PT-2017-8345

Name of the Vulnerable Software and Affected Versions BlackBerry Good Control Server versions prior to 2.3.53.62 Description The issue is related to an information disclosure vulnerability in the logging implementation. This allows remote attackers to gain access to logged encryption keys by...

Powerful Extensible Wireless Drop Box: Pina Colada

Powerful Extensible Wireless Drop Box Pina Colada, a powerful and extensible wireless drop box, capable of performing a wide range of remote offensive attacks on a network. It can currently be controlled only via a command line interface, but a Command and Control remote server functionality is...

Warning! This Cross-Platform Malware Can Hack Windows, Linux and OS X Computers

Unlike specially crafted malware specifically developed to take advantage of Windows operating system platform, cyber attackers have started creating cross-platform malware for wider exploitation. Due to the rise in popularity of Mac OS X and other Windows desktop alternatives, hackers have begun...

PLC Blaster Worm Targets Industrial Control PLCs

LAS VEGAS – Security researchers at Black Hat USA described a proof-of-concept worm that targets weaknesses within automated industrial control systems used to manage critical infrastructure and manufacturing. The worm, according to OpenSource Security, has the capability to autonomously search f...

MSRT July 2016 – Cerber ransomware

As part of our ongoing effort to provide better malware protection, the July 2016 release of the Microsoft Malicious Software Removal Tool MSRT includes detection for Win32/Cerber, a prevalent ransomware family. The inclusion in MSRT complements our Cerber-specific family detections in Windows...

Inside the xDedic Hacked Server Marketplace

An underground market peddling hacked servers was a unique find, even for a seasoned researcher such as Juan Andres Guerrero-Saade of Kaspersky Lab. But there it was, xDedic.biz selling access to tens of thousands of servers for pennies on the dollar. A Russian-speaking hacker group was...

HPE Insight Control server deployment information disclosure vulnerability

HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which allows remote attackers to obtain sensitive information via unspecified vecto...

PT-2016-5909

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote attackers to modify data. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2016-4362: Undefined Security Weakness

HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

PT-2016-5910

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows local users to gain privileges via unspecified vectors. Recommendations At the moment, there is no information about a newer version that contai...

CVE-2016-4363: Improper Neutralization of Input During Web Page Generation

HPE Insight Control server deployment allows remote attackers to modify data via unspecified vectors...

PT-2016-5911

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations At the moment, there is no information about a newer...

CVE-2016-4365: Undefined Security Weakness

HPE Insight Control server deployment allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2016-5908

Name of the Vulnerable Software and Affected Versions HPE Insight Control server deployment affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information or modify data. Recommendations At the moment, there is no information about a newer...

CVE-2016-4364: Undefined Security Weakness

HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors...

Locky Gets Clever!

As discussed in an earlier FireEye blog, we have seen Locky ransomware rise to fame in recent months. Locky is aggressively distributed via a JavaScript-based downloader sent as an attachment in spam emails, and may have overshadowed the Dridex banking Trojan as the top spam contributor. FireEye...

PT-2016-3726

Name of the Vulnerable Software and Affected Versions HP Insight Control server provisioning versions prior to 7.5.0 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors. Recommendations For versions prior to 7.5.0, update to version 7.5.0 or later...

CVE-2015-6858: Exposure of Sensitive Information to an Unauthorized Actor

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

Ares - Python Botnet and Backdoor

Ares is made of two main programs: A Command aNd Control server, which is a Web interface to administer the agents An agent program, which is run on the compromised host, and ensures communication with the CNC The Web interface can be run on any server running Python. You need to install the...

GEOVAP Reliance 4 Control Server Privilege Escalation Vulnerability

GEOVAP Reliance 4 Control Server suffers from an unquoted search path issue impacting the service 'RelianceOpcDaWrapper' for Windows deployed as part of Reliance 4 SCADA/HMI system installer including Reliance OPC Server. This could potentially allow an authorized but non-privileged local user to...