Scam Alert: Your Trusted Friends Can Hack Your Facebook Account

If you receive a message from any of your Facebook Friends asking for urgent help to recover their Facebook account, since they've added you as one of their 'Trusted Contacts'—just don’t blindly believe it. Researchers have detected a new Facebook phishing scam that can even trick an experienced...

Threat Outbreak Alert RuleID30948: Email Messages Distributing Malicious Software on October 12, 2017

Medium Alert ID: 55593 First Published: 2017 October 12 13:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30948 may contain the following files: Name |...

Spoofed SEC Emails Distribute Evolved DNSMessenger

This post was authored by Edmund Brumaghin, Colin Grady, with contributions from Dave Maynor and @Simpo13.Executive SummaryCisco Talos previously published research into a targeted attack that leveraged an interesting infection process using DNS TXT records to create a bidirectional command and...

Disqus Hacked: More than 17.5 Million Users' Details Stolen in 2012 Breach

Another day, Another data breach disclosure. This time the popular commenting system has fallen victim to a massive security breach. Disqus, the company which provides a web-based comment plugin for websites and blogs, has admitted that it was breached 5 years ago in July 2012 and hackers stole...

Mail.ru: Stored XSS when you read eamils. <style>

Hello team, I have found stored XSS when you read emails via html tag. PoC: div background-image: url"data:image/jpg;base64,"; background-color: cccccc; lol F226715...

Threat Outbreak Alert RuleID30776: Email Messages Distributing Malicious Software on October 5, 2017

Medium Alert ID: 55520 First Published: 2017 October 5 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30776 may contain the following files: Name |...

Hubei Radio and Television Station Yangtze River Cloud Android APP suffers from overstepping access vulnerability

Yangtze River Cloud Android APP is a news and information software created by Hubei Radio and Television Station, which integrates the three functions of government affairs, news and information, and life services. A vulnerability exists in the Hubei Radio and Television Changjiang Cloud Android...

Tragic-Event-Related Scams

In the wake of Sunday's tragic event in Las Vegas, US-CERT warns users to be watchful for various malicious cyber activity targeting both victims and potential donors. Users should exercise caution when handling emails that relate to the event, even if those emails appear to originate from truste...

Deloitte Hacked

The large accountancy firm Deloitte was hacked, losing client e-mails and files. The hackers had access inside the company's networks for months. Deloitte is doing its best to downplay the severity of this hack, but Brian Krebs reports that the hack "involves the compromise of all administrator...

CVE-2014-8878

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network...

Information Leakage Vulnerability in CTG's EZH Mobile APP

EZHI Mobile AP is a one-stop human resources services handheld application platform, covering personnel services, health management, flexible benefits and other business areas, providing online human resources services for registered users and the employees they serve. There is an information...

Threat Outbreak Alert RuleID30734: Email Messages Distributing Malicious Software on September 26, 2017

Medium Alert ID: 55386 First Published: 2017 September 26 18:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30734 may contain the following files: Name ...

Deloitte Hacked — Cyber Attack Exposes Clients' Emails

Another day, another data breach. This time one of the world's "big four" accountancy firms has fallen victim to a sophisticated cyber attack. Global tax and auditing firm Deloitte has confirmed the company had suffered a cyber attack that resulted in the theft of confidential information,...

EternalBlue Exploit Used in Retefe Banking Trojan Campaign

Criminals behind the Retefe banking Trojan have added a new component to their malware that uses the NSA exploit EternalBlue. The update makes Retefe the latest malware family to adopt the SMBv1 attack against a patched Windows vulnerability, and could signal an emerging trend, said researchers a...

Linux Trojan Using Hacked IoT Devices to Send Spam Emails

Botnets, like Mirai, that are capable of infecting Linux-based internet-of-things IoT devices are constantly increasing and are mainly designed to conduct Distributed Denial of Service DDoS attacks, but researchers have discovered that cybercriminals are using botnets for mass spam mailings. New...

SUSE SLED12 / SLES12 Security Update : emacs (SUSE-SU-2017:2529-1)

This update for emacs fixes one issues. This security issue was fixed : - CVE-2017-14482: Remote code execution via mails with 'Content-Type: text/enriched' bsc1058425 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenabl...

SugarCRM Documents and Emails Module SQL Injection Vulnerability

SugarCRM is the United States SugarCRM company's set of open source customer relationship management system CRM. Documents and Emails module is one of the modules. documents is a document management module. emails is an e-mail module. A SQL injection vulnerability exists in the Documents and Emai...

Sql injection

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 and Sugar Community Edition 6.5.26. Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection, as demonstrated by a...

CVE-2017-14508

An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 and Sugar Community Edition 6.5.26. Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection, as demonstrated by a...

sugarcrm -- multiple vulnerabilities

sugarcrm developers report: An issue was discovered in SugarCRM before 7.7.2.3, 7.8.x before 7.8.2.2, and 7.9.x before 7.9.2.0 and Sugar Community Edition 6.5.26. Several areas have been identified in the Documents and Emails module that could allow an authenticated user to perform SQL injection,...