Threat Outbreak Alert RuleID29695: Email Messages Distributing Malicious Software on July 6, 2017

Medium Alert ID: 54426 First Published: 2017 July 6 17:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29695 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29659: Email Messages Distributing Malicious Software on July 3, 2017

Medium Alert ID: 54347 First Published: 2017 July 3 18:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29659 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29636: Email Messages Distributing Malicious Software on June 30, 2017

Medium Alert ID: 54338 First Published: 2017 July 3 14:38 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29636 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29629: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54329 First Published: 2017 June 29 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29629 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29606: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54333 First Published: 2017 June 29 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29606 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29621: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54332 First Published: 2017 June 29 17:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29621 may contain the following files: Name | Siz...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

Remote code execution

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

CVE-2017-8558

CVE-2017-8558 affects the Microsoft Malware Protection Engine used by Forefront/Defender on Windows platforms (32‑bit). The vulnerability arises when scanning specially crafted files, leading to memory corruption and remote code execution. Public evidence in multiple feeds confirms this as a remo...

CVE-2017-8558: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703 does not properly sc...

PT-2017-18409

Name of the Vulnerable Software and Affected Versions Microsoft Malware Protection Engine versions affected versions not specified Description The issue is related to the Microsoft Malware Protection Engine, which does not properly scan a specially crafted file, leading to memory corruption. This...

Update on Petya malware attacks

As happened recently with WannaCrypt, we again face a malicious attack in the form of ransomware, Petya. In early reports, there was a lot of conflicting information reported on the attacks, including conflation of unrelated and misleading pieces of data, so Microsoft teams mobilized to investiga...

Update on Petya malware attacks

As happened recently with WannaCrypt, we again face a malicious attack in the form of ransomware, Petya. In early reports, there was a lot of conflicting information reported on the attacks, including conflation of unrelated and misleading pieces of data, so Microsoft teams mobilized to investiga...

Threat Outbreak Alert RuleID29590: Email Messages Distributing Malicious Software on June 26, 2017

Medium Alert ID: 54317 First Published: 2017 June 26 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29590 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29600: Email Messages Distributing Malicious Software on June 26, 2017

Medium Alert ID: 54312 First Published: 2017 June 26 17:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29600 may contain the following files: Name | Siz...

Another RCE Vulnerability Patched in Microsoft Malware Protection Engine

Google Project Zero continues to scrape away at the ubiquitous Microsoft Malware Protection Engine at the core of many security products embedded in Windows, and it continues to discover new critical vulnerabilities. The latest, another remote code execution flaw, was patched on Friday after it w...

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

Microsoft Malware Protection Engine is a Microsoft malicious program protection engine. Microsoft Malware Protection Engine has a security vulnerability in its implementation that allows remote attackers to exploit the vulnerability to submit special requests and execute arbitrary code...

Microsoft Malware Protection Engine VFS API Remote Code Execution (CVE-2017-8558)

A memory corruption vulnerability has been reported in Microsoft Malware Protection Engine. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. A successful exploitation could lead to arbitrary code execution...