Threat Outbreak Alert RuleID11853: Email Messages Distributing Malicious Software on October 6, 2014

Medium Alert ID: 35990 First Published: 2014 October 6 18:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11853 may contain the following files: Name |...

Confluence Security Settings not respected by Confluence Questions

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47587. panel Hi Atlassian team, in our Confluence configuration we set "User email visibility" to "only visible to site...

Malware-Laced Emails Appear to Come From LogMeIn

The SANS Internet Storm Center yesterday warned users and administrators to be on the lookout for malicious emails purporting to come from the security and authentication firm LogMeIn. For it’s part, LogMeIn is aware of the attacks, and has issued a number of warnings to its customers on its blog...

Threat Outbreak Alert RuleID11654: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35800 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11654 may contain the following files: Name ...

CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network...

UBUNTU-CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2014-6435

Name of the Vulnerable Software and Affected Versions Enigmail versions 1.7.x before 1.7.2 Description The issue allows remote attackers to obtain sensitive information by sniffing the network when encryption is enabled and only BCC recipients are specified, as emails are sent in plaintext...

Threat Outbreak Alert RuleID11287: Email Messages Distributing Malicious Software on August 27, 2014

Medium Alert ID: 35443 First Published: 2014 August 27 12:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11287 may contain the following files: Name |...

Facebook Says 95 Percent of Notification Email Encrypted

All that’s missing from the organic encrypt the web movement seems to be a hashtag. Otherwise, no one can accuse major web providers of slacking as leading players such as Microsoft and Yahoo, prompted by the Snowden leaks, have made noteworthy leaps in the last 15 months to encrypt everything fr...

Study: Uyghur Remain in Crosshairs of Targeted Attacks

It’s no secret that activists groups supporting the Uyghur and other ethnic minorities living either in exile or in oppressed nations have been in the crosshairs of targeted attacks for years. Regimes use phishing emails, other social engineering tactics, and drive-by downloads to infect computer...

Threat Outbreak Alert RuleID11047: Email Messages Distributing Malicious Software on August 11, 2014

Medium Alert ID: 35242 First Published: 2014 August 11 15:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11047 may contain the following files: Name |...

Thousands of Mozilla Developers Emails and Password Exposed Accidentally

Mozilla on Friday notified users of its Mozilla Developer Network MDN that the company has accidentally exposed the e-mail addresses and cryptographically protected passwords of thousands of Mozilla developers. The email addresses of over 76,000 members of its Developer Network, along with 4000...

Threat Outbreak Alert RuleID10859: Email Messages Distributing Malicious Software on July 30, 2014

Medium Alert ID: 35084 First Published: 2014 July 30 12:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10859 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID10791: Email Messages Distributing Malicious Software on July 25, 2014

Medium Alert ID: 35039 First Published: 2014 July 25 12:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10791 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID10638: Email Messages Distributing Malicious Software on July 13, 2014

Medium Alert ID: 34912 First Published: 2014 July 14 13:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10638 may contain the following files: Name | Siz...

Gmail App for iOS leaves Users vulnerable to Man-in-the-Middle Attacks

Google has failed to provide a very important security measure in its Gmail application for iOS that left millions of its Apple device users to Man-in-the-Middle MitM attacks capable of monitoring encrypted email communications. Researcher at mobile security firm Lacoon has discovered that Google...

Threat Outbreak Alert RuleID10520: Email Messages Distributing Malicious Software on July 2, 2014

Medium Alert ID: 34830 First Published: 2014 July 2 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10520 may contain the following files: Name | Size...

Ez Cart 1.0 - Multiple CSRF Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Cart Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

PHP-Nuke 6.0 Web Mail Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6400/info A vulnerability has been discovered in the PHP-Nuke web mail module. Due to insufficient sanitization of HTML emails it is possible for an attacker to embed script code into malicious messages. Opening an email...