Threat Outbreak Alert: Fake Bank Account Payment Notice Email Messages on April 21, 2014

Medium Alert ID: 33870 First Published: 2014 April 21 17:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account payment notice for the recipient. The text in the email message attempts to convince the recipien...

3 Million Cards Implicated in Michaels Breach

Nearly four months after it first reported it was investigating a data breach, the arts and crafts retail chain Michaels confirmed yesterday that most of its U.S. stores were compromised on and off for eight months and that payment card information of nearly three million of its customers may hav...

Hardware Maker LaCie Admits Yearlong Data Breach

The French computer hardware company LaCie, perhaps best known for their external hard drives, announced this week it fell victim to a data breach that may have put at risk the sensitive information of anyone who has purchased a product off their website during the last year. According to an...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 11, 2014.

Medium Alert ID: 33765 First Published: 2014 April 14 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 11, 2014

Medium Alert ID: 33755 First Published: 2014 April 11 12:53 GMT Last Updated: 2014 April 14 13:22 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a payment notification for the recipient. The email message attempts to...

Threat Outbreak Alert: Fake Payment Confirmation Notice Email Messages on April 10, 2014

Medium Alert ID: 33753 First Published: 2014 April 10 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Account Payment Transfer Notification Email Messages on April 9, 2014

Medium Alert ID: 33736 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain account payment transfer notification for the recipient. The email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 8, 2014

Medium Alert ID: 33699 First Published: 2014 April 8 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 7, 2014

Medium Alert ID: 33685 First Published: 2014 April 8 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The email message attempts to convince the recipient to open the...

代码审计系列5: PHPYUN多个问题(涉及CSRF、XSS)

简要描述： 这个程序较大，客户较多，出现这种问题影响也比较大。 详细说明： 由于整个程序的后台与后端的数据交互都没有对CSRF做防范，导致这程序后台面临着巨大的威胁。 另外还存在着诸多的XSS漏洞。 受影响较严重的功能： 系统管理 基础配置 网站配置 系统管理 基础配置 支付配置 系统管理 基础配置 管理员配置 系统管理 基础配置 导航配置 运营管理 运营管理 后台充值 运营管理 运营管理 短信群发 PS: 对于金钱相关的事儿，黑客们应该比较感兴趣吧 漏洞证明： 下面利用CSRF插入XSS的例子来说明一下。 首先定位： 运营管理 运营管理 友情链接 这里的过滤并不完善，可以完全绕开。...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 4, 2014

Medium Alert ID: 33656 First Published: 2014 April 4 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Bank Account Payment Transfer Notification Email Messages on April 3, 2014

Medium Alert ID: 33632 First Published: 2014 April 3 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notice for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Failure Notice Email Messages on April 1, 2014

Medium Alert ID: 33601 First Published: 2014 April 1 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing failure notification for the recipient. The text in the email message attempts to convince t...

Second NSA Crypto Tool Found in RSA BSafe

A team of academics released a study on the maligned Dual EC DRBG algorithm used in RSA Security’s BSafe and other cryptographic libraries that includes new evidence that the National Security Agency used a second cryptographic tool alongside Dual EC DRBG in Bsafe to facilitate spying. Allegation...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Payment Transfer Notice Email Messages on March 31, 2014

Medium Alert ID: 33578 First Published: 2014 March 31 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer cancellation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on March 31, 2014.

Medium Alert ID: 33572 First Published: 2014 March 31 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Bank Account Payment Notification Email Messages on March 27, 2014

Medium Alert ID: 33549 First Published: 2014 March 28 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Account Payment Confirmation Email Messages on March 27, 2014

Medium Alert ID: 33537 First Published: 2014 March 27 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Account Payment Notification Email Messages on March 24, 2014

Medium Alert ID: 33486 First Published: 2014 March 24 20:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment notification for the recipient. The text in the email message attempts to convince the...