CVE-2016-6462

A vulnerability in the email filtering functionality of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenticated, remote attacker to bypass Advanced Malware Protection AMP filters that are configured for an affected device. This vulnerability affects all releases...

TrickBot Banking Trojan Adds New Browser Manipulation Tools

The TrickBot banking Trojan, a close relative to Dyre, has a growing target list and new browser manipulation techniques, experts at IBM X-Force said. “We expect to see it amplify infection campaigns and fraud attacks, sharpen its aim on business and corporate accounts,” wrote Limor Kessem,...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to bypass virus or spam detection systems

The vulnerability of the Microsoft Outlook email client is related to the improper implementation of the requirements specified in RFC 2046. Exploiting this vulnerability allows a malicious actor to bypass virus or spam detection systems by using specially crafted MIME data in email attachments...

CVE-2016-3366

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...

MS16-107: Description of the security update for Outlook 2016: September 13, 2016

None None...

MS16-108: Security update for Exchange Server: September 13, 2016

Resolves vulnerabilities in Exchange Server in which the most severe of the vulnerabilities could allow remote code execution in some Oracle Outside In Libraries that are built into Exchange Server. This issue might occur if an attacker sends an email message with a specially crafted attachment t...

Open-Xchange: OX (Guard): Stored Cross-Site Scripting via Email Attachment

Summary Improper handling of email attachments by "OX Guard" causes a Stored Cross-Site Scripting XSS vulnerability inside the OX "Mail" module. Injected code will be executed when the victim opens the HTML attachment of a decrypted email by using the "Open in browser" link/button. Proof of Conce...

Security Advisory - Improper Input Validation Vulnerability in AnyMail

Huawei AnyMail has an improper input validation vulnerability when opening compressed email attachments. Successful exploit could cause AnyMail to crash and exit. Vulnerability ID: HWPSIRT-2016-06099 This vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2016-6826...

Threat Outbreak Alert RuleID24199: Email Messages Distributing Malicious Software on August 11, 2016

Medium Alert ID: 48436 First Published: 2016 August 11 12:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24199 may contain the following files: Name |...

Threat Outbreak Alert RuleID24210: Email Messages Distributing Malicious Software on August 10, 2016

Medium Alert ID: 48431 First Published: 2016 August 10 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID24210 may contain the following files: Name |...

Threat Outbreak Alert RuleID15448: Email Messages Distributing Malicious Software on August 31, 2016

Medium Alert ID: 46726 First Published: 2016 June 16 20:56 GMT Last Updated: 2016 September 1 13:08 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15448 a...

Threat Outbreak Alert RuleID23216: Email Messages Distributing Malicious Software on June 1, 2016

Medium Alert ID: 46474 First Published: 2016 June 1 17:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23216 may contain the following files: Name | Size...

CVE-2016-3969

Cross-site scripting XSS vulnerability in McAfee Email Gateway MEG 7.6.x before 7.6.404, when File Filtering is enabled with the action set to ESERVICES:REPLACE, allows remote attackers to inject arbitrary web script or HTML via an attachment in a blocked email...

Threat Outbreak Alert RuleID21263: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43711 First Published: 2016 February 24 13:38 GMT Last Updated: 2016 March 9 20:46 GMT Version: 4 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21263 an...

Threat Outbreak Alert RuleID20375: Email Messages Distributing Malicious Software on January 8, 2016

Medium Alert ID: 42958 First Published: 2016 January 8 20:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20375 may contain the following files: Name |...

Threat Outbreak Alert RuleID19081: Email Messages Distributing Malicious Software on October 30, 2015

Medium Alert ID: 41816 First Published: 2015 October 30 14:38 GMT Last Updated: 2015 November 2 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19081...

Threat Outbreak Alert RuleID18523: Email Messages Distributing Malicious Software on October 7, 2015

Medium Alert ID: 41422 First Published: 2015 October 7 19:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18523 may contain the following files: Name |...

How to Detect IE Zero-day Exploit Used to Deploy Korplug Malware

Recently, Microsoft issued an Emergency patch for a zero-day vulnerability in Internet Explorer that is being exploited to deploy Korplug malware on vulnerable PCs. Korplug, a known variant of PlugX, is a Trojan that creates a backdoor used for information stealing on infected computers. In one o...

Spam Campaign Continuing to Serve Up Malicious .js Files

A malicious spam campaign that’s been doling out zipped Javascript .js files remains an issue, the SANS Internet Storm Center warns. The campaign was spotted earlier this year, but Brad Duncan, a handler for the site and researcher with Rackspace’s information security operations center, claims...

Threat Outbreak Alert RuleID17854: Email Messages Distributing Malicious Software on November 18, 2015

Medium Alert ID: 40904 First Published: 2015 September 9 12:13 GMT Last Updated: 2015 November 19 13:37 GMT Version: 11 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID178...