Opera Mail Arbitrary Code Execution Vulnerability

Opera Mail is an email client developed by Opera Norway that supports tabbed browsing, email sessions, filters and more. An arbitrary code execution vulnerability exists in versions of Opera Mail prior to 2016-02-16 for Windows-based platforms. A remote attacker can exploit the vulnerability to...

Threat Outbreak Alert RuleID23653: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46901 First Published: 2016 June 30 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23653 may contain the following files: Name | Siz...

Trello: Sending Unlimited Mails To Anybody With Easy Social Share Buttons Plugin

Hi, I want to talk about your ESSB plugin.When I was doing a research about it I saw that link " http://blog.trello.com/wp-content/plugins/easy-social-share-buttons3/public/essb-mail.php " When you navigate that link it says "message":"Error sending message!" But when you put the right parameters...

Threat Outbreak Alert RuleID23627: Email Messages Distributing Malicious Software on June 28, 2016

Medium Alert ID: 46870 First Published: 2016 June 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23627 may contain the following files: Name | Siz...

Zero-Day Warning! Ransomware targets Microsoft Office 365 Users

If just relying on the security tools of Microsoft Office 365 can protect you from cyber attacks, you are wrong. Variants of Cerber Ransomware are now targeting MS Office 365 email users with a massive zero-day attack that has the ability to bypass Office 365's built-in security tools. According ...

Threat Outbreak Alert RuleID23595: Email Messages Distributing Malicious Software on June 26, 2016

Medium Alert ID: 46853 First Published: 2016 June 27 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23595 may contain the following files: Name | Siz...

CVE-2016-1188

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors...

Threat Outbreak Alert RuleID23608: Email Messages Distributing Malicious Software on June 24, 2016

Medium Alert ID: 46852 First Published: 2016 June 24 21:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23608 may contain the following files: Name | Siz...

Locky is Back Asking for Unpaid Debts

On June 21, 2016, FireEye’s Dynamic Threat Intelligence DTI identified an increase in JavaScript contained within spam emails. FireEye analysts determined the increase was the result of a new Locky ransomware spam campaign. As shown in Figure 1, Locky spam activity was uninterrupted until June 1,...

Email Servers For More Than Half of World's Top Sites Can Be Spoofed

More than half of the world’s top sites suffer from misconfigured email servers, something that heightens the risk of having spoofed emails sent from their domains, researchers warn. Researchers at Detectify, a Swedish web security firm, recently combed through hundreds of domains and found that...

Threat Outbreak Alert RuleID23496: Email Messages Distributing Malicious Software on June 16, 2016

Medium Alert ID: 46724 First Published: 2016 June 16 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23496 may contain the following files: Name | Siz...

Microsoft Exchange Information Disclosure Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. The vulnerability allows remote attackers to...

Let's Encrypt Accidentally Spills 7,600 User Emails

Certificate authority Let’s Encrypt accidentally disclosed the email addresses of several thousand of its users this weekend. Josh Aas, Executive Director for the Internet Security Research Group ISRG, the nonprofit group that helped launch the CA, apologized for the error on Saturday. In what...

Threat Outbreak Alert RuleID23364: Email Messages Distributing Malicious Software on July 6, 2016

Medium Alert ID: 46623 First Published: 2016 June 9 13:45 GMT Last Updated: 2016 July 6 19:09 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23364 and...

Threat Outbreak Alert RuleID23287: Email Messages Distributing Malicious Software on June 4, 2016

Medium Alert ID: 46561 First Published: 2016 June 6 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23287 may contain the following files: Name | Size...

Cybozu Garoon Email Read Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...

Cybozu Garoon Security Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists ...

Threat Outbreak Alert RuleID23063: Email Messages Distributing Malicious Software on May 25, 2016

Medium Alert ID: 46378 First Published: 2016 May 26 22:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23063 may contain the following files: Name | Size...

Amazon Users Targets of Massive Locky Ransomware Spam Campaign

Amazon customers were targeted in a massive spear phishing campaign where recipients received Microsoft Word documents with a macro that triggered downloads of the Locky ransomware. Researchers at Comodo Threat Research Labs say it is one of the largest spam ransomware campaigns this year. Fatih...

appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...