Apple to Require Mac Apps to Be Sandboxed

Apple has informed developers that, as of March 2012, any app submitted to the Mac App Store will have to include a sandbox. The move is an intriguing one from Apple, which has kept a low profile on security and typically handles Mac security on its own. The statement from Apple comes at a time...

Outdated Assumptions

The term “targeted attack” gets thrown around an awful lot nowadays. In fact I’m guessing you’ll be hard pressed to find many public breach disclosures that make it to the news that aren’t labeled as having been “targeted”. It reminds me of an important quote from the character Inigo Montoya in T...

CVE-2011-1649

The Internet Streamer application in Cisco Content Delivery System CDS with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service Web Engine crash via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341...

Code injection

The Internet Streamer application in Cisco Content Delivery System CDS with software 2.5.7, 2.5.8, and 2.5.9 before build 126 allows remote attackers to cause a denial of service Web Engine crash via a crafted URL, aka Bug IDs CSCtg67333 and CSCth25341...

CVE-2011-1649

CVE-2011-1649 affects Cisco Content Delivery System (CDS) Internet Streamer Web Server. A vulnerability in the Web Engine allows an unauthenticated remote attacker to crash the Web Engine by processing specially crafted URLs, causing a denial of service. Affected CDS Internet Streamer software ve...

Cisco CDS Internet Streamer Web服务器远程拒绝服务漏洞

Bugtraq ID: 47979 CVE ID：CVE-2011-1649 Cisco Content Delivery System是一款思科公司开发的内容分发系统解决方案。 Cisco Internet Streamer应用程序是Cisco CDS中的一个组件，其WEB服务器存在一个安全漏洞，当解析特定URL时，WEB服务器引擎会崩溃。 未验证攻击者可以利用此漏洞对运行在服务引擎上的WEB服务器进行拒绝服务攻击，设备会继续工作，WEB引擎在攻击之后会重新启动。 Cisco Content Delivery System 2.5.9 Cisco Content Delivery...

Cisco Content Delivery System DoS

Internet Streamer URL processing crash...

Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability Advisory ID: cisco-sa-20110525-spcdn Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

...

Threat Outbreak Alert: Fake DHL Package Delivery Notification Email Messages on March 20, 2015

Medium Alert ID: 23104 First Published: 2011 May 9 12:53 GMT Last Updated: 2015 March 20 12:50 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL package delivery notification. The text in the email message instructs...

Threat Outbreak Alert: Fake Delivery Express Parcel Notification Email Messages on�August 25, 2015

Medium Alert ID: 22891 First Published: 2011 April 8 14:39 GMT Last Updated: 2015 August 27 13:02 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages that inform the recipient about a parcel delivery from Delivery Express. The text in the email...

[SECURITY] Fedora 15 Update: rubygem-actionmailer-3.0.5-1.fc15

Makes it trivial to test and deliver emails sent from a single service laye r...

The Challenge of Starting an Application Security Program

Since organizations started opening their internal applications to the Web, a little more than a decade ago, it became clear that the security of those connected applications would be more complex – and critical to get right – than before. Unfortunately, through complacency, perhaps a feeling tha...

New Adobe Under Zero-Day Attack !

Adobe today released an advisory to warn about a remote code execution vulnerability in Flash Player, which also affects Adobe Reader and Acrobat. This critical vulnerability has been assigned CVE-2011-0609. Currently seen attacks work through a malicious SWF file which is embedded inside an Exce...

Mutare Software EVM - CSRF and XSS Vulnerabilities

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

Mutare Software EVM 2.2.9 Cross Site Request Forgery / Cross Site Scripting

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

IC3: Internet Crime Up in 2010

Internet crime is on the rise again according to a report recently released by The Internet Crime Complaint Center IC3. The organization said last week that it received the second-highest number of complaints in its decade long history in 2010. Released on February 24, the 2010 Internet Crime...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...