398 matches found
Microsoft Word CVE-2013-3854 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
Microsoft Word CVE-2013-3849 Remote Memory Corruption Vulnerability
Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...
MS13-061: Vulnerabilities in Microsoft Exchange Server could allow remote code execution: August 13, 2013
Resolves vulnerabilities in Microsoft Exchange Server that could allow remote code execution if a user on an affected Exchange server views a specially crafted file in an email attachment.INTRODUCTIONMicrosoft has released security bulletin MS13-061. To view the complete security bulletin, go to...
Recent Reports of DHS-Themed Ransomware (UPDATE)
US-CERT has received reports of increased activity concerning an apparently DHS-themed ransomware malware infection occurring in the wild. Users who are being targeted by the ransomware receive a message claiming that use of their computer has been suspended and that the user must pay a fine to...
Threat Outbreak Alert: Fake Bank Payment Information Email Messages on August 19, 2013
Medium Alert ID: 30204 First Published: 2013 July 24 16:26 GMT Last Updated: 2013 August 19 17:23 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank payment information for the recipient. The text in the email message...
Threat Outbreak Alert: Fake Craft Item Sales Solicitation Email Messages on July 3, 2013
Medium Alert ID: 29947 First Published: 2013 July 5 13:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a craft items presentation for the recipient. The text in the email message attempts to persuade...
Threat Outbreak Alert: Fake Invoice Attachment Email Messages on June 22, 2013
Medium Alert ID: 29751 First Published: 2013 June 24 12:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice attachment for the recipient. The text in the email message attempts to convince the recipient to open...
Threat Outbreak Alert: Fake Product Order Email Messages on June 19, 2013
Medium Alert ID: 29725 First Published: 2013 June 19 18:44 GMT Last Updated: 2013 June 20 14:13 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote for the recipient. The text in the email message...
CareerBuilder man in the browser attack
No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...
Microsoft Publisher CVE-2013-1317 Remote Integer Overflow Vulnerability
Description Microsoft Publisher is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of...
Microsoft Publisher CVE-2013-1323 Remote Code Execution Vulnerability
Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...
Osama Bin Laden-Themed Phishing
Summary The intent of this advisory is to provide general guidance to public and private sector organizations and individuals on potential targeted phishing attacks often referred to as “spear phishing” with respect to the Osama Bin Laden related media reporting, and to offer some suggested metho...
Cerb Multiple Vulnerabilities
The version of Cerb installed on the remote host is earlier than 6.2.5. It is, therefore, affected by multiple vulnerabilities: - A flaw exists in that the application does not validate input passed via HTML email attachments, making it vulnerable to XSS. An attacker could exploit this issue to...
Recent Reports of DHS-Themed Ransomware (UPDATE)
US-CERT has received reports of increased activity concerning an apparently DHS-themed ransomware malware infection occurring in the wild. Users who are being targeted by the ransomware receive a message claiming that use of their computer has been suspended and that the user must pay a fine to...
Microsoft Windows Object Linking and Embedding (OLE) Automation Remote Code Execution Vulnerability
Description Microsoft Windows Object Linking and Embedding OLE Automation is prone to a remote code-execution vulnerability due to an integer overflow error. An attacker can exploit this issue by enticing an unsuspecting user to view a malicious webpage or a specially crafted file. Successful...
Holiday Season Phishing Scams and Malware Campaigns
Since the winter holidays are quickly approaching, US-CERT is republishing this entry to increase awareness about phishing scams and malware campaigns. In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the winter holida...
Malware making bomb and death threats detected
Japanese police had arrested three people, accused them of making death threats via email and discussion forums. However, later Researchers at Symantec have determined that a piece of malware was making death and bomb threats online on behalf of its victims infected. Symantec confirmed that the...
Threat Outbreak Alert: Fake Changelog Email Messages on September 11, 2014
Medium Alert ID: 27244 First Published: 2012 October 19 18:19 GMT Last Updated: 2014 September 12 13:05 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a changelog for the recipient. The text in the email message attempt...
DNSChanger Malware
UPDATE: On March 5, 2012, a federal judge agreed to allow more time for organizations and individuals to clean systems of the DNSChanger malware and extended the deadline for shutting off servers that had been keeping infected computers connected to the internet. Although the new deadline is July...
Ongoing Targeted Attack Campaign Going After Defense, Aerospace Industries
Researchers have identified a strain of malware that’s being used in a string of targeted attacks against defense contractors, government agencies and other organizations by leveraging exploits against zero-day vulnerabilities. The attacks may have been going on since 2009 in some form and the...