January 17, 2017 – Morning Cyber Coffee Headlines – “Australian Open” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 17, 2018 - Headlines Carbon Black in the News: Confidence in legacy...

Trend Micro Champions the AWS Marketplace Channel Opportunity Registration Program

Last year, Trend Micro launched our popular Deep Security as a Service offering on the AWS Marketplace, combining industry-leading threat protection for cloud workloads, effortless deployment, and the added bonus of a unified Amazon Web Services AWS bill. This has been a successful model for...

SQL injection vulnerability in the bill.class.php page of UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the bill.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filte...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

October 21, 2017 – Morning Cyber Coffee Headlines – “British Parliament” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 21, 2017 - Headlines Carbon Black in the News: Not good: Ransomware is...

Companies Could Face $22 Million Fine If They Fail to Protect Against Hackers

Over the past few years, massive data breaches have become more frequent and so common that pretty much every week we heard about some organisation being hacked or hacker dumping tens of millions of users records. But even after this wide range of data breach incidents, many organisations fail to...

New IoT Bill Proposes Security Standards for Smart Devices

By this time, almost every one of you owns at least one internet-connected device—better known as the "Internet of things"—at your home, but how secure is your device? We have recently seen Car hacking that could risk anyone's life, Hoverboard hacking, even hacking of a so-called smart Gun and al...

Legislation Proposed to Secure Connected IoT Devices

A Senate bill introduced today would prioritize security in connected devices, requiring providers who sell to the U.S. government to implement measures that would have been an impediment to the IoT botnet-fueled attacks against DNS provider Dyn and webhost OVH. The Internet of Things Cybersecuri...

My Airtel-Recharge, Bill, Bank - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Airtel-Recharge, Bill, Bank published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID29417: Email Messages Distributing Malicious Software on June 7, 2017

Medium Alert ID: 54132 First Published: 2017 June 7 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29417 may contain the following files: Name | Size...

congress.gov XSS vulnerability

Vulnerable URL: https://www.congress.gov/bill/114th-congress/senate-bill/3542/cosponsors?q="search":"S.+3542"=1"/Style=position:fixed;top:0;left:0;font-size:999px;/Onmouseenter=confirmOPENBUGBOUNTY//"' /Style=position:fixed;top:0;left:0;font-size:999px; /Onmouseenter=confirmOPENBUGBOUNTY //...

Hack Department of Homeland Security Act Would Bring Bug Bounty Program to DHS

Hackers will soon be able to poke holes in networks and systems belonging to the Department of Homeland Security if four senators get their way and a bill is passed that would institute a DHS bug bounty similar to programs recently implemented for the Army, Air Force and Pentagon. The bill, known...

Revised Active Defense Bill Allows Victims to Recover or Destroy Stolen Data

A controversial bill that would allow organizations that have been breached to hack back has undergone revisions that include an exemption permitting victims to recover or destroy their data on an attacker’s infrastructure. Rep. Tom Graves R-GA introduced the updated Active Cyber Defense Certaint...

Bill Calls for Study of Cybersecurity Standards for Cars

A House bill was introduced Tuesday that could accelerate the federal government’s involvement in regulating automobile cybersecurity. The Security and Privacy in Your Car Study Act of 2017, authored by Reps. Ted Lieu D-Calif. and Joe Wilson R-SC, calls on the National Highway Traffic Safety...

Russia proposes 10 Year in Prison Sentence for Hackers and Malware Authors

The Russian government has introduced a draft bill that proposes prison sentences as punishment for hackers and cyber criminals creating malicious software used in targeting critical Russian infrastructure, even if they have no part in actual cyber attacks. The bill, published on the Russian...

Threat Outbreak Alert RuleID26529: Email Messages Distributing Malicious Software on November 23, 2016

Medium Alert ID: 49863 First Published: 2016 November 23 17:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26529 may contain the following files: Name |...

The new .LNK between spam and Locky infection

Just when it seems the Ransom:Win32/Locky activity has slowed down, our continuous monitoring of the ransomware family reveals a new workaround that the authors might be using to keep it going. The decline in Locky activity can be attributed to the slowdown of detections of Nemucod, which Locky...

Facebook Fixes Vulnerability That Led to Account Takeover, Pays Researcher $16K

Facebook quickly resolved a vulnerability in its Business Manager tool late last month that could have let an attacker take over any Facebook page. Arun Sureshkumar, a security researcher in India, disclosed the vulnerability Aug. 29; a member of Facebook’s security team, Neal Poole, informed him...

CVE-2016-3554

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to PC / BOM, MCAD, and Design...

Anti-Encryption Bill Released, would Kill your Privacy and Security

The United States anti-encryption bill will kill your Privacy. In the wake of the Apple vs. FBI case, two leading Intelligence Committee Senators have introduced an anti-encryption bill that would effectively ban strong encryption. Senators Richard Burr R-NC and Dianne Feinstein D-CA released the...