Preparing for Managed Security Services

Wade Woolwine Presents at MIRcon® 2013 As a complement to my MIRcon® 2013 presentation titled "Getting the Best Bang for the Buck with Managed Security Providers" and to address some questions I received from the audience, I have prepared a quick summary of my presentation. Many businesses consid...

Threat Outbreak Alert: Fake Invoice Delivery Email Messages on November 27, 2013

Medium Alert ID: 31922 First Published: 2013 November 27 15:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an invoice for the recipient. The text in the email message attempts to convince the recipie...

Privacy, Human Rights Groups Form New Anti-Surveillance Coalition

A large group of privacy and digital rights organizations has put together a new effort to urge politicians to curtail the mass surveillance operations that have been exposed in the last few months. The new coalition has developed a set of 13 principles for governments to follow in their...

CVE-2013-4354

The API before 2.1 in OpenStack Image Registry and Delivery Service Glance makes it easier for local users to inject images into arbitrary tenants by adding the tenant as a member of the image...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on May 6, 2015

Medium Alert ID: 31863 First Published: 2013 November 21 20:35 GMT Last Updated: 2015 May 7 12:18 GMT Version: 80 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The te...

Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on November 20, 2013

Medium Alert ID: 31832 First Published: 2013 November 20 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain a package delivery failure notification. The text in the e-mail message instructs the recipient to open the...

Threat Outbreak Alert: Fake Package Delivery Failure Email Messages on November 18, 2013

Medium Alert ID: 31785 First Published: 2013 November 15 21:26 GMT Last Updated: 2013 November 18 22:42 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed package delivery notification for the...

Threat Outbreak Alert: Fake Package Delivery Information Email Messages on November 7, 2013

Medium Alert ID: 31684 First Published: 2013 November 8 17:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain package delivery information for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Fax Delivery Email Messages on November 7, 2013

Medium Alert ID: 31674 First Published: 2013 November 7 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax delivery notification for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Failed Delivery Notification Email Messages on November 5, 2013

Medium Alert ID: 31637 First Published: 2013 November 5 19:25 GMT Last Updated: 2013 November 6 15:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a failed delivery notification for the recipient. The...

Threat Outbreak Alert: Fake Fax Delivery Notification Email Messages on October 30, 2013

Medium Alert ID: 31555 First Published: 2013 October 30 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax notification for the recipient. The text in the email message attempts to convince the recipient to open...

BlackHole Toolkit v2 EXE Payload Stage Code Execution

Blackhole is a web exploit kit that operates by delivering malicious payload to the victim's computer...

CVE-2013-4428

CVE-2013-4428 affects the OpenStack Image Registry and Delivery Service (Glance) in the Folsom/Grizzly line before 2013.1.4 and Havana before 2013.2. The issue is a flaw in the download_image policy enforcement for cached system images: after an image is cached by an authorized download, any auth...

Threat Outbreak Alert: Fake Fax Delivery Email Messages on May 29, 2014

Medium Alert ID: 31491 First Published: 2013 October 25 20:03 GMT Last Updated: 2014 May 30 13:36 GMT Version: 15 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message for the recipient. The text in the email message attempts t...

USN-2003-1: Glance vulnerability

Stuart McLaren discovered that Glance did not properly enforce the 'downloadimage' policy for cached images. An authenticated user could exploit this to obtain sensitive information in an image protected by this setting...

Threat Outbreak Alert: Fake Invoice Document Delivery Email Messages on October 21, 2013

Medium Alert ID: 31401 First Published: 2013 October 22 18:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an electronic invoice for the recipient. The text in the email message attempts to convinc...

Threat Outbreak Alert: Fake Missed Delivery Notification Email Messages on October 17, 2013

Medium Alert ID: 31326 First Published: 2013 October 17 18:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed delivery attempt notification for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Package Delivery Notice Email Messages on October 18, 2013

Medium Alert ID: 31331 First Published: 2013 October 17 17:57 GMT Last Updated: 2013 October 18 13:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery failure notification for the recipient. The text in...

Threat Outbreak Alert: Fake Invoice Delivery Email Messages on October 8, 2013

Medium Alert ID: 31170 First Published: 2013 October 11 01:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain an invoice delivery email notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Package Delivery Invoice Notification Email Messages on September 25, 2013

Medium Alert ID: 30984 First Published: 2013 September 26 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a package delivery invoice notification for the recipient. The text in the email message attempts to convinc...