DARPA Cyber Grand Challenge Offers $2M to Winners

The bug bounty continues to be turned on its ear. Microsoft began the wave of paying premium money for mitigation technologies via its Blue Hat prizes, and now DARPA has gone all-in to the tune of $2 million for the development of an automated network defense system that not only scans for and...

Threat Outbreak Alert: Fake Banking Information Form Email Messages on October 23, 2013

Medium Alert ID: 31441 First Published: 2013 October 23 16:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain bank information for the recipient. The email message attempts to convince the recipient to open the attachme...

Threat Outbreak Alert: Fake Portuguese Personal Picture Notification Email Messages on October 5, 2013

Medium Alert ID: 31128 First Published: 2013 October 7 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain personal images for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Information Email Messages on September 30, 2013

Medium Alert ID: 31037 First Published: 2013 October 1 12:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Purchase Order Notification Email Messages on September 25, 2013

Medium Alert ID: 30980 First Published: 2013 September 25 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order notification for the recipient. The email message attempts to convince the recipient to ope...

Obad Trojan First to Spread Via Mobile Botnet

The keepers of the mobile Obad Trojan realize the window of opportunity they have to spread the malware on Android devices may be closing since the vulnerability the Trojan exploits has been patched in Android 4.3. That could explain why Kaspersky Lab researchers have spotted a recent spike in...

TRENDnet TEW-812DRU CSRF/Command Injection Root Exploit

Exploit for hardware platform in category web applications TRENDnet TEW-812DRU CSRF - Command Injection Shell Exploit. Please wait... //Request to enable port forwarding to the routers internal IP on port 23 //This exploit works without this request, but the exploit was more stable with it, so it...

ASUS RT-AC66U ACSD Remote Root Buffer Overflow

!/usr/bin/env python import signal, struct from time import sleep from socket import from sys import exit, excinfo TitleASUS RT-AC66U Remote Root Shell Exploit - acsd param command Discovered and ReportedJune 2013 Discovered/Exploited ByJacob Holcomb/Gimppy and Jacob Thompson Security Analsyts @...

Threat Outbreak Alert: Fake Order Invoice Update Notification Email Messages on July 16, 2013

Medium Alert ID: 30115 First Published: 2013 July 17 14:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a revised order invoice notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Payment Notification Email Messages on July 8, 2013

Medium Alert ID: 29979 First Published: 2013 July 9 21:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment notification for the recipient. The text in the email message attempts to convince the recipient to...

Chinese Hackers group 'Comment Crew' is still active and operating under cover

Security experts are confident that the Chinese hackers group known as Comment Crew is still operating under cover. “The Comment Crew is back again” this is the rumor within Intelligence community, researchers suspect the involvement of the group of hackers in the recent cyber dispute between U.S...

Threat Outbreak Alert: Fake Product Purchase Email Messages on June 21, 2013

Medium Alert ID: 29749 First Published: 2013 June 21 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase quotation for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on June 17, 2013

Medium Alert ID: 29695 First Published: 2013 June 18 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a copy of a money transfer notice for the recipient. The email message instructs the recipient to open the .zip...

NSA Whistleblower Snowden on PRISM, surveillance, privacy

NSA whistleblower Edward Snowden said a “continuing litany of lies” from senior U.S. leaders prompted his public uncovering of widespread surveillance of Americans’ phone calls and alleged data sharing between large technology companies and the government. In a two-hour online question-and-answer...

[DNSChef v0.2.1] DNS Proxy Relesead

DNSChef is a highly configurable DNS proxy for Penetration Testers and Malware Analysts. A DNS proxy aka “ Fake DNS “ is a tool used for application network traffic analysis among other uses. Changelog v0.2.1 It introduces IPv6 support, large number of new DNS record types, custom ports and other...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

Design/Logic Flaw

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

CVE-2012-0279

CVE-2012-0279 affects Quest Toad for Data Analysts 3.0.1. The vulnerability arises from weak permissions (Everyone: Full Control) on the %COMMONPROGRAMFILES%\Quest Shared directory, enabling local users to place a Trojan horse file and gain privileges. Root cause: overly permissive directory perm...

CVE-2012-0279

Quest Toad for Data Analysts 3.0.1 uses weak permissions Everyone: Full Control for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file...

Adobe releases open source malware classification tool

Adobe releases open source malware classification tool Adobe Systems has released a malware classification tool in order to help security incident first responders, malware analysts and security researchers more easily identify malicious binary files. The 'Adobe Malware Classifier' tool uses...