A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Multiple cybercriminal groups are leveraging a malware-as-a-service MaaS solution to carry out a wide range of malicious software distribution campaigns that result in the deployment of payloads such as Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish against individuals in Belgi...

GitHub Missing Audit Logging

Original blog post here: https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/ SUMMARY Release functionality on GitHub.com allows modification of assets within a release by any project collaborator. This can occur after the release is published, and...

[SECURITY] Fedora 30 Update: texlive-base-20180414-37.fc30

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

CVE-2019-4012

CVE-2019-4012 affects IBM BigFix WebUI Profile Management 6 and IBM BigFix Software Distribution 23. The root cause is a SQL injection vulnerability due to a lack of validation of externally entered SQL statements, enabling a remote attacker to view, add, modify, or delete data in the back-end da...

CVE-2019-4012

IBM BigFix WebUI Profile Management 6 and Software Distribution 23 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 155886...

PT-2019-16840 · Ibm · Ibm Bigfix Software Distribution +1

Name of the Vulnerable Software and Affected Versions: IBM BigFix WebUI Profile Management version 6 IBM BigFix Software Distribution version 23 Description: The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delet...

[SECURITY] Fedora 29 Update: texlive-base-20180414-24.fc29

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

Threat Outbreak Alert RuleID33320: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58706 First Published: 2018 August 15 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33320 may contain the following files: Name |...

Threat Outbreak Alert RuleID33366: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58744 First Published: 2018 August 15 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33366 may contain the following files: Name |...

Threat Outbreak Alert RuleID33365: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58743 First Published: 2018 August 15 13:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33365 may contain the following files: Name |...

Threat Outbreak Alert RuleID33345: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58736 First Published: 2018 August 15 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33345 may contain the following files: Name |...

Threat Outbreak Alert RuleID33332: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58730 First Published: 2018 August 15 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33332 may contain the following files: Name |...

Threat Outbreak Alert RuleID33408: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58696 First Published: 2018 August 14 18:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33408 may contain the following files: Name |...

Threat Outbreak Alert RuleID33295: Email Messages Distributing Malicious Software on August 13, 2018

Medium Alert ID: 58673 First Published: 2018 August 13 14:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33295 may contain the following files: Name |...

Threat Outbreak Alert RuleID33546: Email Messages Distributing Malicious Software on August 12, 2018

Medium Alert ID: 58662 First Published: 2018 August 13 12:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33546 may contain the following files: Name |...

How do file partner programs work?

It's easy to notice if you've fallen victim to an advertising partner program: the system has new apps that you didn't install, ad pages spontaneously open in the browser, ads appear on sites where they never used to, and so on. If you notice these symptoms on your computer, and in the list of...

CVE-2016-6559

Improper bounds checking of the obuf variable in the linkntoa function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depends on the method of exploit and how the library is used by applications. According to analysis by...

Threat Outbreak Alert RuleID33141: Email Messages Distributing Malicious Software on July 10, 2018

Medium Alert ID: 58408 First Published: 2018 July 10 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33141 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID33103: Email Messages Distributing Malicious Software on July 4, 2018

Medium Alert ID: 58356 First Published: 2018 July 5 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33103 may contain the following files: Name | Size...