Exfiltrates data on installation

Overview The cofee-script package is a piece of malware that steals sensitive data such as a user's private SSH key and bash history, sending them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation If you have found cofee-script installed in...

Threat Outbreak Alert RuleID30720: Email Messages Distributing Malicious Software on September 25, 2017

Medium Alert ID: 55377 First Published: 2017 September 25 16:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30720 may contain the following files: Name ...

sports.history.msu.edu XSS vulnerability

Open Bug Bounty ID: OBB-311034 Description| Value ---|--- Affected Website:| sports.history.msu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple GarageBand Out of Bounds Write Code Execution Vulnerability(CVE-2017-2374)

Summary An exploitable out of bounds write vulnerability exists in the parsing of saved files in Apple's GarageBand version 10.1.5. A specially crafted project file can cause an out of bounds write resulting in an exploitable condition. An attacker can deliver a project file via other means. This...

September 20, 2017 – Morning Cyber Coffee Headlines – “Pizza” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 20, 2017 - Headlines Carbon Black in the News: Moving forward – and...

Threat Outbreak Alert RuleID30654: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55322 First Published: 2017 September 18 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30654 may contain the following files: Name ...

Threat Outbreak Alert RuleID30639: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55301 First Published: 2017 September 18 14:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30639 may contain the following files: Name ...

Threat Outbreak Alert RuleID30636: Email Messages Distributing Malicious Software on September 18, 2017

Medium Alert ID: 55317 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30636 may contain the following files: Name ...

Threat Outbreak Alert RuleID30595: Email Messages Distributing Malicious Software on September 14, 2017

Medium Alert ID: 55216 First Published: 2017 September 14 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30595 may contain the following files: Name ...

Threat Outbreak Alert RuleID30599: Email Messages Distributing Malicious Software on September 14, 2017

Medium Alert ID: 55219 First Published: 2017 September 14 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30599 may contain the following files: Name ...

Threat Outbreak Alert RuleID30584: Email Messages Distributing Malicious Software on September 13, 2017

Medium Alert ID: 55202 First Published: 2017 September 13 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30584 may contain the following files: Name ...

Threat Outbreak Alert RuleID30350: Email Messages Distributing Malicious Software on September 5, 2017

Medium Alert ID: 55107 First Published: 2017 September 5 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30350 may contain the following files: Name |...

Monitoring Windows Console Activity (Part 2)

This is the second of two blogs that discuss the implementation of the Windows console architecture from years past, with a primary focus on the current implementation present on modern versions of Windows. Read our first blog, "Monitoring Windows Console Activity Part 1," for more. Capturing the...

Threat Outbreak Alert RuleID30415: Email Messages Distributing Malicious Software on August 31, 2017

Medium Alert ID: 54997 First Published: 2017 August 31 12:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30415 may contain the following files: Name |...

CVE-2016-2976

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 113936...

CVE-2016-2976

IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 113936...

[SECURITY] Fedora 25 Update: cvs-1.11.23-41.fc25

CVS Concurrent Versions System is a version control system that can record the history of your files usually, but not always, source code. CVS only stores the differences between versions, instead of every version of every file you have ever created. CVS also keeps a log of who, when, and why...

[SECURITY] Fedora 26 Update: cvs-1.11.23-42.fc26

CVS Concurrent Versions System is a version control system that can record the history of your files usually, but not always, source code. CVS only stores the differences between versions, instead of every version of every file you have ever created. CVS also keeps a log of who, when, and why...

August 28, 2017—KB4039396 (OS Build 14393.1670)

None None...

The list of Windows Updates is usually wrong in app/platform layers and published images/desktops

The Windows Update history is correct only in the layer where the updates were actually installed. So you can only rely on the displayed list of Windows Updates when you are editing the OS layer, because Windows Updates must always be installed in the OS Layer. Similarly, you can only rely on the...