Threat Outbreak Alert RuleID17612: Email Messages Distributing Malicious Software on August 26, 2015

Medium Alert ID: 40699 First Published: 2015 August 27 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17612 may contain the following files: Name |...

Novell GroupWise WebAccess Cross-Site Scripting (CVE-2014-0611)

A cross-site scripting vulnerability exists in Novell GroupWise WebAccess. The vulnerability is due to lack of input validation when handling email attachments. A remote, unauthenticated attacker can exploit this vulnerability by enticing a target user to view crafted web content. A successful...

Threat Outbreak Alert RuleID17014: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40192 First Published: 2015 July 28 18:07 GMT Last Updated: 2015 July 29 10:58 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17014 and...

Threat Outbreak Alert RuleID16419: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 39654 First Published: 2015 July 6 13:01 GMT Last Updated: 2015 July 23 12:37 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16419 and...

Macro-Enabled Malware Making a Comeback

Malware that uses macros as part of its infection method has been around for more than a decade, and was one of the first major techniques to drive changes at software vendors such as Microsoft. The tactic has been making a comeback of late, and Microsoft is seeing a major spike in the volume of...

SuSE 11.3 Security Update : clamav (SAT Patch Number 10016)

clamav was updated to version 0.98.5 to fix three security issues and several non-security issues. These security issues have been fixed : - Crash when scanning maliciously crafted yoda's crypter files. CVE-2013-6497 - Heap-based buffer overflow when scanning crypted PE files. CVE-2014-9050 - Cra...

Threat Outbreak Alert RuleID12122: Email Messages Distributing Malicious Software on October 27, 2014

Medium Alert ID: 36198 First Published: 2014 October 27 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12122 may contain the following files: Name |...

Threat Outbreak Alert RuleID11305: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 35462 First Published: 2014 August 28 13:03 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11305...

Horde IMP 2.2.x/3.2.x/4.0.x Email Attachments HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15730/info Horde IMP is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Sun JavaMail 1.3.2 MimeBodyPart.getFileName Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13141/info Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet. This issue was reported to affect...

Apple Mac OS X 10.5.x Mail Arbitrary Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26510/info Apple Mac OS X is prone to a vulnerability that can allow arbitrary code to run. This issue affects the Mail application when handling email attachments. Attackers can exploit this issue to execute arbitrary co...

Sun JavaMail 1.x Multiple Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13753/info Sun JavaMail is prone to multiple information disclosure vulnerabilities. The issues exist due to a lack of sufficient input sanitization performed on user-supplied requests. The following issues are reported: ...

Threat Outbreak Alert RuleID10304: Email Messages Distributing Malicious Software on June 12, 2014

Medium Alert ID: 34605 First Published: 2014 June 12 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10304 may contain the following files: Name | Siz...

Microsoft Outlook App for Android Devices Stores Emails Unencrypted on File System

If you have an account with Microsoft's popular free email service Outlook.com, and using Outlook app for Android, then there is a bad news for you. Microsoft's Android app for Outlook.com, provides users to access their Outlook emails on their Android devices, fails to provide security and...

Another Internet Explorer Zero Day Surfaces

Researchers have disclosed a new zero day vulnerability in Internet Explorer 8 that could enable an attacker to run arbitrary code on vulnerable machines via drive-by downloads or malicious attachments in email messages. The vulnerability was discovered and disclosed to Microsoft in October, but...

Apple iOS 7 Updates Silently Remove Encryption for Email Attachments

There is no question that Mobile devices have become a staple in everyday living around the world. But have you ever asked yourself, How Secure are the Android, iPhone or any other Smart devices? It is really important for us to think about the Security and Privacy of our Data stored in...

Threat Outbreak Alert: Fake Payment Processing Notification Failure Email Messages on April 28, 2014

Medium Alert ID: 33965 First Published: 2014 April 28 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing failure notification for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Purchase Invoice Email Messages on April 24, 2014

Medium Alert ID: 33928 First Published: 2014 April 24 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase invoice for the recipient. The text in the email message instructs the recipient to open a .zip...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on April 9, 2014

Medium Alert ID: 33715 First Published: 2014 April 9 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account transaction for the recipient. The text in the email message attempts to convince the recipient to...

Easter Holiday Phishing Scams and Malware Campaigns

As the Easter holiday approaches, US-CERT reminds users to stay aware of holiday scams and cyber campaigns, which may include: shipping notifications that may be phishing scams or may contain malware electronic greeting cards that may contain malware requests for charitable contributions that may...