DDoS Attacks : A Serious unstoppable menace for IT security communities

It should be the busiest day of the year for your business, but your website has just disappeared off the Internet and orders have dried up. If this happens to you, then you likely just become yet another victim of a distributed denial of service DDoS attack. By now, everyone who uses the Interne...

Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013

Medium Alert ID: 31173 First Published: 2013 October 9 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a bank payment information for the recipient. The text in the email message attempts to convince the recipient...

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System:...

elproLOG MONITOR WebAccess 2.1 XSS / SQL Injection

Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System: ==================================== 6.7 Introduction: ============...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on September 23, 2013

Medium Alert ID: 30941 First Published: 2013 September 23 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer notification for the recipient. The message attempts to persuade the recipient to open the...

Threat Outbreak Alert: Fake Order Renewal Request Email Messages on September 12, 2013

Medium Alert ID: 30788 First Published: 2013 September 13 15:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an order renewal request for the recipient. The text in the email message instructs the recipient to open th...

Threat Outbreak Alert: Fake Scanned Document Delivery Email Messages on August 1, 2013

Medium Alert ID: 30286 First Published: 2013 August 2 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document attachment for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on July 21, 2013

Medium Alert ID: 30158 First Published: 2013 July 22 22:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Gemstone and Jewelry Sales Email Messages on July 4, 2013

Medium Alert ID: 29958 First Published: 2013 July 5 13:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a gemstone and jewelry sales attachment for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Sharing Email Messages on July 3, 2013

Medium Alert ID: 29948 First Published: 2013 July 5 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain documents for the recipient. The text in the email message attempts to convince the recipient ...

The Rapidly Changing World of Mobile Application Payment Systems Compliance

In this series of Compliance Talk, Dirk and Ken are back at their favorite coffee shop, this time joined by Dan Fritsche. Dan is Coalfires Director of Solution Validated Services and is considered a thought leader on mobile payments, P2PE and other emerging trends in the payments industry...

Wade Williamson on Malware Trends

Dennis Fisher talks with Wade Williamson of Palo Alto Networks about the use of compromised FTP accounts in targeted attacks and malware campaigns, and how attackers are adapting their techniques. Download: digitalunderground115 Podcast audio courtesy of sykboy65 Subscribe to the Digital...

A Look Back at 2012: The Armory

As we are mere hours away from celebrating 2013, we'd like to focus today on M-Unition's Armory channel. The Armory is the place to be if you want to be the first to find out about the latest releases, free tools and of course, our ever popular M-Trends report. The most popular posts in this...

Survey Tracks Security's 'Bad Mood' Trend, Need for Improvement

The bulk of security teams face a relentless uphill battle when it comes to dealing with security risks and are sorely lacking when it comes to tracking, measuring and maintaining data access, according to new research. The majority of those interviewed in a survey published today, “The Buried...

Cyber Security Alliance Launches Trend Spotting Project

A new international cyber security alliance announced plans to put the Continents best heads together to try to envision future cyber security trends. The International Cyber Security Protection Alliance ICSPA, a British organization that helps support law enforcement cyber crime units, announced...

Data Breach Reports Remain Spotty, Study Finds

In a twist on Tolstoy’s famous observation that “all happy families are alike,” the Identity Theft Resource Center ITRC is warning that the public is being told that ‘all data breaches are alike,’ as corporations paint a worryingly bland portrait of breaches and other data loss incidents affectin...

Malware Poses as US Department of Justice Violation Notice

Posing as the US Department of Justice DoJ, a new variant of the Citadel Malware called Reveton is responsible for a ransomware campaign that attempts to extort $100 from its victims. The infections are occurring after users are lured to a drive-by download site where a dropper installs the Citad...

AgentImage CMS SQL Injection

Exploit Title : AgentImage Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Jokers Home : http://IrIsT.Ir Software Link : http://www.agentimage.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Agent Image"...

Coalfire in the News

Its been quite a season in the world of IT security as we move into 2012. As experts in our field, we are often asked to comment on current trends and recent stories. Take some time to check out what we have had to say recently:...

Slideshow: Five Security Predictions for 2012

VIEW SLIDESHOW Five Security Predictions for 2012 What will 2012 bring? We can’t know for sure. Recent years have taught us that, when it comes to computer security, one should expect to be surprised. However, it’s equally true that in the realm of computer security, “what’s past is prologue,” as...