Uber: Reading Emails in Uber Subdomains

Possibility to read emails from various Uber subdomains. None of the domains exposed were actively being used for Uber email communication to employees or users. Possibility of reading emails sent to certain Uber domains. Link to blog:...

X (Formerly Twitter): Stealing User emails by clickjacking cards.twitter.com/xxx/xxx

Hello In twitter you can create cards to generate leads. For example: https://twitter.com/i/cards/tfw/v1/759046372544741376?cardname=promotion&autoplaydisabled=true&earned=true&lang=en&cardheight=357 If you visit the above URL and click the button your email and username is sent to my domain. Sin...

Hillary Leaks Series: Wikileaks releases 20,000 DNC Emails

Today, whistleblowing website Wikileaks has finally published more than 19,000 e-mails, which contains more than 8,000 attachments from the US Democratic National Committee DNC. The new trove of documents apparently pilfered from the DMC released after Wikileaks yesterday announced via its offici...

Threat Outbreak Alert RuleID23830: Email Messages Distributing Malicious Software on July 15, 2016

Medium Alert ID: 47090 First Published: 2016 July 16 01:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23830 may contain the following files: Name | Siz...

Locky Variant Zepto Debuts with Big Spam Push

Ransomware called Zepto is raising concerns with security experts because of its close ties to the more mature and prolific Locky ransomware. Zepto was spotted about a month ago but a recent wave of spam containing Zepto-laced attachments detected on June 27 is heightening fears of widespread...

Opera Mail Arbitrary Code Execution Vulnerability

Opera Mail is an email client developed by Opera Norway that supports tabbed browsing, email sessions, filters and more. An arbitrary code execution vulnerability exists in versions of Opera Mail prior to 2016-02-16 for Windows-based platforms. A remote attacker can exploit the vulnerability to...

Threat Outbreak Alert RuleID23653: Email Messages Distributing Malicious Software on June 30, 2016

Medium Alert ID: 46901 First Published: 2016 June 30 13:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23653 may contain the following files: Name | Siz...

Trello: Sending Unlimited Mails To Anybody With Easy Social Share Buttons Plugin

Hi, I want to talk about your ESSB plugin.When I was doing a research about it I saw that link " http://blog.trello.com/wp-content/plugins/easy-social-share-buttons3/public/essb-mail.php " When you navigate that link it says "message":"Error sending message!" But when you put the right parameters...

Threat Outbreak Alert RuleID23627: Email Messages Distributing Malicious Software on June 28, 2016

Medium Alert ID: 46870 First Published: 2016 June 28 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23627 may contain the following files: Name | Siz...

Zero-Day Warning! Ransomware targets Microsoft Office 365 Users

If just relying on the security tools of Microsoft Office 365 can protect you from cyber attacks, you are wrong. Variants of Cerber Ransomware are now targeting MS Office 365 email users with a massive zero-day attack that has the ability to bypass Office 365's built-in security tools. According ...

Threat Outbreak Alert RuleID23595: Email Messages Distributing Malicious Software on June 26, 2016

Medium Alert ID: 46853 First Published: 2016 June 27 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23595 may contain the following files: Name | Siz...

CVE-2016-1188

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors...

Threat Outbreak Alert RuleID23608: Email Messages Distributing Malicious Software on June 24, 2016

Medium Alert ID: 46852 First Published: 2016 June 24 21:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23608 may contain the following files: Name | Siz...

Locky is Back Asking for Unpaid Debts

On June 21, 2016, FireEye’s Dynamic Threat Intelligence DTI identified an increase in JavaScript contained within spam emails. FireEye analysts determined the increase was the result of a new Locky ransomware spam campaign. As shown in Figure 1, Locky spam activity was uninterrupted until June 1,...

Email Servers For More Than Half of World's Top Sites Can Be Spoofed

More than half of the world’s top sites suffer from misconfigured email servers, something that heightens the risk of having spoofed emails sent from their domains, researchers warn. Researchers at Detectify, a Swedish web security firm, recently combed through hundreds of domains and found that...

Threat Outbreak Alert RuleID23496: Email Messages Distributing Malicious Software on June 16, 2016

Medium Alert ID: 46724 First Published: 2016 June 16 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23496 may contain the following files: Name | Siz...

Microsoft Exchange Information Disclosure Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. The vulnerability allows remote attackers to...

Let's Encrypt Accidentally Spills 7,600 User Emails

Certificate authority Let’s Encrypt accidentally disclosed the email addresses of several thousand of its users this weekend. Josh Aas, Executive Director for the Internet Security Research Group ISRG, the nonprofit group that helped launch the CA, apologized for the error on Saturday. In what...

Threat Outbreak Alert RuleID23364: Email Messages Distributing Malicious Software on July 6, 2016

Medium Alert ID: 46623 First Published: 2016 June 9 13:45 GMT Last Updated: 2016 July 6 19:09 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23364 and...

Threat Outbreak Alert RuleID23287: Email Messages Distributing Malicious Software on June 4, 2016

Medium Alert ID: 46561 First Published: 2016 June 6 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23287 may contain the following files: Name | Size...