Threat Outbreak Alert: Fake Order Renewal Request Email Messages on September 12, 2013

Medium Alert ID: 30788 First Published: 2013 September 13 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order renewal request for the recipient. The text in the email message instructs the recipient to open th...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on August 1, 2013

Medium Alert ID: 30286 First Published: 2013 August 2 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document attachment for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on July 21, 2013

Medium Alert ID: 30158 First Published: 2013 July 22 22:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Gemstone and Jewelry Sales Email Messages on July 4, 2013

Medium Alert ID: 29958 First Published: 2013 July 5 13:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a gemstone and jewelry sales attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Sharing Email Messages on July 3, 2013

Medium Alert ID: 29948 First Published: 2013 July 5 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain documents for the recipient. The text in the email message attempts to convince the recipient ...

The Rapidly Changing World of Mobile Application Payment Systems Compliance

In this series of Compliance Talk, Dirk and Ken are back at their favorite coffee shop, this time joined by Dan Fritsche. Dan is Coalfires Director of Solution Validated Services and is considered a thought leader on mobile payments, P2PE and other emerging trends in the payments industry...

Wade Williamson on Malware Trends

Dennis Fisher talks with Wade Williamson of Palo Alto Networks about the use of compromised FTP accounts in targeted attacks and malware campaigns, and how attackers are adapting their techniques. Download: digitalunderground115 Podcast audio courtesy of sykboy65 Subscribe to the Digital...

A Look Back at 2012: The Armory

As we are mere hours away from celebrating 2013, we'd like to focus today on M-Unition's Armory channel. The Armory is the place to be if you want to be the first to find out about the latest releases, free tools and of course, our ever popular M-Trends report. The most popular posts in this...

Survey Tracks Security's 'Bad Mood' Trend, Need for Improvement

The bulk of security teams face a relentless uphill battle when it comes to dealing with security risks and are sorely lacking when it comes to tracking, measuring and maintaining data access, according to new research. The majority of those interviewed in a survey published today, “The Buried...

Cyber Security Alliance Launches Trend Spotting Project

A new international cyber security alliance announced plans to put the Continents best heads together to try to envision future cyber security trends. The International Cyber Security Protection Alliance ICSPA, a British organization that helps support law enforcement cyber crime units, announced...

Data Breach Reports Remain Spotty, Study Finds

In a twist on Tolstoy’s famous observation that “all happy families are alike,” the Identity Theft Resource Center ITRC is warning that the public is being told that ‘all data breaches are alike,’ as corporations paint a worryingly bland portrait of breaches and other data loss incidents affectin...

Malware Poses as US Department of Justice Violation Notice

Posing as the US Department of Justice DoJ, a new variant of the Citadel Malware called Reveton is responsible for a ransomware campaign that attempts to extort $100 from its victims. The infections are occurring after users are lured to a drive-by download site where a dropper installs the Citad...

AgentImage CMS SQL Injection

Exploit Title : AgentImage Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Jokers Home : http://IrIsT.Ir Software Link : http://www.agentimage.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Agent Image"...

Coalfire in the News

Its been quite a season in the world of IT security as we move into 2012. As experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we have had to say recently:...

Slideshow: Five Security Predictions for 2012

VIEW SLIDESHOW Five Security Predictions for 2012 What will 2012 bring? We can’t know for sure. Recent years have taught us that, when it comes to computer security, one should expect to be surprised. However, it’s equally true that in the realm of computer security, “what’s past is prologue,” as...

What will 2012 bring? We can't know for sure

Stuxnet and the specter of sophisticated, state-sponsored attacks were still dominating the news a year ago, as 2010 ended and we welcomed the New Year. Soon enough, however, there would be a new phenomenon to contend with: hacktivists. As the attack on HBGary Federal and Sony showed, faceless...

URGE (Universal Rapid Gamma Emitter) Hijacking Twitter Trends Released by Anonymous

URGE Universal Rapid Gamma Emitter Hijacking Twitter Trends Released by Anonymous Anonymous have created something called Universal Rapid Gamma Emitter, or more simply URGE, which hijacks Twitter trending topics, allowing Anonymous members and supporters to subvert the topic with their own embedd...

Hacker Halted USA 2011 - 10 Reasons Why You Should Attend

Hacker Halted USA 2011 - 10 Reasons Why You Should Attend Hacker Halted is a global series of Computer and Information Security conferences presented by EC-Council. The objective of the Hacker Halted conferences is to raise international awareness towards increased education and ethics in IT...

This Week: Coalfire Systems in the News

Its been quite a week in the world of IT security, and as experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we had to say recently:...

What is Zeus - Technical paper Zeus by SophosLabs !

What is Zeus - Technical paper Zeus by SophosLabs ! Zeus or Zbot is one of the most notorious and widely-spread information stealing Trojans in existence. Zeus is primarily targeted at financial data theft; its effectiveness has lead to the loss of millions worldwide. The spectrum of those...