Microsoft Security Essentials RCE Vulnerability (Jul 2017)

Security Essentials is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Malware Protection Engine RCE Vulnerability (Jul 2017)

malware protection engine is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID29796: Email Messages Distributing Malicious Software on July 13, 2017

Medium Alert ID: 54481 First Published: 2017 July 13 19:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29796 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29807: Email Messages Distributing Malicious Software on July 13, 2017

Medium Alert ID: 54479 First Published: 2017 July 13 19:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29807 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29821: Email Messages Distributing Malicious Software on July 13, 2017

Medium Alert ID: 54489 First Published: 2017 July 13 18:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29821 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29769: Email Messages Distributing Malicious Software on July 11, 2017

Medium Alert ID: 54461 First Published: 2017 July 11 12:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29769 may contain the following files: Name | Siz...

Adwind RAT Returns! Cross-Platform Malware Targeting Aerospace Industries

Hackers and cyber criminals are becoming dramatically more adept, innovative, and stealthy with each passing day. While other operating systems are more widely in use, cybercriminals have now shifted from traditional activities to more clandestine techniques that come with limitless attack vector...

Threat Outbreak Alert RuleID29709: Email Messages Distributing Malicious Software on July 7, 2017

Medium Alert ID: 54438 First Published: 2017 July 7 12:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29709 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29695: Email Messages Distributing Malicious Software on July 6, 2017

Medium Alert ID: 54426 First Published: 2017 July 6 17:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29695 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29659: Email Messages Distributing Malicious Software on July 3, 2017

Medium Alert ID: 54347 First Published: 2017 July 3 18:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29659 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29636: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54338 First Published: 2017 July 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29636 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29629: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54329 First Published: 2017 June 29 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29629 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29606: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54333 First Published: 2017 June 29 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29606 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29621: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54332 First Published: 2017 June 29 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29621 may contain the following files: Name | Siz...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

Remote code execution

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

CVE-2017-8558 affects the Microsoft Malware Protection Engine used by Forefront/Defender on Windows platforms (32‑bit). The vulnerability arises when scanning specially crafted files, leading to memory corruption and remote code execution. Public evidence in multiple feeds confirms this as a remo...

Update on Petya malware attacks

As happened recently with WannaCrypt, we again face a malicious attack in the form of ransomware, Petya. In early reports, there was a lot of conflicting information reported on the attacks, including conflation of unrelated and misleading pieces of data, so Microsoft teams mobilized to investiga...