technique to hack...

Google: Its Tech Now Blocks 99.9% of Gmail Phishing and Spam Emails

By Jahanzaib Hassan After the effects of the phishing campaign that used Google Docs as a tool to attack, Google has launched a number of upgrades to Gmail and its browser so that users can be notified and warned of suspicious emails and websites that may contain malware. The new machine-learning...

Threat Outbreak Alert RuleID29349: Email Messages Distributing Malicious Software on June 1, 2017

Medium Alert ID: 54006 First Published: 2017 June 1 12:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29349 may contain the following files: Name | Size...

OneLogin Password Manager Hacked; Users’ Data Can be Decrypted

Do you use OneLogin password manager? If yes, then immediately change all your account passwords right now. OneLogin, the cloud-based password management and identity management software company, has admitted that the company has suffered a data breach. The company announced on Thursday that it h...

Mixmax: Security Vulnerability - SMTP protection not used

Hi, I'm checking your website found SPF record there. You should apply strict SMPT policy to stop spoofed email sending from your domain. An attacker would send a Fake email from [email protected] saying that Please change your password, The victim is aware of phishing attacks, But when he sees...

Cuvva: Your two domain login email address are disclosed in

HI LINK: support-dashboard.corp.cuvva.co while accessing this link it takes to google authentication. then seen source page of that login page then i saw your email that used to login. POC attached. emails are: ███ ██████████ another way is to simply click on to "continue to cuvva.co" you will se...

Design flaws in the Foreign Research Service's digital English platform

iTEST is a comprehensive test management platform that provides English test bank resources and online assessment services for colleges and universities. A design vulnerability exists at the password retrieval of the Digital English Platform of the Foreign Research Institute. It allows attackers ...

Samsung SM-G920F Information Disclosure Vulnerability

The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An information disclosure vulnerability exists in SecEmailSync in Samsung SM-G920F build G920FXXU2COH2. An attacker can exploit the vulnerabilit...

Threat Outbreak Alert RuleID29169: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53869 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29169 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29118: Email Messages Distributing Malicious Software on May 17, 2017

Medium Alert ID: 53865 First Published: 2017 May 17 17:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29118 may contain the following files: Name | Size...

FTC Releases Alert on Fraudulent Emails

The Federal Trade Commission FTC has released an alert about scammers sending out fake emails that look authentic to trick you into sending money to them. Users should be suspicious of unsolicited phone calls or email messages from individuals asking about your information. If an unknown individu...