CVE-2016-2500

CVE-2016-2500 targets Android: Activity Manager in Android 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-06-01) fails to terminate process groups, enabling a crafted app to disclose sensitive information. Root cause: improper handling within Activity Manager. Impact as describe...

CVE-2016-2500

Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 19285814...

Threat Outbreak Alert RuleID6396: Email Messages Distributing Malicious Software on September 19, 2016

Medium Alert ID: 46608 First Published: 2016 June 8 12:39 GMT Last Updated: 2016 October 3 12:49 GMT Version: 17 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID6396 and...

IBM Security Guardium Database Activity Monitor Information Disclosure Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. A security vulnerability exists in IBM Security Guardium Database...

Android Activity Manager Component Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Activity Manager is a framework component used in it. An information disclosure vulnerability exists in the Activity Manager component of Android. An attacker could exploit th...

Threat Outbreak Alert RuleID10277: Email Messages Distributing Malicious Software on July 7, 2016

Medium Alert ID: 46571 First Published: 2016 June 6 13:28 GMT Last Updated: 2016 September 7 15:54 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10277 and...

Threat Outbreak Alert RuleID13288: Email Messages Distributing Malicious Software on September 5, 2016

Medium Alert ID: 46572 First Published: 2016 June 6 13:27 GMT Last Updated: 2016 October 3 12:49 GMT Version: 31 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13288 and...

Russia arrests 50 hackers who stole $25 million from Banks

Russian authorities have arrested a gang of 50 hackers suspected of stealing more than 1.7 Billion Rubles over US$25 Million from banks and other financial institutions in the country since 2011. The same criminal gang had tried to steal a further 2.273 Billion Roubles by issuing false payment...

Threat Outbreak Alert RuleID23120: Email Messages Distributing Malicious Software on May 26, 2016

Medium Alert ID: 46407 First Published: 2016 May 26 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23120 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID23033: Email Messages Distributing Malicious Software on May 22, 2016

Medium Alert ID: 46338 First Published: 2016 May 23 14:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23033 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID22945: Email Messages Distributing Malicious Software on May 18, 2016

Medium Alert ID: 46270 First Published: 2016 May 18 15:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22945 may contain the following files: Name | Size...

Ransomware Activity Spikes in March, Steadily increasing throughout 2016

UPDATE June 15, 2016: This post has been updated to include new data on ransomware activity, which is also now broken down by region. Cyber extortion for financial gain is typically carried out in one of two ways. The first method is a business disruption attack – a category we discussed at lengt...

sIPI - Simple IP Information Tools

This tool is aimed for Incident Response Team and anyone what's want to know the behaviour of the "suspicious" IP Address. The tools do search looking for reputation info from a set of open threat intelligence sources. Information about this IP like malware activity, malicious activity, blacklist...

Microsoft Windows Graphics Component CVE-2016-0169 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

Microsoft Edge CVE-2016-0191 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...

Microsoft Internet Explorer CVE-2016-0194 Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Internet Explorer 10, and 11 are vulnerable. Technologies Affected Microsoft Internet Explorer 10...

Microsoft Edge CVE-2016-0193 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can take advantage of this vulnerability to execute arbitrary code in the context of the currently...

Microsoft Windows Graphics Component CVE-2016-0170 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 for 32-bit...

[SECURITY] Fedora 24 Update: python-tgcaptcha2-0.3.1-1.fc24

TGCaptcha2 is a TurboGears widget that provides an easy way to incorporate a captcha as part a form in an attempt to reduce spam or malicious activity. Features include: Relatively pain-free usage and validation inside of a regular widget-based form Flexibility to add or extend image generation...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02559)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the Activity Guide subcomponent of t...