PSA: New Microsoft Word 0day used in the wild

Microsoft has just patched an important vulnerability in Microsoft Word during its latest patch Tuesday cycle. According to the security firm that found it 1, this new zero-day CVE-2017-8759 was used in targeted attacks to install a piece of malware known as FinFisher. Microsoft Office has been i...

Threat Outbreak Alert RuleID30587: Email Messages Distributing Malicious Software on September 13, 2017

Medium Alert ID: 55204 First Published: 2017 September 13 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30587 may contain the following files: Name ...

PT-2017-12408

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS Software for Cisco Email Security Appliances ESAs affected versions not specified Description A vulnerability in the malware detection functionality of Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow a...

CVE-2017-12218: Improper Input Validation

A vulnerability in the malware detection functionality within Advanced Malware Protection AMP of Cisco AsyncOS Software for Cisco Email Security Appliances ESAs could allow an unauthenticated, remote attacker to cause an email attachment containing malware to be delivered to the end user. The...

Incapsula Updated Review — New Security Options, Improved Delivery and Reliability

It's been close to five years since we last looked at Incapsula, a security-focused CDN service known for its DDoS mitigation and web application security features. As one would expect, during these five years the company has expanded and improved, introducing lots of new features and even severa...

Policies and Applications are not pushing to iOS devices from Xenmobile (Proxy Enabled Environment)

The device information is not fetched completely on XenMobile and under device setting on XenMobile console we don't see any assigned delivery group. The test connectivity is successful In the Debug logs you can see : | ERROR | pool-47-thread-1 | com.notnoop.apns.internal.ApnsConnectionImpl |...

Exploit for CVE-2017-8570

Based on the provided context, here is a summary of the analysis: Classification: Exploit toolkit for CVE-2017-8570, a Microsoft Office PPSX RCE vulnerability. Primary Functionality: The toolkit generates a malicious PPSX file and delivers a payload either local or remote to the victim. Key...

“Wanna see the Game of Thrones in advance” email delivers malware

By Carolina Beware of Email promising Game of Thrones Spoilers because it This is a post from HackRead.com Read the original post: Wanna see the Game of Thrones in advance email delivers malware...

Over 500 Android Apps On Google Play Store Found Spying On 100 Million Users

Over 500 different Android apps that have been downloaded more than 100 million times from the official Google Play Store found to be infected with a malicious ad library that secretly distributes spyware to users and can perform dangerous operations. Since 90 per cent of Android apps is free to...

Spam and phishing in Q2 2017

Spam: quarterly highlights Delivery service Trojans At the start of Q2 2017, we registered a wave of malicious mailings imitating notifications from well-known delivery services. Trojan downloaders were sent out in ZIP archives, and after being launched they downloaded other malware –...

Citrix Receiver Updates Troubleshooting Guide

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Where to download ? Certain legacy Citrix tools are now available on request only. Please submit the...

Introduction to Citrix NetScaler SDX

Introduction to NetScaler SDX NetScaler SDX is a hardware-based Application Delivery Appliance for enterprise and cloud datacenters. It supports hosting of multiple NetScaler instances on a single hardware and can thus be used for the purpose of Multi-tenancy. NetScaler SDX Components 1. XenServe...

Threat Outbreak Alert RuleID30245: Email Messages Distributing Malicious Software on August 18, 2017

Medium Alert ID: 54883 First Published: 2017 August 18 15:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30245 may contain the following files: Name |...

Access and Delivery different sides of the same coin

We are often so caught up in our own realities that we miss obvious similarities or synergies. Luckily when various people look at the same situation, different perspectives emerge. I was reminded of that recently during a conversation with one of our large pharma customers. Akamai helps our...

Exploit for CVE-2017-8570

PoC exploit for CVE-2017-8570. The exploit toolkit, CVE-2017-8570, is a Python script designed to generate malicious PPSX files that can deliver payloads to users. It can be used in two scenarios: delivering local payloads or remote payloads. To deliver local payloads, the script generates a...

delivery-club.ru XSS vulnerability

Vulnerable URL: https://www.delivery-club.ru/ajax/suggest?q=m4imb%3Cimg%20src%3da%20onerror%3dalert1%3Eclarj Details: Description| Value ---|--- Patched:| Yes, at 17.08.2017 Latest check for patch:| 17.08.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

Exploit for CVE-2017-8570

Office8570 Exploit toolkit CVE-2017-8570 - v1.0 Exploit to...

Cerber ransomware delivered in format of a different order of Magnitude

As a follow up to our study into the Magnitude exploit kit and its gate which we profiled in a previous blog post, we take a look at an interesting technique used to distribute the Cerber ransomware. Exploit kits are a very effective means of serving malicious payloads and an important aspect is...

Office of the senior threat vulnerability in the wild use analysis-vulnerability warning-the black bar safety net

Office of the senior threat vulnerability background In the advanced threat attack, the hackers remote delivery invasion client the most like the vulnerability is office documents vulnerability in the just-concluded black hat conference, the best client security vulnerabilities award went to...

Threat Outbreak Alert RuleID30112: Email Messages Distributing Malicious Software on August 7, 2017

Medium Alert ID: 54776 First Published: 2017 August 7 19:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30112 may contain the following files: Name | Si...